4acfa8b825f1d54e4232b8233e0a2706

Sharing

Copy URL Twitter E-mail

General

Target

4acfa8b825f1d54e4232b8233e0a2706
Size

3.8MB
MD5

4acfa8b825f1d54e4232b8233e0a2706
SHA1

11b5e6d0f016437497a64ff987e42ab9c6308c62
SHA256

947129afd6d18e8f3caefb3a238592f694feca41530d5fee58b918ba227225fe
SHA512

21290360fc8491ff171354ab37ad6686f12bedd6f20adf5609cd0af462a2a8c1d633245593033f698f5f77df22ce009aeca761afe56447449fe9a0579eb3c8b0
SSDEEP

98304:pYdZtB/aIswYwNZvCWZ7gKK2qXsD8OYbNXMB:ADbsKZaWZMZ2rdeNXMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Crack/Dvd.PixPlay.3.02_Crk.exe

Files

4acfa8b825f1d54e4232b8233e0a2706
.rar
Crack/Dvd.PixPlay.3.02_Crk.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

MEW
Size: - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�uۊ��
Size: 104KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pixplay.exe
.exe windows:1 windows x86 arch:x86

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

18:d0:4d:8a:5e:81:ba:19:5b:92:68:a5:fa:68:b3:ce
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

21/09/2006, 00:00

Not After

20/09/2008, 23:59

Subject

CN=Xequte Software,O=Xequte Software,POSTALCODE=NA,STREET=Manners St+STREET=PO Box 11-301,L=Wellington,ST=NA,C=NZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

cb:be:c4:77:ad:f6:e3:db:69:8b:13:c5:0f:ae:c1:c3:a1:d8:86:1e
Signer

Actual PE Digest

cb:be:c4:77:ad:f6:e3:db:69:8b:13:c5:0f:ae:c1:c3:a1:d8:86:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
下载说明.htm
.html .js polyglot

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

MEW Size: - Virtual size: 200KB

�uۊ�� Size: 104KB - Virtual size: 164KB

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

18:d0:4d:8a:5e:81:ba:19:5b:92:68:a5:fa:68:b3:ceCertificate

Extended Key Usages

Key Usages

cb:be:c4:77:ad:f6:e3:db:69:8b:13:c5:0f:ae:c1:c3:a1:d8:86:1eSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 36KB - Virtual size: 35KB

DATA Size: 1024B - Virtual size: 584B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 10KB - Virtual size: 10KB

MEW
Size: - Virtual size: 200KB

�uۊ��
Size: 104KB - Virtual size: 164KB

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

18:d0:4d:8a:5e:81:ba:19:5b:92:68:a5:fa:68:b3:ce
Certificate

cb:be:c4:77:ad:f6:e3:db:69:8b:13:c5:0f:ae:c1:c3:a1:d8:86:1e
Signer

CODE
Size: 36KB - Virtual size: 35KB

DATA
Size: 1024B - Virtual size: 584B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 10KB - Virtual size: 10KB