932c3bf0897314ff99bc41ce2955fc13f579c9cc747eb7d309e12764a12f85db

Sharing

Copy URL Twitter E-mail

General

Target

932c3bf0897314ff99bc41ce2955fc13f579c9cc747eb7d309e12764a12f85db
Size

2.1MB
MD5

fa4ad6659331709e6bef8b1ad16c63da
SHA1

99c70f0d80b0240af6a0e43968d69873bd7f8698
SHA256

932c3bf0897314ff99bc41ce2955fc13f579c9cc747eb7d309e12764a12f85db
SHA512

01e043df7324e37f194981d17bdcbc4927aa772da2f809cb954da6c66af983b140143c6214a77177460496550bb6ef5d2d6fb361a5f65bf0a46f01ae0a8ec007
SSDEEP

24576:0LJIDzIAZWx4SbfbEm1+yZEDjlr1/bBSd61DEn6HWuzO3rW1tsOTqp+0Q:QqQNfbEC+yZolZO6HWuzO3ra90Q

Score

N/A

Malware Config

Signatures

Files

932c3bf0897314ff99bc41ce2955fc13f579c9cc747eb7d309e12764a12f85db
.dll windows x86

baa93d47220682c04d92f7797d9224ce

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:5c:df:d5:25:f6:43:92:8f:3a:57:00:d8:7f:07:99
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

10/02/2014, 00:00

Not After

10/02/2015, 23:59

Subject

CN=M/s Children Code,O=M/s Children Code,POSTALCODE=160071,STREET=Industrial Area\, Phase 8B+STREET=Sector 74\,+STREET=Plot No. F-125\,,L=Mohali,ST=Punjab,C=IN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:9f:ed:ed:cb:79:5b:8d:ed:32:0c:89:19:f0:36:89
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

21/05/2013, 00:00

Not After

04/06/2014, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

73:af:b4:8e:80:6c:3c:47:b5:59:3b:38:e4:fa:23:2e:4f:d6:32:d4
Signer

Actual PE Digest

73:af:b4:8e:80:6c:3c:47:b5:59:3b:38:e4:fa:23:2e:4f:d6:32:d4

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=M/s Children Code,O=M/s Children Code,POSTALCODE=160071,STREET=Industrial Area\, Phase 8B+STREET=Sector 74\,+STREET=Plot No. F-125\,,L=Mohali,ST=Punjab,C=IN

02/06/2014, 02:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fktwyrjv
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tnznaqgj
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

35:5c:df:d5:25:f6:43:92:8f:3a:57:00:d8:7f:07:99Certificate

Extended Key Usages

Key Usages

03:9f:ed:ed:cb:79:5b:8d:ed:32:0c:89:19:f0:36:89Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

73:af:b4:8e:80:6c:3c:47:b5:59:3b:38:e4:fa:23:2e:4f:d6:32:d4Signer

Signature Validations

Verification

02/06/2014, 02:45 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Sections

Size: 108KB - Virtual size: 108KB

.rsrc Size: - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

fktwyrjv Size: 1.9MB - Virtual size: 1.9MB

tnznaqgj Size: 512B - Virtual size: 4KB

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

35:5c:df:d5:25:f6:43:92:8f:3a:57:00:d8:7f:07:99
Certificate

03:9f:ed:ed:cb:79:5b:8d:ed:32:0c:89:19:f0:36:89
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

73:af:b4:8e:80:6c:3c:47:b5:59:3b:38:e4:fa:23:2e:4f:d6:32:d4
Signer

02/06/2014, 02:45
Valid: false

.rsrc
Size: - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

fktwyrjv
Size: 1.9MB - Virtual size: 1.9MB

tnznaqgj
Size: 512B - Virtual size: 4KB