e0a0f6ecc5d66b53cf1e7a484d9b7768

Sharing

Copy URL

Twitter E-mail

General

Target

e0a0f6ecc5d66b53cf1e7a484d9b7768
Size

3.5MB
MD5

e0a0f6ecc5d66b53cf1e7a484d9b7768
SHA1

4056284e02222f8f8c4262cd25214781fccf2db8
SHA256

d1f8ff2c4f72cafbde48901e8177cf3e2e1ef250c5f1cb32c4fffe3dcd2b25e2
SHA512

09df355368b505c5c5319cb3b01024fa0d14c40e8898a9b6c2f2b76ea2332a16e306f985599a8c4231bba5a87697235a9118fd7946d535d9c8d2d5d37e6c33a7
SSDEEP

49152:s/UGa8ZRR9LKblxU0pzinqgKYAiQNCTkhEK6KkwTHUWndMDrWzAWWJKo5fTTR1gl:shvR9ul/iqVrE5okeH/eSAd3U1b

Score

1^/10

Malware Config

Signatures

Files

e0a0f6ecc5d66b53cf1e7a484d9b7768
.rar
lastpass.exe
.exe windows:5 windows x86 arch:x86

e901f020f62e0efa16ad3e96355a43af

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3f:69:fb:a2:46:a7:64:da:9d:fb:76:ef:43:c3:76:79
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

04-09-2008 00:00

Not After

04-09-2011 23:59

Subject

CN=LastPass,O=LastPass,POSTALCODE=22180,STREET=103 Moore Ave SE,L=Vienna,ST=Virginia,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

51:57:ea:2c:83:f7:2c:ed:5a:c3:18:d3:3d:f2:fb:8c:35:14:30:76
Signer

Actual PE Digest

51:57:ea:2c:83:f7:2c:ed:5a:c3:18:d3:3d:f2:fb:8c:35:14:30:76

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\cygwin\home\joe\wxlastpass\Release\lastpass.pdb

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

wininet

InternetCrackUrlW

userenv

GetUserProfileDirectoryW

user32

DdeFreeStringHandle

gdi32

Polygon

comdlg32

ChooseFontW

advapi32

CryptHashData

shell32

SHBrowseForFolderW

ole32

CoInitialize

oleaut32

SysFreeString

comctl32

ImageList_Draw

crypt32

CryptUnprotectData

Sections

.text
Size: 3.5MB - Virtual size: 45.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

e901f020f62e0efa16ad3e96355a43af

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

3f:69:fb:a2:46:a7:64:da:9d:fb:76:ef:43:c3:76:79Certificate

Extended Key Usages

Key Usages

51:57:ea:2c:83:f7:2c:ed:5a:c3:18:d3:3d:f2:fb:8c:35:14:30:76Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

wininet

userenv

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

crypt32

Sections

.text Size: 3.5MB - Virtual size: 45.9MB

.rsrc Size: 67KB - Virtual size: 68KB

.reloc Size: 512B - Virtual size: 512B

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

3f:69:fb:a2:46:a7:64:da:9d:fb:76:ef:43:c3:76:79
Certificate

51:57:ea:2c:83:f7:2c:ed:5a:c3:18:d3:3d:f2:fb:8c:35:14:30:76
Signer

.text
Size: 3.5MB - Virtual size: 45.9MB

.rsrc
Size: 67KB - Virtual size: 68KB

.reloc
Size: 512B - Virtual size: 512B