ac758b56cbb7a2e0a9e80f903419bd78a0a828af21ed54c425cdae48f854c671

Sharing

Copy URL Twitter E-mail

General

Target

ac758b56cbb7a2e0a9e80f903419bd78a0a828af21ed54c425cdae48f854c671
Size

468KB
MD5

08e2c3118583ed971397504ead23bdd6
SHA1

dfb1756ea0a3af21bb37e73b83382cbd5c64c904
SHA256

ac758b56cbb7a2e0a9e80f903419bd78a0a828af21ed54c425cdae48f854c671
SHA512

2203af926f34bf4b3e22af62f5cad0e87ec1dfb1a925048c2ee7df8139283be844988b986f1b876cb3a0bb3ef283449ab640de0475f7a16130863eea6dbd8f80
SSDEEP

3072:8ViKUpwoRLnT5ycB+Ui7dxEAHOdKZENeK4PeXEBoFUll2A3IkeGastAJHMhfs5Uf:c9cwfd9udKZED4G0Omt3kw

Score

N/A

Malware Config

Signatures

Files

ac758b56cbb7a2e0a9e80f903419bd78a0a828af21ed54c425cdae48f854c671
.exe windows x86

b58ff9cbeb6cf1f8f133b93652e39dac

Code Sign

05:ab:96
Certificate

Issuer

OU=Equifax Secure Certificate Authority,O=Equifax,C=US

Not Before

01/02/2006, 21:44

Not After

30/01/2016, 21:44

Subject

CN=GeoTrust TrustCenter CodeSigning CA I,OU=GeoTrust TrustCenter CodeSigning CA,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

02:35:8f
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

13/02/2006, 15:40

Not After

11/02/2016, 15:40

Subject

CN=GeoTrust TrustCenter Authenticode Timestamp I,OU=GeoTrust TrustCenter Timestamp,O=GeoTrust Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

11:ee:00:01:00:20:e1:01:8b:4a:3b:ec:76:91
Certificate

Issuer

CN=GeoTrust TrustCenter CodeSigning CA I,OU=GeoTrust TrustCenter CodeSigning CA,O=GeoTrust Inc,C=US

Not Before

31/08/2006, 14:00

Not After

31/08/2007, 14:00

Subject

CN=ashampoo GmbH & Co. KG,OU=Setup Department+OU=CodeSigning,O=ashampoo GmbH & Co. KG,L=Oldenburg,ST=Niedersachsen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetFileAttributesA
lstrlenA
CreateDirectoryW
GetFileAttributesW
lstrcpyA
CreateFileW
CreateFileA
SetFilePointer
ReadFile
CloseHandle
GetModuleFileNameW
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetFileSize
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
RtlUnwind
SetStdHandle
GetFileType
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
LCMapStringA
LCMapStringW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetVersionExA

user32

MessageBoxA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b58ff9cbeb6cf1f8f133b93652e39dac

Code Sign

05:ab:96Certificate

Extended Key Usages

Key Usages

02:35:8fCertificate

Extended Key Usages

Key Usages

11:ee:00:01:00:20:e1:01:8b:4a:3b:ec:76:91Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 108KB - Virtual size: 105KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 2KB

05:ab:96
Certificate

02:35:8f
Certificate

11:ee:00:01:00:20:e1:01:8b:4a:3b:ec:76:91
Certificate

.text
Size: 108KB - Virtual size: 105KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 2KB