DjvuReader_2[.]0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

DjvuReader_2.0.exe
Size

984KB
MD5

2720d9124cba7200cb04798cb47fba9b
SHA1

9b83527c8809604f95de55e5caaa5490ff2ff729
SHA256

579802cb564f445e67ae096633e864fdb5f38c568e59c29b72683dc5fc68795e
SHA512

51acb24cb452adeef23665adc1d4d014f50844d68d4a45d5faae33cb9aa23164dc61d6272e3de3e2330c38cbf888bf609ba08290681e4420ec689551f536a077
SSDEEP

12288:9WSYRKry7LQk/U9is+FWTNn1B2VnF0XkAb7Acia4NLDjC7TIGHZoEPm0R:9WpKOB/Zsk81B20Xks7709a7cG5/R

Score

1^/10

Malware Config

Signatures

Files

DjvuReader_2.0.exe
.exe windows:4 windows x86 arch:x86

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bc:29:15:f4:44:1b:9d:8a:c3:4d:01:05:8c:89:ea:e7
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

26/08/2015, 00:00

Not After

25/08/2016, 23:59

Subject

CN=\"IKO-PROF\"\, OOO,O=\"IKO-PROF\"\, OOO,POSTALCODE=192019,STREET=2-y Luch\, 16 Ofis\, 45,L=Saint-Petersburg,ST=Saint-Petersburg,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

63:57:bf:61:c2:d1:99:ea:fb:8f:f7:ff:e7:4a:03:6d:a2:a8:db:45
Signer

Actual PE Digest

63:57:bf:61:c2:d1:99:ea:fb:8f:f7:ff:e7:4a:03:6d:a2:a8:db:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 454KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 438KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

bc:29:15:f4:44:1b:9d:8a:c3:4d:01:05:8c:89:ea:e7Certificate

Extended Key Usages

Key Usages

63:57:bf:61:c2:d1:99:ea:fb:8f:f7:ff:e7:4a:03:6d:a2:a8:db:45Signer

Headers

File Characteristics

Sections

CODE Size: 454KB - Virtual size: 456KB

DATA Size: 9KB - Virtual size: 16KB

.idata Size: 5KB - Virtual size: 8KB

.rdata Size: 438KB - Virtual size: 440KB

.rsrc Size: 71KB - Virtual size: 71KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

bc:29:15:f4:44:1b:9d:8a:c3:4d:01:05:8c:89:ea:e7
Certificate

63:57:bf:61:c2:d1:99:ea:fb:8f:f7:ff:e7:4a:03:6d:a2:a8:db:45
Signer

CODE
Size: 454KB - Virtual size: 456KB

DATA
Size: 9KB - Virtual size: 16KB

.idata
Size: 5KB - Virtual size: 8KB

.rdata
Size: 438KB - Virtual size: 440KB

.rsrc
Size: 71KB - Virtual size: 71KB