f7b7d51191cd063c6e9d78296618459b24c459065064e54ac7a702e8efc24df4

Sharing

Copy URL Twitter E-mail

General

Target

f7b7d51191cd063c6e9d78296618459b24c459065064e54ac7a702e8efc24df4
Size

518KB
MD5

0a3581de193081c79bf3a5ec4682efa0
SHA1

375b111e4d27ff58cf0cff2fa2ac1fd4b492d8fa
SHA256

f7b7d51191cd063c6e9d78296618459b24c459065064e54ac7a702e8efc24df4
SHA512

a22c172647bfbc748abc3c40519761f355f4116b70211d6a93e7f664bb374fb328ef28aacdf7cb6c04af9d916f74a3b21dbcfba0799f1b9d4e53c48656c02cb5
SSDEEP

12288:I/GX9Rx3BsdNZcKZ98tO/tHbZs3X3kTKHOXAOLvPaV6BjvrEH7I:BX9Rx3BasKZ98tO/tHbZs3X3qKHOXA7S

Score

N/A

Malware Config

Signatures

Files

f7b7d51191cd063c6e9d78296618459b24c459065064e54ac7a702e8efc24df4
.dll windows x86

e3dccf9073b6839b56ee10a460ca9732

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

17:d6:5a:5e:06:5f:b7:f5:92:36:ac:f6:fe:fd:93:69
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

02/12/2011, 00:00

Not After

01/12/2013, 23:59

Subject

CN=Hithink Flush Information Network Co.\,Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Hithink Flush Information Network Co.\,Ltd.,L=Hangzhou,ST=zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4f:93:52:57:b5:0b:48:0f:9a:b8:e0:d4:25:57:ec:93:7d:5c:40:07
Signer

Actual PE Digest

4f:93:52:57:b5:0b:48:0f:9a:b8:e0:d4:25:57:ec:93:7d:5c:40:07

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Hithink Flush Information Network Co.\,Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Hithink Flush Information Network Co.\,Ltd.,L=Hangzhou,ST=zhejiang,C=CN

14/12/2011, 05:26
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
GetCurrentProcessId
GlobalMemoryStatus
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetTickCount
QueryPerformanceCounter
GetSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
CreateMutexA
WaitForSingleObject
ReleaseMutex
CreateEventA
SetEvent
ResetEvent
GetLastError
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
GetTimeZoneInformation
GetLocalTime
RtlUnwind
GetCommandLineA
GetVersion
HeapReAlloc
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer
InterlockedDecrement
InterlockedIncrement
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
Sleep
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
FlushFileBuffers
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW

Exports

Exports

asn1D_PKIAccessDescription
asn1D_PKIAdministrationDomainName
asn1D_PKIAlgorithmIdentifier
asn1D_PKIAttribute
asn1D_PKIAttributeTypeAndValue
asn1D_PKIAttribute_values
asn1D_PKIAttributes
asn1D_PKIAttributesSyntax
asn1D_PKIAuthenticatedSafe
asn1D_PKIAuthorityInfoAccessSyntax
asn1D_PKIAuthorityKeyIdentifier
asn1D_PKIBIGINT
asn1D_PKIBaseCRLNumber
asn1D_PKIBaseDistance
asn1D_PKIBasicConstraintsSyntax
asn1D_PKIBuiltInDomainDefinedAttribute
asn1D_PKIBuiltInDomainDefinedAttributes
asn1D_PKIBuiltInStandardAttributes
asn1D_PKICPSuri
asn1D_PKICRLBag
asn1D_PKICRLDistPointsSyntax
asn1D_PKICRLExtension
asn1D_PKICRLExtensions
asn1D_PKICRLNumber
asn1D_PKICRLReason
asn1D_PKICRLSequence
asn1D_PKICertBag
asn1D_PKICertPolicyId
asn1D_PKICertificate
asn1D_PKICertificateList
asn1D_PKICertificateList_toBeSigned
asn1D_PKICertificateList_toBeSigned1
asn1D_PKICertificateList_toBeSigned_revokedCertificates_element
asn1D_PKICertificatePoliciesSyntax
asn1D_PKICertificateRevocationLists
asn1D_PKICertificateSerialNumber
asn1D_PKICertificate_toBeSigned
asn1D_PKICertificate_toBeSigned1
asn1D_PKICertificates
asn1D_PKICertificationRequest
asn1D_PKICertificationRequestInfo
asn1D_PKICertificationRequestInfo_version
asn1D_PKICommonName
asn1D_PKIContentEncryptionAlgorithmIdentifier
asn1D_PKIContentInfo
asn1D_PKIContentType
asn1D_PKICountryName
asn1D_PKIDHParameter
asn1D_PKIData
asn1D_PKIDigest
asn1D_PKIDigestAlgorithmIdentifier
asn1D_PKIDigestAlgorithmIdentifiers
asn1D_PKIDigestEncryptionAlgorithmIdentifier
asn1D_PKIDigestInfo
asn1D_PKIDigestedData
asn1D_PKIDigestedData_version
asn1D_PKIDisplayText
asn1D_PKIDistributionPoint
asn1D_PKIDistributionPointName
asn1D_PKIDomainParameters
asn1D_PKIDss_Parms
asn1D_PKIDss_Sig_Value
asn1D_PKIEDIPartyName
asn1D_PKIEDIPartyName_nameAssigner
asn1D_PKIEDIPartyName_partyName
asn1D_PKIEncryptedContent
asn1D_PKIEncryptedContentInfo
asn1D_PKIEncryptedData
asn1D_PKIEncryptedData_version
asn1D_PKIEncryptedDigest
asn1D_PKIEncryptedKey
asn1D_PKIEncryptedPrivateKeyInfo
asn1D_PKIEntryExtension
asn1D_PKIEntryExtensions
asn1D_PKIEnvelopedData
asn1D_PKIEnvelopedData_version
asn1D_PKIExtendedCertificate
asn1D_PKIExtendedCertificateOrCertificate
asn1D_PKIExtendedCertificatesAndCertificates
asn1D_PKIExtendedNetworkAddress
asn1D_PKIExtendedNetworkAddress_e163_4_address
asn1D_PKIExtension
asn1D_PKIExtensionAttribute
asn1D_PKIExtensionAttributes
asn1D_PKIExtensionORAddressComponents
asn1D_PKIExtensionPhysicalDeliveryAddressComponents
asn1D_PKIExtensions
asn1D_PKIGeneralName
asn1D_PKIGeneralName_otherName
asn1D_PKIGeneralNames
asn1D_PKIGeneralSubtree
asn1D_PKIGeneralSubtrees
asn1D_PKIHoldInstruction
asn1D_PKIID
asn1D_PKIIssuerAndSerialNumber
asn1D_PKIIssuingDistPointSyntax
asn1D_PKIKeyBag
asn1D_PKIKeyEncryptionAlgorithmIdentifier
asn1D_PKIKeyIdentifier
asn1D_PKIKeyPurposeId
asn1D_PKIKeyUsage
asn1D_PKILocalPostalAttributes
asn1D_PKIMacData
asn1D_PKIMessageDigest
asn1D_PKIName
asn1D_PKINameConstraintsSyntax
asn1D_PKINetworkAddress
asn1D_PKINoticeReference
asn1D_PKINoticeReference_noticeNumbers
asn1D_PKINumericUserIdentifier
asn1D_PKIORAddress
asn1D_PKIOrganizationName
asn1D_PKIOrganizationalUnitName
asn1D_PKIOrganizationalUnitNames
asn1D_PKIPBEParameter
asn1D_PKIPBEParameter_salt
asn1D_PKIPDSName
asn1D_PKIPDSParameter
asn1D_PKIPFX
asn1D_PKIPFX_version
asn1D_PKIPHGString
asn1D_PKIPKCS12Attribute
asn1D_PKIPKCS12Attribute_attrValues
asn1D_PKIPKCS8ShroudedKeyBag
asn1D_PKIPersonalName
asn1D_PKIPhysicalDeliveryCountryName
asn1D_PKIPhysicalDeliveryOfficeName
asn1D_PKIPhysicalDeliveryOfficeNumber
asn1D_PKIPhysicalDeliveryOrganizationName
asn1D_PKIPhysicalDeliveryPersonalName
asn1D_PKIPolicyConstraintsSyntax
asn1D_PKIPolicyInformation
asn1D_PKIPolicyInformation_policyQualifiers
asn1D_PKIPolicyMappingsSyntax
asn1D_PKIPolicyMappingsSyntax_element
asn1D_PKIPolicyQualifierInfo
asn1D_PKIPostOfficeBoxAddress
asn1D_PKIPostalCode
asn1D_PKIPosteRestanteAddress
asn1D_PKIPresentationAddress
asn1D_PKIPresentationAddress_nAddresses
asn1D_PKIPrivateDomainName
asn1D_PKIPrivateKey
asn1D_PKIPrivateKeyInfo
asn1D_PKIPrivateKeyInfo_version
asn1D_PKIPrivateKeyUsagePeriod
asn1D_PKIRDNSequence
asn1D_PKIRSAPrivateKey
asn1D_PKIRSAPrivateKey_version
asn1D_PKIRSAPublicKey
asn1D_PKIReasonFlags
asn1D_PKIRecipientInfo
asn1D_PKIRecipientInfo_version
asn1D_PKIRecipientInfos
asn1D_PKIRelativeDistinguishedName
asn1D_PKISafeBag
asn1D_PKISafeContents
asn1D_PKISecretBag
asn1D_PKISignedAndEnvelopedData
asn1D_PKISignedAndEnvelopedData_certificates
asn1D_PKISignedAndEnvelopedData_crls
asn1D_PKISignedAndEnvelopedData_version
asn1D_PKISignedData
asn1D_PKISignedData_certificates
asn1D_PKISignedData_crls
asn1D_PKISignedData_version
asn1D_PKISignerInfo
asn1D_PKISignerInfo_authenticatedAttributes
asn1D_PKISignerInfo_unauthenticatedAttributes
asn1D_PKISignerInfo_version
asn1D_PKISignerInfos
asn1D_PKISigningTime
asn1D_PKISkipCerts
asn1D_PKIStreetAddress
asn1D_PKISubjectKeyIdentifier
asn1D_PKISubjectPublicKeyInfo
asn1D_PKITeletexCommonName
asn1D_PKITeletexDomainDefinedAttribute
asn1D_PKITeletexDomainDefinedAttributes
asn1D_PKITeletexOrganizationName
asn1D_PKITeletexOrganizationalUnitName
asn1D_PKITeletexOrganizationalUnitNames
asn1D_PKITeletexPersonalName
asn1D_PKITerminalIdentifier
asn1D_PKITerminalType
asn1D_PKITime
asn1D_PKIToBeSigned
asn1D_PKIUnformattedPostalAddress
asn1D_PKIUnformattedPostalAddress_printable_address
asn1D_PKIUniqueIdentifier
asn1D_PKIUniquePostalName
asn1D_PKIUserNotice
asn1D_PKIValidationParms
asn1D_PKIValidity
asn1D_PKIVersion
asn1D_PKIX121Address
asn1D_PKI_EXTENSION_ATTRIBUTE_id
asn1D_PKI_SeqOfOBJID
asn1D_PKI_SeqOfPKIAttribute
asn1D_PKI_SeqOfPKICertificateList_toBeSigned_revokedCertificates_element
asn1D_PKI_SeqOfPKIDigestAlgorithmIdentifier
asn1D_PKI_SeqOfPKIRecipientInfo
asn1D_PKI_SeqOfPKISignerInfo
asn1D_PKI_SetOfPKIAttribute
asn1D_PKI_SetOfPKIDigestAlgorithmIdentifier
asn1D_PKI_SetOfPKIPKCS12Attribute
asn1D_PKI_SetOfPKIRecipientInfo
asn1D_PKI_SetOfPKISignerInfo
asn1E_PKIAccessDescription
asn1E_PKIAdministrationDomainName
asn1E_PKIAlgorithmIdentifier
asn1E_PKIAttribute
asn1E_PKIAttributeTypeAndValue
asn1E_PKIAttribute_values
asn1E_PKIAttributes
asn1E_PKIAttributesSyntax
asn1E_PKIAuthenticatedSafe
asn1E_PKIAuthorityInfoAccessSyntax
asn1E_PKIAuthorityKeyIdentifier
asn1E_PKIBIGINT
asn1E_PKIBaseCRLNumber
asn1E_PKIBaseDistance
asn1E_PKIBasicConstraintsSyntax
asn1E_PKIBuiltInDomainDefinedAttribute
asn1E_PKIBuiltInDomainDefinedAttributes
asn1E_PKIBuiltInStandardAttributes
asn1E_PKICPSuri
asn1E_PKICRLBag
asn1E_PKICRLDistPointsSyntax
asn1E_PKICRLExtension
asn1E_PKICRLExtensions
asn1E_PKICRLNumber
asn1E_PKICRLReason
asn1E_PKICRLSequence
asn1E_PKICertBag
asn1E_PKICertPolicyId
asn1E_PKICertificate
asn1E_PKICertificateList
asn1E_PKICertificateList_toBeSigned
asn1E_PKICertificateList_toBeSigned1
asn1E_PKICertificateList_toBeSigned_revokedCertificates_element
asn1E_PKICertificatePoliciesSyntax
asn1E_PKICertificateRevocationLists
asn1E_PKICertificateSerialNumber
asn1E_PKICertificate_toBeSigned
asn1E_PKICertificate_toBeSigned1
asn1E_PKICertificates
asn1E_PKICertificationRequest
asn1E_PKICertificationRequestInfo
asn1E_PKICertificationRequestInfo_version
asn1E_PKICommonName
asn1E_PKIContentEncryptionAlgorithmIdentifier
asn1E_PKIContentInfo
asn1E_PKIContentType
asn1E_PKICountryName
asn1E_PKIDHParameter
asn1E_PKIData
asn1E_PKIDigest
asn1E_PKIDigestAlgorithmIdentifier
asn1E_PKIDigestAlgorithmIdentifiers
asn1E_PKIDigestEncryptionAlgorithmIdentifier
asn1E_PKIDigestInfo
asn1E_PKIDigestedData
asn1E_PKIDigestedData_version
asn1E_PKIDisplayText
asn1E_PKIDistributionPoint
asn1E_PKIDistributionPointName
asn1E_PKIDomainParameters
asn1E_PKIDss_Parms
asn1E_PKIDss_Sig_Value
asn1E_PKIEDIPartyName
asn1E_PKIEDIPartyName_nameAssigner
asn1E_PKIEDIPartyName_partyName
asn1E_PKIEncryptedContent
asn1E_PKIEncryptedContentInfo
asn1E_PKIEncryptedData
asn1E_PKIEncryptedData_version
asn1E_PKIEncryptedDigest
asn1E_PKIEncryptedKey
asn1E_PKIEncryptedPrivateKeyInfo
asn1E_PKIEntryExtension
asn1E_PKIEntryExtensions
asn1E_PKIEnvelopedData
asn1E_PKIEnvelopedData_version
asn1E_PKIExtendedCertificate
asn1E_PKIExtendedCertificateOrCertificate
asn1E_PKIExtendedCertificatesAndCertificates
asn1E_PKIExtendedNetworkAddress
asn1E_PKIExtendedNetworkAddress_e163_4_address
asn1E_PKIExtension
asn1E_PKIExtensionAttribute
asn1E_PKIExtensionAttributes
asn1E_PKIExtensionORAddressComponents
asn1E_PKIExtensionPhysicalDeliveryAddressComponents
asn1E_PKIExtensions
asn1E_PKIGeneralName
asn1E_PKIGeneralName_otherName
asn1E_PKIGeneralNames
asn1E_PKIGeneralSubtree
asn1E_PKIGeneralSubtrees
asn1E_PKIHoldInstruction
asn1E_PKIID
asn1E_PKIIssuerAndSerialNumber
asn1E_PKIIssuingDistPointSyntax
asn1E_PKIKeyBag
asn1E_PKIKeyEncryptionAlgorithmIdentifier
asn1E_PKIKeyIdentifier
asn1E_PKIKeyPurposeId
asn1E_PKIKeyUsage
asn1E_PKILocalPostalAttributes
asn1E_PKIMacData
asn1E_PKIMessageDigest
asn1E_PKIName
asn1E_PKINameConstraintsSyntax
asn1E_PKINetworkAddress
asn1E_PKINoticeReference
asn1E_PKINoticeReference_noticeNumbers
asn1E_PKINumericUserIdentifier
asn1E_PKIORAddress
asn1E_PKIOrganizationName
asn1E_PKIOrganizationalUnitName
asn1E_PKIOrganizationalUnitNames
asn1E_PKIPBEParameter
asn1E_PKIPBEParameter_salt
asn1E_PKIPDSName
asn1E_PKIPDSParameter
asn1E_PKIPFX
asn1E_PKIPFX_version
asn1E_PKIPHGString
asn1E_PKIPKCS12Attribute
asn1E_PKIPKCS12Attribute_attrValues
asn1E_PKIPKCS8ShroudedKeyBag
asn1E_PKIPersonalName
asn1E_PKIPhysicalDeliveryCountryName
asn1E_PKIPhysicalDeliveryOfficeName
asn1E_PKIPhysicalDeliveryOfficeNumber
asn1E_PKIPhysicalDeliveryOrganizationName
asn1E_PKIPhysicalDeliveryPersonalName
asn1E_PKIPolicyConstraintsSyntax
asn1E_PKIPolicyInformation
asn1E_PKIPolicyInformation_policyQualifiers
asn1E_PKIPolicyMappingsSyntax
asn1E_PKIPolicyMappingsSyntax_element
asn1E_PKIPolicyQualifierInfo
asn1E_PKIPostOfficeBoxAddress
asn1E_PKIPostalCode
asn1E_PKIPosteRestanteAddress
asn1E_PKIPresentationAddress
asn1E_PKIPresentationAddress_nAddresses
asn1E_PKIPrivateDomainName
asn1E_PKIPrivateKey
asn1E_PKIPrivateKeyInfo
asn1E_PKIPrivateKeyInfo_version
asn1E_PKIPrivateKeyUsagePeriod
asn1E_PKIRDNSequence
asn1E_PKIRSAPrivateKey
asn1E_PKIRSAPrivateKey_version
asn1E_PKIRSAPublicKey
asn1E_PKIReasonFlags
asn1E_PKIRecipientInfo
asn1E_PKIRecipientInfo_version
asn1E_PKIRecipientInfos
asn1E_PKIRelativeDistinguishedName
asn1E_PKISafeBag
asn1E_PKISafeContents
asn1E_PKISecretBag
asn1E_PKISignedAndEnvelopedData
asn1E_PKISignedAndEnvelopedData_certificates
asn1E_PKISignedAndEnvelopedData_crls
asn1E_PKISignedAndEnvelopedData_version
asn1E_PKISignedData
asn1E_PKISignedData_certificates
asn1E_PKISignedData_crls
asn1E_PKISignedData_version
asn1E_PKISignerInfo
asn1E_PKISignerInfo_authenticatedAttributes
asn1E_PKISignerInfo_unauthenticatedAttributes
asn1E_PKISignerInfo_version
asn1E_PKISignerInfos
asn1E_PKISigningTime
asn1E_PKISkipCerts
asn1E_PKIStreetAddress
asn1E_PKISubjectKeyIdentifier
asn1E_PKISubjectPublicKeyInfo
asn1E_PKITeletexCommonName
asn1E_PKITeletexDomainDefinedAttribute
asn1E_PKITeletexDomainDefinedAttributes
asn1E_PKITeletexOrganizationName
asn1E_PKITeletexOrganizationalUnitName
asn1E_PKITeletexOrganizationalUnitNames
asn1E_PKITeletexPersonalName
asn1E_PKITerminalIdentifier
asn1E_PKITerminalType
asn1E_PKITime
asn1E_PKIToBeSigned
asn1E_PKIUnformattedPostalAddress
asn1E_PKIUnformattedPostalAddress_printable_address
asn1E_PKIUniqueIdentifier
asn1E_PKIUniquePostalName
asn1E_PKIUserNotice
asn1E_PKIValidationParms
asn1E_PKIValidity
asn1E_PKIVersion
asn1E_PKIX121Address
asn1E_PKI_EXTENSION_ATTRIBUTE_id
asn1E_PKI_SeqOfOBJID
asn1E_PKI_SeqOfPKIAttribute
asn1E_PKI_SeqOfPKICertificateList_toBeSigned_revokedCertificates_element
asn1E_PKI_SeqOfPKIDigestAlgorithmIdentifier
asn1E_PKI_SeqOfPKIRecipientInfo
asn1E_PKI_SeqOfPKISignerInfo
asn1E_PKI_SetOfPKIAttribute
asn1E_PKI_SetOfPKIDigestAlgorithmIdentifier
asn1E_PKI_SetOfPKIPKCS12Attribute
asn1E_PKI_SetOfPKIRecipientInfo
asn1E_PKI_SetOfPKISignerInfo
certCERTNameToDN
certCERTNameToPKIName
certCheckCERTName
certCreate
certDecode
certDecodeCharData
certDecodeExtAuthorityInfoAccess
certDecodeExtAuthorityKeyIdentifier
certDecodeExtBasicConstraints
certDecodeExtCRLDistPoints
certDecodeExtExtKeyUsage
certDecodeExtKeyUsage
certDecodeExtSubjectKeyIdentifier
certDecodeGeneralNames
certDestroy
certEncodeCharData
certEncodeExtAuthorityInfoAccess
certEncodeExtAuthorityKeyIdentifier
certEncodeExtBasicConstraints
certEncodeExtCRLDistPoints
certEncodeExtExtKeyUsage
certEncodeExtKeyUsage
certEncodeExtSubjectKeyIdentifier
certEncodeGeneralNames
certGetCertDER
certGetExtesions
certGetIssuer
certGetIssuerDER
certGetIssuerDN
certGetIssuerPKIName
certGetPKCContext
certGetPublicKeyDER
certGetSerialNumber
certGetSubject
certGetSubjectDER
certGetSubjectDN
certGetSubjectPKIName
certGetSubjectPublicKeyInfoDER
certGetThumbPrintMD5
certGetThumbPrintSHA1
certGetValidDuration
certGetVersion
certIsIssuedBy
certPKCCtxToPKISubjectPublicKeyInfo
certPKINameToCERTName
convAlgCtrl
convBytesToKey
convCreate
convCtrl
convData
convDestroy
convFinal
convInit
convUpdate
crlCheckCertStatus
crlCreate
crlDecode
crlDestroy
crlGetIssuer
crlGetIssuerDER
crlGetNextUpdate
crlGetRevokeCerts
crlGetThisUpdate
crlIsIssuedBy
devClose
devCommand
devCreatePKCContext
devOpen
hashAlgCtrl
hashAlgData
hashCopy
hashCreate
hashCtrl
hashData
hashDestroy
hashFinal
hashInit
hashUpdate
hcryptEnd
hcryptFree
hcryptInit
hmacAlgData
hmacCreate
hmacData

Sections

.text
Size: 324KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3dccf9073b6839b56ee10a460ca9732

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

17:d6:5a:5e:06:5f:b7:f5:92:36:ac:f6:fe:fd:93:69Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

4f:93:52:57:b5:0b:48:0f:9a:b8:e0:d4:25:57:ec:93:7d:5c:40:07Signer

Signature Validations

Verification

14/12/2011, 05:26 Valid: false

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 324KB - Virtual size: 320KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 24KB - Virtual size: 28KB

.rsrc Size: 4KB - Virtual size: 952B

.reloc Size: 12KB - Virtual size: 8KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

17:d6:5a:5e:06:5f:b7:f5:92:36:ac:f6:fe:fd:93:69
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

4f:93:52:57:b5:0b:48:0f:9a:b8:e0:d4:25:57:ec:93:7d:5c:40:07
Signer

14/12/2011, 05:26
Valid: false

.text
Size: 324KB - Virtual size: 320KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 24KB - Virtual size: 28KB

.rsrc
Size: 4KB - Virtual size: 952B

.reloc
Size: 12KB - Virtual size: 8KB