b578b10835ee18472277390e7957e462bb272f3e50518bb325f10eca17cb4ed1

Sharing

Copy URL Twitter E-mail

General

Target

b578b10835ee18472277390e7957e462bb272f3e50518bb325f10eca17cb4ed1
Size

6KB
MD5

6d58c4c9e3f20e7d66325614bc7ea15e
SHA1

c646d4c93fd2b28df547679a5462dfe9fcdd0f81
SHA256

b578b10835ee18472277390e7957e462bb272f3e50518bb325f10eca17cb4ed1
SHA512

326202e300be916d41a69d1bbbdf5261befcabbbdf9ba7956f98cb4d4c213029421d97ab5235ffc6f874cb99026e72b678f28464bc37c7aab2e08dd03abc8fdb
SSDEEP

96:4d5r6BQiAV/HuB1z1Vf4wEz7yMhtjv9cIN6d405ZhD:C6XQOB92yMrj6IN+PN

Score

N/A

Malware Config

Signatures

Files

b578b10835ee18472277390e7957e462bb272f3e50518bb325f10eca17cb4ed1
.dll windows x86

c9ddf845a27c6c9159f4a67286190b6e

Code Sign

99:b9:8c:ad:cf:9d:65:44:8d:e0:89:aa:09:7d:a3:ec
Certificate

Issuer

CN=VerfGuard,OU=VerfGuard,O=VerfGuard,L=Fergant,C=BW

Not Before

05/07/2012, 00:00

Not After

04/07/2013, 23:59

Subject

CN=VerfGuard,OU=VerfGuard,O=VerfGuard,L=Fergant,C=BW

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
lstrlenA
CloseHandle

user32

CallNextHookEx

Exports

Exports

BigGuard
CloseGuard
SetGuard

Sections

.text
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9ddf845a27c6c9159f4a67286190b6e

Code Sign

99:b9:8c:ad:cf:9d:65:44:8d:e0:89:aa:09:7d:a3:ecCertificate

Extended Key Usages

Key Usages

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 972B

.rdata Size: 512B - Virtual size: 368B

.data Size: 512B - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 136B

99:b9:8c:ad:cf:9d:65:44:8d:e0:89:aa:09:7d:a3:ec
Certificate

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

.text
Size: 1024B - Virtual size: 972B

.rdata
Size: 512B - Virtual size: 368B

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 136B