SecuriteInfo[.]com[.]FileRepPup[.]13924[.]2370[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.FileRepPup.13924.2370.exe
Size

427KB
MD5

84acfc17591b282a117fd3a005d22ee7
SHA1

ab012ef794640c4d5f5e47f7f4f515cb3aec837a
SHA256

348ad20fec7eacd400b35730d19f4af439554503335a854143a85011e34b8418
SHA512

93de54a99a4e70b02b4b2a6dfa08567aeee48836c7707a98e58d189ae350bedc8eafdf85dc951af906293c83ce71ba79d9074696220f9d4caebfb9880f701e0f
SSDEEP

12288:+UAOTRYAOFvJ8y1en4KGsS2nPAlGH6/Ryb:NRBy1e4KGePYZyb

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.FileRepPup.13924.2370.exe
.exe windows:5 windows x86 arch:x86

4bfa6e825a4206816ed8756369bf3f15

Code Sign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

02/01/2020, 00:00

Not After

06/01/2023, 12:00

Subject

CN=Playtech PLC,O=Playtech PLC,L=Douglas,C=IM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:4e:20:08:68:ac:72:53:1c:59:70:d3:6e:21:ed:82
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

27/01/2022, 00:00

Not After

27/01/2023, 23:59

Subject

CN=Playtech Software Limited,O=Playtech Software Limited,L=Douglas,C=IM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:d3:f3:7c:83:ad:4a:bd:d1:20:63:a1:69:65:02:ae:dd:a4:1f:35:0f:2f:1e:82:5b:49:b0:31:1f:0a:bc:8b
Signer

Actual PE Digest

0f:d3:f3:7c:83:ad:4a:bd:d1:20:63:a1:69:65:02:ae:dd:a4:1f:35:0f:2f:1e:82:5b:49:b0:31:1f:0a:bc:8b

Digest Algorithm

sha256

PE Digest Matches

true

6c:fe:fd:94:ce:4a:0a:61:17:9c:2b:d9:b3:66:06:71:a2:d1:53:6a
Signer

Actual PE Digest

6c:fe:fd:94:ce:4a:0a:61:17:9c:2b:d9:b3:66:06:71:a2:d1:53:6a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

wsock32

inet_addr

wintrust

WinVerifyTrustEx

wininet

HttpOpenRequestA

shlwapi

SHDeleteKeyW

version

VerQueryValueW

user32

CharLowerW

gdi32

SetBkMode

advapi32

RegSetValueExW

shell32

SHBrowseForFolderW

ole32

CoCreateInstance

oleaut32

SysAllocString

comctl32

ord17

Sections

.text
Size: 360KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4bfa6e825a4206816ed8756369bf3f15

Code Sign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

02:4e:20:08:68:ac:72:53:1c:59:70:d3:6e:21:ed:82Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

0f:d3:f3:7c:83:ad:4a:bd:d1:20:63:a1:69:65:02:ae:dd:a4:1f:35:0f:2f:1e:82:5b:49:b0:31:1f:0a:bc:8bSigner

6c:fe:fd:94:ce:4a:0a:61:17:9c:2b:d9:b3:66:06:71:a2:d1:53:6aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wsock32

wintrust

wininet

shlwapi

version

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 360KB - Virtual size: 1.5MB

.rsrc Size: 51KB - Virtual size: 52KB

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

04:1c:df:b7:c1:3c:e5:4b:19:3d:a9:f6:49:1d:eb:a1
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

02:4e:20:08:68:ac:72:53:1c:59:70:d3:6e:21:ed:82
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0f:d3:f3:7c:83:ad:4a:bd:d1:20:63:a1:69:65:02:ae:dd:a4:1f:35:0f:2f:1e:82:5b:49:b0:31:1f:0a:bc:8b
Signer

6c:fe:fd:94:ce:4a:0a:61:17:9c:2b:d9:b3:66:06:71:a2:d1:53:6a
Signer

.text
Size: 360KB - Virtual size: 1.5MB

.rsrc
Size: 51KB - Virtual size: 52KB