643658802f675e9990912a93ccc87f6f

Sharing

Copy URL Twitter E-mail

General

Target

643658802f675e9990912a93ccc87f6f
Size

62KB
MD5

643658802f675e9990912a93ccc87f6f
SHA1

a9d50c99136da67140b8077605bd47805d72dbda
SHA256

140c37e227472fa5bc25825b8764d72764374b6bb5aefa634d4a8f3f59812f59
SHA512

92ac5f4edf455f6bc21e320296d43e2229dfa20fe63368c4ed7e03c8bcdf1eb0245660c55bb3401b733ebe88b1b95ce76e0987ebe39b956aaa989215f2fe304d
SSDEEP

1536:FrKEBvRG7IE/kWkMm+kDjHz66x8ljDAMIonIg7TUVeR:FrXBv07cEm+knHz66iljDAMIonIg7TwK

Score

1^/10

Malware Config

Signatures

Files

643658802f675e9990912a93ccc87f6f
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

93:96:d2:c1:59:bc:1b:12:61:c6:a3:97:a6:16:8f:a6
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

20/10/2014, 00:00

Not After

20/10/2015, 23:59

Subject

CN=Titanium Great Minds,O=Titanium Great Minds,POSTALCODE=2025,STREET=Dasoupoli Strovolos+STREET=Athinodorou 3,L=Nicosia,ST=Cyprus,C=CY

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

82:fe:12:3d:f1:d3:86:d3:b7:89:12:ba:a4:42:73:83:92:bf:21:9e
Signer

Actual PE Digest

82:fe:12:3d:f1:d3:86:d3:b7:89:12:ba:a4:42:73:83:92:bf:21:9e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

93:96:d2:c1:59:bc:1b:12:61:c6:a3:97:a6:16:8f:a6Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

82:fe:12:3d:f1:d3:86:d3:b7:89:12:ba:a4:42:73:83:92:bf:21:9eSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 56KB - Virtual size: 55KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

93:96:d2:c1:59:bc:1b:12:61:c6:a3:97:a6:16:8f:a6
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

82:fe:12:3d:f1:d3:86:d3:b7:89:12:ba:a4:42:73:83:92:bf:21:9e
Signer

.text
Size: 56KB - Virtual size: 55KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B