InSpectre[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

InSpectre.exe
Size

135KB
MD5

c84398c852fd276ada0434ff28617dff
SHA1

4a0e0f4e1a2fd3c7b1dbcd14c07f9cb060790731
SHA256

615bcb71dcd0f22b5c9aff6ff942d8fc97de61c133624a198a0caaa3e354d2b4
SHA512

e5d6ea757ad5c8857160a97f6b1a220cc91e02fd87ed7c3aabc4aed0c22b76d0eaa33301c14009e42c36bda8da9bc824d780ca572da2616c376ae2e9c8516267
SSDEEP

3072:TxxPGrlqO+NDWQ+WMqoQpFWzqSlxmWA0Z:lUrrQ+WMMFWzqSnt

Score

1^/10

Malware Config

Signatures

Files

InSpectre.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Code Sign

03:5f:7e:bd:ac:f2:2e:fe:d5:8c:d2:24:2c:66:b0:60
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15/04/2019, 00:00

Not After

20/04/2022, 12:00

Subject

SERIALNUMBER=C1411812,CN=Gibson Research Corporation,OU=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:1f:bd:c2:6b:f5:a6:97:e7:04:b8:5b:9f:bb:81:be
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17/01/2024, 00:00

Not After

20/11/2026, 23:59

Subject

SERIALNUMBER=1411812,CN=Gibson Research Corporation,O=Gibson Research Corporation,L=Laguna Niguel,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

18:fe:c4:41:c5:f0:3f:36:24:f4:fc:16:1f:1a:fa:41:49:10:fc:e7:e9:13:a3:c0:29:b8:ca:49:99:82:18:50
Signer

Actual PE Digest

18:fe:c4:41:c5:f0:3f:36:24:f4:fc:16:1f:1a:fa:41:49:10:fc:e7:e9:13:a3:c0:29:b8:ca:49:99:82:18:50

Digest Algorithm

sha256

PE Digest Matches

true

18:fe:c4:41:c5:f0:3f:36:24:f4:fc:16:1f:1a:fa:41:49:10:fc:e7:e9:13:a3:c0:29:b8:ca:49:99:82:18:50
Signer

Actual PE Digest

18:fe:c4:41:c5:f0:3f:36:24:f4:fc:16:1f:1a:fa:41:49:10:fc:e7:e9:13:a3:c0:29:b8:ca:49:99:82:18:50

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 17KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

09d0478591d4f788cb3e5ea416c25237

Code Sign

03:5f:7e:bd:ac:f2:2e:fe:d5:8c:d2:24:2c:66:b0:60Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

07:1f:bd:c2:6b:f5:a6:97:e7:04:b8:5b:9f:bb:81:beCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

18:fe:c4:41:c5:f0:3f:36:24:f4:fc:16:1f:1a:fa:41:49:10:fc:e7:e9:13:a3:c0:29:b8:ca:49:99:82:18:50Signer

18:fe:c4:41:c5:f0:3f:36:24:f4:fc:16:1f:1a:fa:41:49:10:fc:e7:e9:13:a3:c0:29:b8:ca:49:99:82:18:50Signer

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 17KB - Virtual size: 160KB

.rsrc Size: 100KB - Virtual size: 100KB

03:5f:7e:bd:ac:f2:2e:fe:d5:8c:d2:24:2c:66:b0:60
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

07:1f:bd:c2:6b:f5:a6:97:e7:04:b8:5b:9f:bb:81:be
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

18:fe:c4:41:c5:f0:3f:36:24:f4:fc:16:1f:1a:fa:41:49:10:fc:e7:e9:13:a3:c0:29:b8:ca:49:99:82:18:50
Signer

18:fe:c4:41:c5:f0:3f:36:24:f4:fc:16:1f:1a:fa:41:49:10:fc:e7:e9:13:a3:c0:29:b8:ca:49:99:82:18:50
Signer

.text
Size: 17KB - Virtual size: 160KB

.rsrc
Size: 100KB - Virtual size: 100KB