b48e8ecb2fae2487d0f9aea812c4d332

Sharing

Copy URL Twitter E-mail

General

Target

b48e8ecb2fae2487d0f9aea812c4d332
Size

399KB
MD5

b48e8ecb2fae2487d0f9aea812c4d332
SHA1

73e582fa04cf4aede761752edd65adfb4bb9d558
SHA256

db9b26ff130d2d1081d9d25b70a116e5ce0eee1c61d58063f6fb2fdf75ad02d1
SHA512

0a6d388f93c9905581ddc9597ed9258e132e84bcfd5c6732a368798b66aca3edfa1c92ea47aae5d399cef609813eeb0fbfaaaed4f0ffa64c3cbc87dd0deed926
SSDEEP

12288:7UDa12RAKvPnI4SQQf7V7V5ZH/cxmscpPbEQ5Mk9UdOwiF0Bycg:oaEoVQQf7VTZUeEQ5MvOFKg

Score

1^/10

Malware Config

Signatures

Files

b48e8ecb2fae2487d0f9aea812c4d332
.gz
sample
.tar
fg680far.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

90:f7:a8:de:5d:28:37:33:23:91:fb:42:82:84:91:3a
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

07/10/2008, 00:00

Not After

07/10/2011, 23:59

Subject

CN=Dynamic Internet Technology Inc.,O=Dynamic Internet Technology Inc.,POSTALCODE=27519,STREET=2731 NC Highway 55\, Box# 240,L=Cary,ST=NC,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 375KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fg_far.dll
.dll windows:4 windows x86 arch:x86

e07e00e45407ff0dd6abc9eaa981fa7b

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

90:f7:a8:de:5d:28:37:33:23:91:fb:42:82:84:91:3a
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

07/10/2008, 00:00

Not After

07/10/2011, 23:59

Subject

CN=Dynamic Internet Technology Inc.,O=Dynamic Internet Technology Inc.,POSTALCODE=27519,STREET=2731 NC Highway 55\, Box# 240,L=Cary,ST=NC,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
malloc
_adjust_fdiv
free

Sections

.text
Size: 4KB - Virtual size: 350B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09d0478591d4f788cb3e5ea416c25237

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

90:f7:a8:de:5d:28:37:33:23:91:fb:42:82:84:91:3aCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 375KB - Virtual size: 780KB

.rsrc Size: 17KB - Virtual size: 20KB

e07e00e45407ff0dd6abc9eaa981fa7b

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

90:f7:a8:de:5d:28:37:33:23:91:fb:42:82:84:91:3aCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

msvcrt

Sections

.text Size: 4KB - Virtual size: 350B

.rdata Size: 4KB - Virtual size: 138B

.data Size: 4KB - Virtual size: 36B

.rsrc Size: 24KB - Virtual size: 21KB

.reloc Size: 4KB - Virtual size: 144B

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

90:f7:a8:de:5d:28:37:33:23:91:fb:42:82:84:91:3a
Certificate

.text
Size: 375KB - Virtual size: 780KB

.rsrc
Size: 17KB - Virtual size: 20KB

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

90:f7:a8:de:5d:28:37:33:23:91:fb:42:82:84:91:3a
Certificate

.text
Size: 4KB - Virtual size: 350B

.rdata
Size: 4KB - Virtual size: 138B

.data
Size: 4KB - Virtual size: 36B

.rsrc
Size: 24KB - Virtual size: 21KB

.reloc
Size: 4KB - Virtual size: 144B