8ffe79d7e86da8dd2fd5908053b2d1ff

Sharing

Copy URL

Twitter E-mail

General

Target

8ffe79d7e86da8dd2fd5908053b2d1ff
Size

79KB
MD5

8ffe79d7e86da8dd2fd5908053b2d1ff
SHA1

78131aa57241addb844a6d89940c66047c32eacb
SHA256

c4785ef64991e8e55d395a4ccdab39e87e69243228398db99fd187f36a4f9f36
SHA512

00f3b8394d521ca4f4876a5960ab428c5ccce1b809676186189a4f9c1b50ac910b8bd908483db444359361252f094023e0b76d1bc702b162200b54c6b36963d6
SSDEEP

1536:+16bq+91nioxizwglsP5XZFzCDnhat2zWim4qaq9e4VjuM+qtZleL60eY0Z/N:Qx2Ri8g+P5Xi/wXhbILmY0Z/N

Score

1^/10

Malware Config

Signatures

Files

8ffe79d7e86da8dd2fd5908053b2d1ff
.exe windows:5 windows x86 arch:x86

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-10-2008 21:24

Not After

22-01-2010 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9f:44:bf:44:4f:17:b8:3e:2b:20:e0:77:08:0f:ed:ed:c3:b1:2d:d7
Signer

Actual PE Digest

9f:44:bf:44:4f:17:b8:3e:2b:20:e0:77:08:0f:ed:ed:c3:b1:2d:d7

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PEPack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xpr01
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:06:27:81:00:00:00:00:00:08Certificate

Extended Key Usages

Key Usages

61:49:7c:ed:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

9f:44:bf:44:4f:17:b8:3e:2b:20:e0:77:08:0f:ed:ed:c3:b1:2d:d7Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 21KB - Virtual size: 36KB

.data Size: 512B - Virtual size: 8KB

.rsrc Size: 45KB - Virtual size: 60KB

.PEPack Size: 6KB - Virtual size: 8KB

.xpr01 Size: - Virtual size: 4KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:06:27:81:00:00:00:00:00:08
Certificate

61:49:7c:ed:00:00:00:00:00:05
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

9f:44:bf:44:4f:17:b8:3e:2b:20:e0:77:08:0f:ed:ed:c3:b1:2d:d7
Signer

.text
Size: 21KB - Virtual size: 36KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 45KB - Virtual size: 60KB

.PEPack
Size: 6KB - Virtual size: 8KB

.xpr01
Size: - Virtual size: 4KB