260d119c9e8bda5551c500dde4b443e7

Sharing

Copy URL Twitter E-mail

General

Target

260d119c9e8bda5551c500dde4b443e7
Size

6.9MB
MD5

260d119c9e8bda5551c500dde4b443e7
SHA1

1786a75c2d92ceb155c2ac26f7902d6c3205aa5d
SHA256

5b83d9b43450307565445fe7e15a652c5c3fee2117213cea5dc70b5c3a8f220c
SHA512

89e521c6815af0322b86664b6b97e3f41ad936478e3dc06d6719bd267424243886f1552b022442020f852970343dba096c52f617a73d044facf4e8e21b1b6cc3
SSDEEP

196608:mhkxBSdck44+HHrWxHUmXKIjqVVCNn0UiC5bLWXq8mUrkbJ:m6sU4sLYUm66qVVCNngavWr4

Score

1^/10

Malware Config

Signatures

Files

260d119c9e8bda5551c500dde4b443e7
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Code Sign

01
Certificate

Issuer

CN=Trusted Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Trusted Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

59:3e:5b:7b:e9:8b:0b:a9:2c:c0:ee:59:0d:7a:a9:7a
Certificate

Issuer

CN=Comodo Code Signing CA,O=Comodo CA Limited,C=GB

Not Before

14/12/2004, 00:00

Not After

14/12/2006, 23:59

Subject

CN=Forte Internet Software\, Inc.,OU=Internet Services,O=Forte Internet Software\, Inc.,POSTALCODE=92013-1477,STREET=P.O. Box 131477,L=Carlsbad,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ca:10:50:c4:75:ba:cc:df:06:3b:3c:6b:ee:7f:82:f8
Certificate

Issuer

CN=Trusted Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

15/07/2004, 00:00

Not After

14/07/2014, 23:59

Subject

CN=Comodo Code Signing CA,O=Comodo CA Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81638d02019c0bfcaaf23a9c69f2f12c

Code Sign

01Certificate

Key Usages

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

59:3e:5b:7b:e9:8b:0b:a9:2c:c0:ee:59:0d:7a:a9:7aCertificate

Extended Key Usages

Key Usages

ca:10:50:c4:75:ba:cc:df:06:3b:3c:6b:ee:7f:82:f8Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 512B - Virtual size: 510B

.rdata Size: 1024B - Virtual size: 533B

.data Size: 512B - Virtual size: 20B

.rsrc Size: 6.9MB - Virtual size: 6.9MB

01
Certificate

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

59:3e:5b:7b:e9:8b:0b:a9:2c:c0:ee:59:0d:7a:a9:7a
Certificate

ca:10:50:c4:75:ba:cc:df:06:3b:3c:6b:ee:7f:82:f8
Certificate

.text
Size: 512B - Virtual size: 510B

.rdata
Size: 1024B - Virtual size: 533B

.data
Size: 512B - Virtual size: 20B

.rsrc
Size: 6.9MB - Virtual size: 6.9MB