162a9efa9fc82ff1dc2b7570b156beca90865d851a2cb3ebdd51470f9225d04a

Sharing

Copy URL Twitter E-mail

General

Target

162a9efa9fc82ff1dc2b7570b156beca90865d851a2cb3ebdd51470f9225d04a
Size

49KB
MD5

64c28f0900ec9baadc9d2776245b278d
SHA1

ae0ef64fe778a5bcd0a5c9eedeb5482f4fcfbcdd
SHA256

162a9efa9fc82ff1dc2b7570b156beca90865d851a2cb3ebdd51470f9225d04a
SHA512

3cdc5c5e989c80cab0ef5955b04ef6c834b641dbd0e6c5bdb5cc9f8877bc8dad3111a5f3984d7b92577b689f77a567c738867906881f162a4bb155bf4e26b46a
SSDEEP

1536:mdCNMJbTCCCCCCCCCCgCCCCCCCCCCCCCtnUMpTzN:mdj3CCCCCCCCCCgCCCCCCCCCCCCCDdx

Score

N/A

Malware Config

Signatures

Files

162a9efa9fc82ff1dc2b7570b156beca90865d851a2cb3ebdd51470f9225d04a
.exe windows x86

f2670860f7ce2ab76a526aafb19dd4b1

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2009, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:f5:80:fb:2e:ae:5b:14:d6:00:2c:29:69:81:09:e9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

08/10/2004, 00:00

Not After

08/10/2005, 23:59

Subject

CN=America Online\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=WAOL Firewall Trust v1,O=America Online\, Inc.,L=Dulles,ST=Virginia,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

_onexit
__dllonexit
strcat
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_splitpath
strrchr
strncpy
memset
strstr
memcpy
strcpy
_controlfp

user32

FindWindowA
SetForegroundWindow
SendMessageA
wsprintfA
CharLowerBuffA
CharNextA
LoadStringA

kernel32

GlobalHandle
GlobalUnlock
GlobalFree
CreateProcessA
WritePrivateProfileStringA
GetLocalTime
CreateEventA
WaitForSingleObject
Process32First
Process32Next
CreateToolhelp32Snapshot
Module32First
Module32Next
OpenMutexA
Sleep
CreateMutexA
GetLastError
CloseHandle
GetProfileStringA
lstrcmpiA
WriteProfileStringA
lstrlenA
lstrcpynA
GlobalAlloc
lstrcatA
lstrcpyA
SetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GlobalLock

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2670860f7ce2ab76a526aafb19dd4b1

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0aCertificate

Extended Key Usages

Key Usages

54:f5:80:fb:2e:ae:5b:14:d6:00:2c:29:69:81:09:e9Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

msvcr71

user32

kernel32

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 28KB - Virtual size: 26KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Certificate

54:f5:80:fb:2e:ae:5b:14:d6:00:2c:29:69:81:09:e9
Certificate

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 28KB - Virtual size: 26KB