6682769a7cb082ed7430817d6b45b64e27b567677f42b316f2ed808cdc34d831

Sharing

Copy URL Twitter E-mail

General

Target

6682769a7cb082ed7430817d6b45b64e27b567677f42b316f2ed808cdc34d831
Size

239KB
MD5

027c0d87523ec90acdab7e2c361b2c55
SHA1

4e856b9431695282b30e09a21bd9cd0bf770120d
SHA256

6682769a7cb082ed7430817d6b45b64e27b567677f42b316f2ed808cdc34d831
SHA512

b0c9a66d58e4f296908c245a8d2476b8d4397751ff1d10e46a7771d82b980a4b29777b455a46e5d7ba33fb35541bcc50f881d9504a57a6c1070c1396a97529c3
SSDEEP

6144:OSGDUp2VrGixUlfjmZjdu9hu1jQZSLgOnJVrkSg+:OFVrGGUZly1QSdzkH+

Score

N/A

Malware Config

Signatures

Files

6682769a7cb082ed7430817d6b45b64e27b567677f42b316f2ed808cdc34d831
.exe windows x86

134aa55fe452829570dd9da7c654debb

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:47:b0:da:73:5e:fb:4b:02:0f:c8:38:ad:98:21:16
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

20/07/2010, 00:00

Not After

18/08/2011, 23:59

Subject

CN=Immunet Corporation,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Immunet Corporation,L=Woodside,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8c:75:19:fa:95:6d:d8:79:87:1b:bc:20:ab:6b:5a:15:00:72:d7:31
Signer

Actual PE Digest

8c:75:19:fa:95:6d:d8:79:87:1b:bc:20:ab:6b:5a:15:00:72:d7:31

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Immunet Corporation,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Immunet Corporation,L=Woodside,ST=California,C=US

18/07/2011, 23:04
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetProcAddress
GetNumberFormatA
GetCalendarInfoW
GetTempPathW
GetACP
GetComputerNameA
EnumCalendarInfoA
lstrcmpiW
FatalAppExitA
lstrcat
GetTimeFormatW
GetVolumeInformationA
IsValidLocale
LocalAlloc
GlobalGetAtomNameW
GetLogicalDrives
EnumCalendarInfoW
GetExpandedNameW
CreateDirectoryA
MoveFileA
GetAtomNameW
WinExec
GetProcessHeap
GetVolumeInformationW
GetLongPathNameA
ExitProcess
GetModuleFileNameA
GetLogicalDriveStringsW
OpenSemaphoreA
GetCPInfo
CreateMailslotA
CreateNamedPipeW
ReplaceFileA
GetStringTypeW
lstrcpynW
GetDiskFreeSpaceW
GlobalFindAtomA
IsBadStringPtrA
GetModuleHandleA

user32

GetMenuState
OffsetRect
LoadBitmapW
CharLowerA
EnableWindow
GetMenuItemInfoW
GetMenuInfo
SetWindowTextW
SendDlgItemMessageW
LoadCursorW
GetDlgItemInt
GetAsyncKeyState
EndMenu
SetTimer
GetClassInfoExW
UnregisterClassA
UpdateLayeredWindow
EndDialog
ShowCursor
RegisterClassExW
SetWindowTextA
CreateDesktopW
CreateAcceleratorTableW
CopyRect
CopyIcon
CharPrevA
ShowCaret
GetSysColor
CreateDesktopA
GetMenuStringA
SetCursorPos
LoadIconA
GetSystemMetrics
MessageBoxIndirectA
MoveWindow
IsDlgButtonChecked
wsprintfA
LoadMenuIndirectA
wvsprintfW
GetIconInfo
GetDlgItemTextA

gdi32

CreateEllipticRgn
GetMetaFileA
SetWinMetaFileBits
StretchDIBits
GetEnhMetaFilePixelFormat
CreateRoundRectRgn
CreateSolidBrush
CreateFontW
CreateFontIndirectExW
CreateFontIndirectExA
CreatePolyPolygonRgn

shlwapi

SHRegCreateUSKeyW

ole32

CoLoadLibrary

opengl32

glGetBooleanv
glPixelMapfv
glTexCoord3i
glRasterPos4s
glRects
glVertex3f
glGetLightiv
glColorMaterial

urlmon

GetMarkOfTheWeb
DllRegisterServerEx

Sections

.NQE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htIbB
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.B
Size: 2KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sWb
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xJFJ
Size: 1KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lzodt
Size: 3KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.utVmbX
Size: 2KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oFUXL
Size: 3KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ak
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GcUHD
Size: 12KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kPSyO
Size: 3KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

134aa55fe452829570dd9da7c654debb

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

25:47:b0:da:73:5e:fb:4b:02:0f:c8:38:ad:98:21:16Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

8c:75:19:fa:95:6d:d8:79:87:1b:bc:20:ab:6b:5a:15:00:72:d7:31Signer

Signature Validations

Verification

18/07/2011, 23:04 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shlwapi

ole32

opengl32

urlmon

Sections

.NQE Size: 8KB - Virtual size: 8KB

.htIbB Size: 85KB - Virtual size: 84KB

.B Size: 2KB - Virtual size: 459KB

.sWb Size: 12KB - Virtual size: 12KB

.xJFJ Size: 1KB - Virtual size: 158KB

.Lzodt Size: 3KB - Virtual size: 120KB

.utVmbX Size: 2KB - Virtual size: 473KB

.oFUXL Size: 3KB - Virtual size: 18KB

.ak Size: 86KB - Virtual size: 85KB

.GcUHD Size: 12KB - Virtual size: 314KB

.kPSyO Size: 3KB - Virtual size: 476KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 1024B

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

25:47:b0:da:73:5e:fb:4b:02:0f:c8:38:ad:98:21:16
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

8c:75:19:fa:95:6d:d8:79:87:1b:bc:20:ab:6b:5a:15:00:72:d7:31
Signer

18/07/2011, 23:04
Valid: false

.NQE
Size: 8KB - Virtual size: 8KB

.htIbB
Size: 85KB - Virtual size: 84KB

.B
Size: 2KB - Virtual size: 459KB

.sWb
Size: 12KB - Virtual size: 12KB

.xJFJ
Size: 1KB - Virtual size: 158KB

.Lzodt
Size: 3KB - Virtual size: 120KB

.utVmbX
Size: 2KB - Virtual size: 473KB

.oFUXL
Size: 3KB - Virtual size: 18KB

.ak
Size: 86KB - Virtual size: 85KB

.GcUHD
Size: 12KB - Virtual size: 314KB

.kPSyO
Size: 3KB - Virtual size: 476KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 1024B