General

Malware Config

Signatures

Files

• 9a25741d25ecd7174b7235f5fc3b76ea2f8a27cc2ddf0ddf6d51b0d07470b175

  .exe windows x86

  a9380f14c96a505de427e16e569c6daa

  
  

  Code Sign

  fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d

  Certificate

  Issuer

  OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

  Not Before

  16-11-1999 00:00

  Not After

  06-01-2004 23:59

  Subject

  CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  5a:c5:c5:06:20:43:7d:42:57:3f:e2:5e:27:26:cb:c1

  Certificate

  Issuer

  OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

  Not Before

  13-04-2000 00:00

  Not After

  12-04-2001 23:59

  Subject

  CN=WinZip Computing\, Inc.,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=VeriSign\, Inc.,L=Internet+L=Mansfield,ST=CT,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageKeyEncipherment

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  EndDialog

  GetWindowRect

  SetCursor

  DefWindowProcA

  GetWindowWord

  SetWindowWord

  BeginPaint

  GetSysColor

  GetClientRect

  SetRect

  EndPaint

  RegisterClassA

  LoadIconA

  OemToCharBuffA

  LoadCursorA

  GetLastActivePopup

  ShowWindow

  PostMessageA

  EnableWindow

  GetTopWindow

  DestroyWindow

  GetWindowLongA

  SetWindowLongA

  SetWindowTextA

  SetForegroundWindow

  SetActiveWindow

  CharNextA

  SetTimer

  GetMessageA

  PostQuitMessage

  KillTimer

  DialogBoxIndirectParamA

  GetDlgItemTextA

  SendMessageA

  GetSystemMetrics

  SetWindowPos

  PeekMessageA

  TranslateMessage

  DispatchMessageA

  GetParent

  SetDlgItemTextA

  SendDlgItemMessageA

  GetDlgItem

  InvalidateRect

  UpdateWindow

  wsprintfA

  MessageBoxA

  kernel32

  _lwrite

  GlobalAlloc

  GlobalFree

  _lread

  GetDriveTypeA

  VirtualAlloc

  VirtualFree

  RtlUnwind

  HeapAlloc

  HeapFree

  GetCommandLineA

  GetModuleHandleA

  ExitProcess

  FindNextFileA

  MoveFileExA

  CreateFileA

  GetFileSize

  CreateFileMappingA

  MapViewOfFile

  UnmapViewOfFile

  CloseHandle

  SetFilePointer

  SetEndOfFile

  RemoveDirectoryA

  SetFileAttributesA

  DeleteFileA

  GetACP

  GetModuleFileNameA

  SetErrorMode

  GetVersion

  LoadLibraryA

  GetProcAddress

  FindClose

  FindFirstFileA

  SetCurrentDirectoryA

  lstrlenA

  CreateDirectoryA

  lstrcatA

  SetFileTime

  LocalFileTimeToFileTime

  DosDateTimeToFileTime

  _lcreat

  lstrcpyA

  _lopen

  _lclose

  GetVolumeInformationA

  GlobalHandle

  GetLastError

  LocalFree

  _llseek

  WinExec

  CreateProcessA

  GlobalLock

  OpenFile

  GetEnvironmentVariableA

  GlobalUnlock

  GetWindowsDirectoryA

  LocalAlloc

  FreeLibrary

  WaitForSingleObject

  GetTickCount

  FormatMessageA

  gdi32

  GetTextExtentPoint32A

  SetBkColor

  SetTextColor

  SetTextAlign

  GetBkColor

  DeleteObject

  ExtTextOutA

  CreateDCA

  GetDeviceCaps

  CreateFontIndirectA

  DeleteDC

  SelectObject

  Sections

  .text

  Size: 23KB - Virtual size: 22KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 11KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  _winzip_

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ