d46129d009bd4a451dad841599688ffc

Sharing

Copy URL Twitter E-mail

General

Target

d46129d009bd4a451dad841599688ffc
Size

705KB
MD5

d46129d009bd4a451dad841599688ffc
SHA1

bea5c99676c651d6448c1e86d82f8952d82d89cc
SHA256

398a25102906ad11706b9d8f00ecf35f0f61b4849d2a297bcf2b1c729de6b0db
SHA512

0ff2a2a10d38f6f93b9203cf39da1608d524f2e1db1e1eea19473b967447ad8795153df486393464fa3724eaa48b44269a8388aa76b6b9d7770778e76f7bab51
SSDEEP

12288:OJewJZ1l751aTqNVaZZubUOVDvfyWjsWmA58eHeaB1ZDM:OJHNldEuXhvlgWmA5nHeaBPDM

Score

1^/10

Malware Config

Signatures

Files

d46129d009bd4a451dad841599688ffc
.exe windows:4 windows x86 arch:x86

Code Sign

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:23

Not After

11/08/2018, 20:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

92:ef:bb:87:72:36:63:8d:dc:2a:c4:db:0c:db:17:39:24:ad:32:72:a8:39:2f:7b:26:34:2c:1e:58:67:bc:7f
Signer

Actual PE Digest

92:ef:bb:87:72:36:63:8d:dc:2a:c4:db:0c:db:17:39:24:ad:32:72:a8:39:2f:7b:26:34:2c:1e:58:67:bc:7f

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 112KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

92:ef:bb:87:72:36:63:8d:dc:2a:c4:db:0c:db:17:39:24:ad:32:72:a8:39:2f:7b:26:34:2c:1e:58:67:bc:7fSigner

Headers

File Characteristics

Sections

.text Size: 60KB - Virtual size: 58KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 260KB - Virtual size: 256KB

.enigma1 Size: 112KB - Virtual size: 4KB

.enigma2 Size: 248KB - Virtual size: 248KB

33:00:00:01:74:69:de:10:8b:37:65:a8:d7:00:00:00:00:01:74
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

92:ef:bb:87:72:36:63:8d:dc:2a:c4:db:0c:db:17:39:24:ad:32:72:a8:39:2f:7b:26:34:2c:1e:58:67:bc:7f
Signer

.text
Size: 60KB - Virtual size: 58KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 260KB - Virtual size: 256KB

.enigma1
Size: 112KB - Virtual size: 4KB

.enigma2
Size: 248KB - Virtual size: 248KB