e984a51df6af02112ae3573dfe4e48e3749cc88f0fecfe5d2390a939f95bb1b8

Sharing

Copy URL Twitter E-mail

General

Target

e984a51df6af02112ae3573dfe4e48e3749cc88f0fecfe5d2390a939f95bb1b8
Size

2.9MB
MD5

9f027df2899684f1417c7c936be72555
SHA1

1d87bbfc20921fd60c44d1384e3f7ac35abb63f3
SHA256

e984a51df6af02112ae3573dfe4e48e3749cc88f0fecfe5d2390a939f95bb1b8
SHA512

ab7aa4e4f7ed05431bac9bcf42c3148fe622c1e3f750c5a1df25f45af4b4d374de67965e6b683db491ca0894c934b3591badff3412e4b8bdd466f86efbdf47d2
SSDEEP

49152:PW++1GuN5eKubGLGji1nDPHIqzUMbuoTC4YHLV9JJhmc0zlt1:P9+NrPwi1nTIKUmk4kvHhmcQ

Score

N/A

Malware Config

Signatures

Files

e984a51df6af02112ae3573dfe4e48e3749cc88f0fecfe5d2390a939f95bb1b8
.dll regsvr32 windows x86

fb87f2967c315d7788de73dcf38327de

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7d:08:bf:ed:46:5d:41:bd:57:96:5c:b9:3a:21:e0:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

21/02/2008, 00:00

Not After

17/03/2011, 23:59

Subject

CN=ashampoo GmbH & Co. KG,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
SetErrorMode
SetLastError
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
InterlockedExchange
CompareStringA
GlobalMemoryStatus
GetFullPathNameA
lstrlenA
GetLogicalDrives
InterlockedDecrement
LoadResource
LockResource
LoadLibraryA
FindCloseChangeNotification
FindNextChangeNotification
SetFileTime
SetEndOfFile
LocalFree
SetPriorityClass
GlobalFree
CompareFileTime
GetExitCodeThread
GetCurrentProcess
IsBadReadPtr
GetCurrentThread
FreeLibrary
HeapDestroy
SleepEx
MulDiv
SetEnvironmentVariableA
GetOEMCP
GetACP
EnumSystemLocalesA
IsValidLocale
IsBadCodePtr
SetStdHandle
GetStringTypeA
GetEnvironmentStrings
SetUnhandledExceptionFilter
SystemTimeToFileTime
GetModuleHandleA
FreeEnvironmentStringsA
SetConsoleCtrlHandler
LCMapStringA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalAlloc
lstrcmpiA
GetThreadLocale
UnlockFile
LockFile
WaitForMultipleObjects
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetLastError
WriteFile
SetFilePointer
FindClose
DeleteCriticalSection
InitializeCriticalSection
SetEvent
WaitForSingleObject
ResetEvent
ResumeThread
CloseHandle
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GlobalSize
GetCurrentThreadId
Sleep
FatalAppExitA
HeapSize
TerminateProcess
ExitProcess
HeapReAlloc
HeapAlloc
ExitThread
CreateThread
GetLocalTime
GetSystemTime
HeapFree
RaiseException
RtlUnwind
LocalLock
LocalUnlock
LocalFileTimeToFileTime
GetFileTime
FlushFileBuffers
DuplicateHandle
lstrcmpA
SuspendThread
SetThreadPriority
InterlockedIncrement
GetVersion
GlobalDeleteAtom
GlobalLock
GlobalUnlock
SetCurrentDirectoryA
GetCurrentDirectoryA
SetFileAttributesA
GetTimeFormatA
GetDateFormatA
ExpandEnvironmentStringsA
CreateProcessA
FindFirstChangeNotificationA
FindNextFileA
FindFirstFileA
RemoveDirectoryA
CreateDirectoryA
MoveFileA
GetTempPathA
GetTempFileNameA
GetFileAttributesA
CopyFileA
DeleteFileA
GetCommandLineW
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FormatMessageA
GetProcessVersion
SizeofResource
GetUserDefaultLCID
OutputDebugStringA
GetVersionExA
GetLocaleInfoA
GetFileSize
CreateFileA
ReadFile
GetFileInformationByHandle
GlobalFlags

advapi32

SetFileSecurityW
GetFileSecurityW
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
GetNamedSecurityInfoW
RegCloseKey

user32

GetWindowRect
GetParent
ShowWindow
GetMessageTime
UnhookWindowsHookEx
CallNextHookEx
GetSystemMetrics
DestroyIcon
UpdateWindow
InvalidateRect
IsWindowVisible
EndPaint
FrameRect
BeginPaint
GetUpdateRect
ReleaseDC
GetDC
GetDesktopWindow
DestroyWindow
SetWindowPos
GetKeyState
SetTimer
KillTimer
TranslateMessage
RedrawWindow
IntersectRect
CopyRect
SetCapture
InflateRect
OffsetRect
GetClientRect
EnumChildWindows
PostMessageA
GetCursorPos
DispatchMessageA
GetMessageA
CreateWindowExA
RegisterClassA
LoadCursorA
MoveWindow
DefWindowProcA
SetFocus
SetScrollInfo
GetScrollInfo
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetSysColor
LoadImageA
DialogBoxParamA
CreateDialogParamA
AppendMenuA
InsertMenuA
LoadIconA
GetClassNameA
PeekMessageA
TranslateAcceleratorA
SystemParametersInfoA
PostThreadMessageA
IsWindowEnabled
SetActiveWindow
GetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowPlacement
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetDlgCtrlID
SetWindowPlacement
TrackPopupMenu
IsChild
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
AdjustWindowRectEx
GetFocus
SendDlgItemMessageA
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
CheckDlgButton
CheckRadioButton
GetDlgItemInt
SetDlgItemInt
IsDlgButtonChecked
ScrollWindowEx
ValidateRect
WindowFromPoint
ShowOwnedPopups
DestroyMenu
PtInRect
GetDialogBaseUnits
DeleteMenu
MessageBeep
RemoveMenu
SetRectEmpty
ReuseDDElParam
UnpackDDElParam
SendMessageA
GetTopWindow
GetWindow
ScreenToClient
GetDlgItem
CreatePopupMenu
ClientToScreen
EqualRect
PostQuitMessage
SetCursor
BringWindowToTop
IsWindow
SetRect
IsZoomed
GetMenuItemID
GetMenuItemCount
EnableMenuItem
GetMenu
GetSubMenu
IsIconic
DrawIcon
SetWindowRgn
DrawMenuBar
GetSystemMenu
CreateMenu
SetMenu
DestroyAcceleratorTable
DrawFocusRect
GetWindowDC
DrawFrameControl
DrawEdge
FillRect
GetSysColorBrush
MessageBoxA
ReleaseCapture
GetCapture
MapWindowPoints

gdi32

LineTo
CreatePen
StretchBlt
Rectangle
SetMapMode
CreatePolygonRgn
CreateSolidBrush
GetTextColor
SetTextColor
SetDIBitsToDevice
GetDIBits
GdiFlush
CreateDIBSection
CreateRectRgn
SetBkMode
CreateCompatibleBitmap
GetDeviceCaps
SelectObject
DeleteDC
DeleteObject
BitBlt
GetStockObject
CreateCompatibleDC
GetObjectA
RoundRect
CreateFontIndirectA
MoveToEx
GetTextExtentPoint32A
GetTextMetricsA
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
DPtoLP
CreateRectRgnIndirect
CombineRgn
SetRectRgn
PatBlt
GetMapMode
Escape
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
GetWindowExtEx
GetViewportExtEx
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SelectPalette
RestoreDC
SaveDC
CreateBitmap
SetBkColor
GetClipBox
GetDCOrgEx
GetObjectType
CreateDCA
GetBitmapBits
EnumFontFamiliesExA
OffsetWindowOrgEx
TextOutA

shell32

SHGetMalloc
SHGetDesktopFolder
DragFinish
DragAcceptFiles
SHBrowseForFolderA
ExtractIconA
SHGetFileInfoA
SHGetPathFromIDListA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW

winmm

waveOutClose
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutWrite
timeGetTime

ws2_32

connect
htons
ioctlsocket
socket
WSAAsyncGetHostByName
recv
__WSAFDIsSet
select
send
WSACancelAsyncRequest
WSAGetLastError
closesocket

msacm32

acmMetrics
acmDriverAddW
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmDriverOpen
acmDriverClose
acmStreamClose
acmStreamUnprepareHeader
acmStreamConvert
acmFormatEnumW

comctl32

ImageList_Destroy
ImageList_Create
ImageList_Replace
ImageList_GetImageCount
ImageList_Remove
ImageList_GetIcon
ImageList_GetIconSize
ImageList_DrawEx
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_ReplaceIcon
InitCommonControlsEx
ord17
ord13
ord14
ImageList_LoadImageW
ImageList_Merge
ImageList_Read
ImageList_Write
ImageList_Add

ole32

CoTaskMemFree
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
CoFileTimeNow
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CoDisconnectObject
OleRegGetUserType
CoTaskMemAlloc
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoInitialize

oleaut32

VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysAllocStringByteLen
SysStringByteLen
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
VarBstrFromDate
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
VariantInit
VariantCopy
VariantClear
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayGetUBound
GetErrorInfo
SetErrorInfo
CreateErrorInfo

wininet

InternetQueryOptionW

comdlg32

CommDlgExtendedError

winspool.drv

ClosePrinter

Exports

Exports

DllRegisterServer
DllUnregisterServer
FreeBurnItResults
GetAboutMessage
GetMainWindow
SendBetaReport
StartBurnIt

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 308KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 408KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb87f2967c315d7788de73dcf38327de

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

7d:08:bf:ed:46:5d:41:bd:57:96:5c:b9:3a:21:e0:92Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

shell32

winmm

ws2_32

msacm32

comctl32

ole32

oleaut32

wininet

comdlg32

winspool.drv

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 308KB - Virtual size: 304KB

.data Size: 408KB - Virtual size: 431KB

.rsrc Size: 212KB - Virtual size: 209KB

.reloc Size: 144KB - Virtual size: 142KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

7d:08:bf:ed:46:5d:41:bd:57:96:5c:b9:3a:21:e0:92
Certificate

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 308KB - Virtual size: 304KB

.data
Size: 408KB - Virtual size: 431KB

.rsrc
Size: 212KB - Virtual size: 209KB

.reloc
Size: 144KB - Virtual size: 142KB