40efbe2f4106c08661b909734455cbad6724539e730d8a88e8ca4d3922ef06ca

Sharing

Copy URL Twitter E-mail

General

Target

40efbe2f4106c08661b909734455cbad6724539e730d8a88e8ca4d3922ef06ca
Size

161KB
MD5

815e47eacfe7c1a37f8862ddf248b7bd
SHA1

aa9f0c708395f511f98b94bba696eea1cf83f42a
SHA256

40efbe2f4106c08661b909734455cbad6724539e730d8a88e8ca4d3922ef06ca
SHA512

8f81e647612930199463014191f23f92da74dc44b7e36b870b991bc6d3ce6e67bff25def6bd604153e03ecadec37bc5399be78706995f06b3c5ecd49c08ade4d
SSDEEP

3072:+EkdZcNY+lHkEHg7rBC0mEfiY/KwSODlOYZs9H21+:fkTJ+JPHg7rcCiyJAd21+

Score

N/A

Malware Config

Signatures

Files

40efbe2f4106c08661b909734455cbad6724539e730d8a88e8ca4d3922ef06ca
.exe windows x86

99d3aaf1b0f292f1959fe557a386baa4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:b4:d9:2c:db:bc:4d:35:f7:96:eb:93:94:cb:f8:3d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

11/09/2009, 00:00

Not After

01/10/2012, 23:59

Subject

CN=ArcaBit Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=ArcaBit,O=ArcaBit Ltd.,L=Warsaw,ST=Warsaw,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

68:9f:9d:61:fa:13:09:e9:c9:77:63:e4:35:81:8d:53:4e:b9:eb:69
Signer

Actual PE Digest

68:9f:9d:61:fa:13:09:e9:c9:77:63:e4:35:81:8d:53:4e:b9:eb:69

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ArcaBit Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=ArcaBit,O=ArcaBit Ltd.,L=Warsaw,ST=Warsaw,C=PL

15/10/2009, 10:36
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetLastError
VirtualAlloc
lstrcmpiW
GetEnvironmentStringsA
GetPrivateProfileIntW
GlobalAlloc
CopyFileA

cmutil

SzToWzWithAlloc
CmFmtMsgA
CmStrTrimW
CmStrchrA

user32

SetWindowTextA
RedrawWindow
OpenDesktopW
OemToCharA
GetTitleBarInfo
GetMessageTime
GetAsyncKeyState
SetSystemCursor
TranslateMDISysAccel
ValidateRgn
wvsprintfW
CharUpperBuffA
AlignRects
DialogBoxIndirectParamW
DragDetect
IsWinEventHookInstalled
CharToOemW
DestroyAcceleratorTable
UserRealizePalette
DdeAbandonTransaction
RealChildWindowFromPoint
SetCursorContents
GetIconInfo
LoadLocalFonts
ExcludeUpdateRgn
RemovePropW
EnumPropsExA
DeviceEventWorker
CharUpperA
GetAltTabInfoA
CharLowerBuffW
AppendMenuA
GetWindowLongA
GetClassNameA
SetDlgItemTextW
SetClipboardData
DdeConnect
SendMessageTimeoutW
DisplayExitWindowsWarnings
LoadMenuA
MessageBoxExW
RecordShutdownReason
GetMonitorInfoW
GetCaretBlinkTime
SetCaretBlinkTime
DdeQueryNextServer
DdeAddData
SetUserObjectInformationW
OpenWindowStationA
SetDlgItemInt
DrawTextA
OpenDesktopA
DdeUninitialize
PaintDesktop
SetRect
SetWindowRgn
SetMenuInfo
SendNotifyMessageW
IsWindowInDestroy
LockSetForegroundWindow
EnumWindowStationsW
UnhookWinEvent
SubtractRect
GetWindowTextLengthW
SetMenuContextHelpId
MenuWindowProcW
IsDialogMessage
SendInput
GetParent
RegisterMessagePumpHook
WinHelpW
BroadcastSystemMessage
GetKeyboardState
CharToOemBuffA
UnpackDDElParam
InSendMessage
GetSysColor
FindWindowA
MsgWaitForMultipleObjects
DdeEnableCallback
SetUserObjectInformationA
EnterReaderModeHelper
GetWindow
GetWindowRgn
SetWindowsHookW
UserHandleGrantAccess
ValidateRect
DrawTextExA
ImpersonateDdeClientWindow
CreateDialogParamW
SetDebugErrorLevel
GetOpenClipboardWindow
DdeAccessData
MessageBoxIndirectW
CopyIcon
CalcMenuBar
SetMessageExtraInfo
GetLastActivePopup
DdeUnaccessData
RemovePropA
SendIMEMessageExA
DdeDisconnect
SetWindowWord

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 118KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99d3aaf1b0f292f1959fe557a386baa4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

11:b4:d9:2c:db:bc:4d:35:f7:96:eb:93:94:cb:f8:3dCertificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

61:0c:12:06:00:00:00:00:00:1bCertificate

Key Usages

68:9f:9d:61:fa:13:09:e9:c9:77:63:e4:35:81:8d:53:4e:b9:eb:69Signer

Signature Validations

Verification

15/10/2009, 10:36 Valid: false

Headers

File Characteristics

Imports

kernel32

cmutil

user32

Sections

.text Size: 21KB - Virtual size: 20KB

.data Size: 118KB - Virtual size: 2.0MB

.rdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 80KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

11:b4:d9:2c:db:bc:4d:35:f7:96:eb:93:94:cb:f8:3d
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

68:9f:9d:61:fa:13:09:e9:c9:77:63:e4:35:81:8d:53:4e:b9:eb:69
Signer

15/10/2009, 10:36
Valid: false

.text
Size: 21KB - Virtual size: 20KB

.data
Size: 118KB - Virtual size: 2.0MB

.rdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 80KB