13a76e298665267866b0aedc7a0ed9fd862db10f8a4ac032978b41c101e638a1

Sharing

Copy URL Twitter E-mail

General

Target

13a76e298665267866b0aedc7a0ed9fd862db10f8a4ac032978b41c101e638a1
Size

5.3MB
MD5

7526ee78241a123812c270d3ef2913f8
SHA1

cccd7b998e3e768694af53586c5b89a07d4ea776
SHA256

13a76e298665267866b0aedc7a0ed9fd862db10f8a4ac032978b41c101e638a1
SHA512

d36b778f9c9d6407be6fc6dfdbe51100471ab01822e0fb4836614a97f9529f61b06228b4c21cc5cda1f1109c067d7ccf63329f20ce7ec47609c9f4939e8a0825
SSDEEP

98304:/X2hRjqtnE9wLk/5KDJXtm1W8Woh2r/pm2fQJhuG3JrPwODZhMLuW3eb:/X6qtS6JXtm1W/r/42fYo6PCuWOb

Score

1^/10

Malware Config

Signatures

Files

13a76e298665267866b0aedc7a0ed9fd862db10f8a4ac032978b41c101e638a1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0a:73:1d:92:d3:10:04:78:b4:83:f3:20:dd:68:3f:6b
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/07/2015, 00:00

Not After

30/12/2015, 12:00

Subject

CN=Karpuk Raman Nickolaevich,O=Karpuk Raman Nickolaevich,L=Minsk,C=BY

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:9b:f3:db:cc:81:9e:73:5f:ad:5b:00:b4:d8:a9:9c
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

16/07/2015, 00:00

Not After

19/07/2016, 12:00

Subject

SERIALNUMBER=192466850,CN=Karpuk Raman Nickolaevich,O=Karpuk Raman Nickolaevich,POSTALCODE=220056,STREET=st. Vodolazhskogo 8a-37,L=Minsk,C=BY,1.3.6.1.4.1.311.60.2.1.3=#13024259,2.5.4.15=#130f427573696e65737320456e74697479

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:f2:8d:b5:fb:a9:f3:20:04:a6:b0:52:70:c3:d0:99:c0:c8:f4:82:5e:7b:ae:ae:30:85:1d:64:e6:a5:62:e5
Signer

Actual PE Digest

2b:f2:8d:b5:fb:a9:f3:20:04:a6:b0:52:70:c3:d0:99:c0:c8:f4:82:5e:7b:ae:ae:30:85:1d:64:e6:a5:62:e5

Digest Algorithm

sha256

PE Digest Matches

true

63:30:c2:65:e2:cf:4a:89:fe:9e:57:44:57:6b:f2:62:ce:5a:d3:3f
Signer

Actual PE Digest

63:30:c2:65:e2:cf:4a:89:fe:9e:57:44:57:6b:f2:62:ce:5a:d3:3f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

NewActive.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 387B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0a:73:1d:92:d3:10:04:78:b4:83:f3:20:dd:68:3f:6bCertificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5fCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

08:9b:f3:db:cc:81:9e:73:5f:ad:5b:00:b4:d8:a9:9cCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

2b:f2:8d:b5:fb:a9:f3:20:04:a6:b0:52:70:c3:d0:99:c0:c8:f4:82:5e:7b:ae:ae:30:85:1d:64:e6:a5:62:e5Signer

63:30:c2:65:e2:cf:4a:89:fe:9e:57:44:57:6b:f2:62:ce:5a:d3:3fSigner

Headers

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 5.3MB - Virtual size: 5.3MB

.sdata Size: 512B - Virtual size: 387B

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 12B

0a:73:1d:92:d3:10:04:78:b4:83:f3:20:dd:68:3f:6b
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

08:9b:f3:db:cc:81:9e:73:5f:ad:5b:00:b4:d8:a9:9c
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

2b:f2:8d:b5:fb:a9:f3:20:04:a6:b0:52:70:c3:d0:99:c0:c8:f4:82:5e:7b:ae:ae:30:85:1d:64:e6:a5:62:e5
Signer

63:30:c2:65:e2:cf:4a:89:fe:9e:57:44:57:6b:f2:62:ce:5a:d3:3f
Signer

.text
Size: 5.3MB - Virtual size: 5.3MB

.sdata
Size: 512B - Virtual size: 387B

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 12B