aeb9d4d5c8d898cc255558342e9269bc462fcddd5cf15ce8dd1e807e253d7c23

Sharing

Copy URL

Twitter E-mail

General

Target

aeb9d4d5c8d898cc255558342e9269bc462fcddd5cf15ce8dd1e807e253d7c23
Size

29KB
MD5

d7465e5e6f71989ad327cab69b25caa1
SHA1

8f61442cb3fccce28d9c3d8163ef478bdfe8ad5f
SHA256

aeb9d4d5c8d898cc255558342e9269bc462fcddd5cf15ce8dd1e807e253d7c23
SHA512

65ffdf8865605f5fa85db43a6f70289fd1446b6b0a31e6f50ea36aacf7f20b38a15a5335db40e6ac019287c2741c0912f6672880273ff1926db0cd4bca7b4014
SSDEEP

384:LTKhs36l/nantMC/be0cNVz2u9cUvz/n5v5wilT6Yvll/nanaU:Ki3inan+acfzGW95ZNnanr

Score

N/A

Malware Config

Signatures

Files

aeb9d4d5c8d898cc255558342e9269bc462fcddd5cf15ce8dd1e807e253d7c23
.dll windows x86

58cb3dbfe4f9c58ebf682e6abdcd413f

Code Sign

f0:7d:24:bc:f2:34:fe:48:9d:b5:fe:1e:9c:7a:cd:db
Certificate

Issuer

CN=Adobe Systems\, Incorporated,OU=Adobe Systems,O=Adobe Systems,L=Berlin,ST=Berlin,C=DE,1.2.840.113549.1.9.1=#0c10737570706f72744061646f62652e6465

Not Before

12/04/2012, 00:00

Not After

11/04/2013, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=Adobe Systems,O=Adobe Systems,L=Berlin,ST=Berlin,C=DE,1.2.840.113549.1.9.1=#0c10737570706f72744061646f62652e6465

Extended Key Usages

ExtKeyUsageCodeSigning

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
lstrlenA

shlwapi

SHCopyKeyW

user32

SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx

Exports

Exports

CloseGuard
SetGuard
ZerGuard

Sections

.text
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58cb3dbfe4f9c58ebf682e6abdcd413f

Code Sign

f0:7d:24:bc:f2:34:fe:48:9d:b5:fe:1e:9c:7a:cd:dbCertificate

Extended Key Usages

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

advapi32

kernel32

shlwapi

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 862B

.rdata Size: 1024B - Virtual size: 524B

.data Size: 512B - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 120B

f0:7d:24:bc:f2:34:fe:48:9d:b5:fe:1e:9c:7a:cd:db
Certificate

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

.text
Size: 1024B - Virtual size: 862B

.rdata
Size: 1024B - Virtual size: 524B

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 120B