1[.]0[.]154_chromesetup_154_59[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

1.0.154_chromesetup_154_59.exe
Size

8.4MB
MD5

e11e70ba243800626d17e3ffa6c9fb71
SHA1

5d2af9b1cf073963450b449177dab9eaac1585d7
SHA256

f0ffb4eb4baa73672a2390097d2a7fc1e2dd94a99f20992984ea408cacbd5c17
SHA512

06d0de74d1c4fbf47a1cbb878882fa330501e134649db3499d8d9a42ec3a7df8274b28aae3fa56ef9255c1daa219cf8e2795f84da7430ec959f19daa27491f91
SSDEEP

196608:uCBPqMsUrtT+q7uDZhZN3dujhwrT6C+CuQHrDj+Fo:nPqMLh6TZVdGhX+LDjx

Score

1^/10

Malware Config

Signatures

Files

1.0.154_chromesetup_154_59.exe
.exe windows:4 windows x86 arch:x86

eb94d28b39b6544176cf2243fd0dfe20

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

31:44:c0:6a:6c:fb:50:76:c1:5d:39:95:72:c6:94:21
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

19-06-2007 00:00

Not After

18-06-2010 23:59

Subject

CN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6c:9b:0c:12:96:18:45:0c:00:c1:21:bf:88:b0:ca:2d:18:17:8b:4d
Signer

Actual PE Digest

6c:9b:0c:12:96:18:45:0c:00:c1:21:bf:88:b0:ca:2d:18:17:8b:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mini_installer_full.pdb

Imports

shell32

CommandLineToArgvW

shlwapi

StrStrW

kernel32

lstrlenW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
DeleteFileW
lstrcatW
lstrcmpiW
GetLastError
lstrcpyW
EnumResourceNamesW
LocalFree
GetModuleFileNameW
GetCommandLineW
RemoveDirectoryW
CreateDirectoryW
GetLongPathNameW
GetTempFileNameW
GetTempPathW
ExitProcess
GetModuleHandleW
FindResourceW
SizeofResource
WriteFile
CreateFileW
LockResource
LoadResource

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb94d28b39b6544176cf2243fd0dfe20

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

31:44:c0:6a:6c:fb:50:76:c1:5d:39:95:72:c6:94:21Certificate

Extended Key Usages

Key Usages

6c:9b:0c:12:96:18:45:0c:00:c1:21:bf:88:b0:ca:2d:18:17:8b:4dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shell32

shlwapi

kernel32

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: - Virtual size: 4B

.rsrc Size: 8.4MB - Virtual size: 8.4MB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

31:44:c0:6a:6c:fb:50:76:c1:5d:39:95:72:c6:94:21
Certificate

6c:9b:0c:12:96:18:45:0c:00:c1:21:bf:88:b0:ca:2d:18:17:8b:4d
Signer

.text
Size: 4KB - Virtual size: 3KB

.data
Size: - Virtual size: 4B

.rsrc
Size: 8.4MB - Virtual size: 8.4MB