4a58ea9b03216d0ef78e2cf222f871ba

Sharing

Copy URL Twitter E-mail

General

Target
4a58ea9b03216d0ef78e2cf222f871ba
Size 111KB
Sample240108-d9215aaecr
SHA256 1646faac79f1b824c20423a1d18abd5600ee76fb9a456878c33f605c975ce4bd
MD5 4a58ea9b03216d0ef78e2cf222f871ba
SHA1 0b32d9685b41d7c01581c0cc4c9820c8e5155d93
SHA512 93750c3336f6b6c7d1d931b909ab4be4039f033b79bb3318da894b4917ef2faa0e72900acfddde0886a76fc19527101ed8553f648da6a1531ed4b3d8dc260b1d
SSDEEP 1536:UxJywe6LQnYBhdxfxOVIJOJdGVncKpVckkpY9Vflnha5HQ5iIPOqxY1Wvme:qBBDrOro/Vq40iWqxkW+e
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4a58ea9b03216d0ef78e2cf222f871ba

.exe 111KB

4a58ea9b03216d0ef78e2cf222f871ba

IMPHASH 1c4cc7142cfcd33a235dae0d09f7af42
SHA256 1646faac79f1b824c20423a1d18abd5600ee76fb9a456878c33f605c975ce4bd
MD5 4a58ea9b03216d0ef78e2cf222f871ba
SHA1 0b32d9685b41d7c01581c0cc4c9820c8e5155d93
SHA512 93750c3336f6b6c7d1d931b909ab4be4039f033b79bb3318da894b4917ef2faa0e72900acfddde0886a76fc19527101ed8553f648da6a1531ed4b3d8dc260b1d
SSDEEP 1536:UxJywe6LQnYBhdxfxOVIJOJdGVncKpVckkpY9Vflnha5HQ5iIPOqxY1Wvme:qBBDrOro/Vq40iWqxkW+e
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

32:48:68:66:97:32:ef:d3:85:83:78:dc:00:9a:bc:2e:67:4c:1e:7b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=InfiniNet,O=InfiniNet,L=Santa Monica,ST=California,C=US

Chains

Jun 13, 2015

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=InfiniNet,O=InfiniNet,L=Santa Monica,ST=California,C=US

Serial Number

65:da:8a:b7:76:75:eb:83:a3:98:36:07:28:6d:3e:85

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 23, 2015 - Jun 21, 2016

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

Major OS version

Entry point

29159

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle GetProcAddress GetModuleFileNameW InterlockedDecrement LoadLibraryW FreeLibrary OpenProcess SetErrorMode GetCommandLineW Sleep GetConsoleWindow lstrcmpW SizeofResource LockResource LoadResource FindResourceW FindResourceExW FlushFileBuffers CreateFileW WriteConsoleW SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer GetStringTypeW MultiByteToWideChar LCMapStringW WideCharToMultiByte RtlUnwind GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter LocalFree GetLastError HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection EncodePointer DecodePointer GetModuleHandleW ExitProcess HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId IsProcessorFeaturePresent WriteFile GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate

user32

FindWindowExW GetClassNameW GetWindowThreadProcessId SendMessageTimeoutW RegisterWindowMessageW CharLowerBuffW EnumChildWindows

ole32

CoInitializeEx CLSIDFromString

oleaut32

SysFreeString SysAllocString VarBstrCmp SysStringLen GetErrorInfo

psapi

GetModuleBaseNameW EnumProcessModules

Sharing

General

Malware Config

Signatures

File Explorer

4a58ea9b03216d0ef78e2cf222f871ba

PE Signature issue

kernel32

user32

ole32

oleaut32

psapi

generic