0e4a6cf363ccb53973b2d5f81a591f00N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0e4a6cf363ccb53973b2d5f81a591f00N.exe
Size

11KB
MD5

0e4a6cf363ccb53973b2d5f81a591f00
SHA1

5b6397742c011cb153bc170e5c410dff0ae6ada2
SHA256

1ef9e9b28332db4ffb9d92e30755e68c7b6f924afa5d7de2f9203d9c2770166f
SHA512

8c44c8346a413b3175f218bcd48d6d7f10d7215b62a28f4ba733297e9b03dcf4fbe3faa121411083da9716d17830311e91dc77afa3586a67c7a1a6e4eb325951
SSDEEP

192:gcIkYo0TCgQ3e7e630nvDd4Ke9LxBC/yMrj6WCD21+g2YIE/Nh5H:g2h3W0nLdL+rMCWCi0wXH

Score

1^/10

Malware Config

Signatures

Files

0e4a6cf363ccb53973b2d5f81a591f00N.exe
.dll windows:5 windows x86 arch:x86

cba72a76a54eddd4c12bd10442e130cd

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1c:2a:6c:36:74:f6:24:56:61:c7:76:e4:66:eb:84:c9
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/08/2010, 00:00

Not After

24/08/2013, 23:59

Subject

CN=Pelikan Software KFT,O=Pelikan Software KFT,POSTALCODE=1025,STREET=Zoldko u. 4/a,L=Budapest,ST=Budapest,C=HU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e8:ca:a9:2c:08:16:d0:f2:22:df:7f:83:49:f9:7e:96:cf:e2:22:9a
Signer

Actual PE Digest

e8:ca:a9:2c:08:16:d0:f2:22:df:7f:83:49:f9:7e:96:cf:e2:22:9a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedDecrement
InterlockedIncrement

pecore

?ivAlloc@@YGPAXI@Z
?ivFree@@YGXPAX@Z
?Init@pe_value@@QAGXI@Z
??1pe_value@@QAE@XZ
?strncmp@pe@@YGHPBD0I@Z
?Range@pe_Flt2d@@UAG_N_N@Z
?IsTypeOf@pe_Flt2d@@UAG_NABUpe_GUID@@@Z
?QueryInterface@pe_Flt2d@@UAGJABUpe_GUID@@PAPAX@Z
?CreateInterface@@YGJABUpe_GUID@@PAPAX@Z
?SetValue@ivUnknown@@UAGJIAAVpe_value@@@Z
?GetValue@ivUnknown@@UAGJIAAVpe_value@@@Z
?Release@ivUnknown@@UAGIXZ
?AddRef@ivUnknown@@UAGIXZ
??0ivUnknown@@QAE@XZ
?pe_Error@@YAXPBDZZ

Exports

Exports

pe_entrypoint

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 298B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cba72a76a54eddd4c12bd10442e130cd

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

1c:2a:6c:36:74:f6:24:56:61:c7:76:e4:66:eb:84:c9Certificate

Extended Key Usages

Key Usages

e8:ca:a9:2c:08:16:d0:f2:22:df:7f:83:49:f9:7e:96:cf:e2:22:9aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

pecore

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: - Virtual size: 4B

.reloc Size: 512B - Virtual size: 298B

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

1c:2a:6c:36:74:f6:24:56:61:c7:76:e4:66:eb:84:c9
Certificate

e8:ca:a9:2c:08:16:d0:f2:22:df:7f:83:49:f9:7e:96:cf:e2:22:9a
Signer

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: - Virtual size: 4B

.reloc
Size: 512B - Virtual size: 298B