MyPhoneExplorer portable[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

MyPhoneExplorer portable.exe
Size

6.3MB
MD5

8b622a2123e572d913bf8f9e438127fa
SHA1

befac2a0850cb5e3fa67c7efdd663331ed5bf977
SHA256

b39c7da03af9acc25fb6e7bcc89280188333d827737fb910dd7cb7069d944cbe
SHA512

4d91398039aa2a14787ceb19d70741ed152f9ed06cf86e27a4065d18d1f24cb53163a34a47a76ff4b443b93cbf7dcbf6d4baa58b52e6f4aacedb0080ab5d0f6d
SSDEEP

98304:5dilt8c+61d0bcfmHDuLqSTfhZZggJwf29x17W/s:5dij8E1ObdHDuLqSTfhZnJwf29x17V

Score

1^/10

Malware Config

Signatures

Files

MyPhoneExplorer portable.exe
.exe windows:4 windows x86 arch:x86

9f197504edb0a2e64422a07cd98bd2d0

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:f2:e7:a4:f0:5c:1f:f6:1b:6f:5f:65
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

02/05/2021, 20:16

Not After

19/02/2023, 10:43

Subject

CN=Franz Josef Wechselberger,O=Franz Josef Wechselberger,L=Hainzenberg,ST=Tirol,C=AT

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:44

Not After

08/05/2033, 07:44

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8d:4e:63:0c:bb:b5:95:96:c0:5f:a4:c5:00:6b:39:1b:90:85:16:5b
Signer

Actual PE Digest

8d:4e:63:0c:bb:b5:95:96:c0:5f:a4:c5:00:6b:39:1b:90:85:16:5b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

EVENT_SINK_GetIDsOfNames
ord587
ord588
ord696
ord698
MethCallEngine
EVENT_SINK_Invoke
ord516
ord518
ord626
ord519
ord552
ord553
ord660
ord661
ord662
ord663
ord556
ord557
ord558
Zombie_GetTypeInfo
ord591
EVENT_SINK2_Release
ord592
ord593
ord300
ord594
ord301
ord595
ord302
ord596
ord303
ord598
ord305
ord599
ord306
ord705
ord520
ord307
ord706
ord308
ord707
ord522
ord309
ord524
ord631
ord709
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
ord561
DllFunctionCall
ord670
ord563
ord568
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord313
ord712
ord314
ord606
ord315
ord607
ord714
ord316
ord715
ord608
ord531
ord716
ord532
ord717
ord319
ord534
ProcCallEngine
ord535
ord537
ord644
ord645
ord538
ord539
ord647
ord570
ord648
ord571
ord572
ord573
EVENT_SINK2_AddRef
ord681
ord685
ord100
ord610
ord320
ord321
ord614
ord616
ord617
ord618
ord619
ord542
ord650
ord543
ord544
ord652
ord545
ord546
ord547
ord580
ord581

Sections

.text
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f197504edb0a2e64422a07cd98bd2d0

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

6f:f2:e7:a4:f0:5c:1f:f6:1b:6f:5f:65Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1dCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

8d:4e:63:0c:bb:b5:95:96:c0:5f:a4:c5:00:6b:39:1b:90:85:16:5bSigner

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 6.2MB - Virtual size: 6.2MB

.data Size: - Virtual size: 232KB

.rsrc Size: 128KB - Virtual size: 125KB

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

6f:f2:e7:a4:f0:5c:1f:f6:1b:6f:5f:65
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

8d:4e:63:0c:bb:b5:95:96:c0:5f:a4:c5:00:6b:39:1b:90:85:16:5b
Signer

.text
Size: 6.2MB - Virtual size: 6.2MB

.data
Size: - Virtual size: 232KB

.rsrc
Size: 128KB - Virtual size: 125KB