f1465d5ca82f3cf9f8fbbd280cb30a4333c36e0ced7b854495c7abdded34955f

Sharing

Copy URL Twitter E-mail

General

Target

f1465d5ca82f3cf9f8fbbd280cb30a4333c36e0ced7b854495c7abdded34955f
Size

432KB
MD5

4583ac12a72cb0519c4b56ca91a40014
SHA1

70364aac4a53bccf8e222416648dc1d9f104d9c2
SHA256

f1465d5ca82f3cf9f8fbbd280cb30a4333c36e0ced7b854495c7abdded34955f
SHA512

91a0503ee5cb810ec82bb2df95c33ffff563f931dc7780d26a06cfd63c99231ca40eed84de8dae6d373d2b0b6ca2a0907969118158e772edb19d251983a10394
SSDEEP

12288:l7VzfJzseK5Oy5JZCAFedwhIhX8mhb9Sxg6G:lLzs55TJFOyihJSlG

Score

N/A

Malware Config

Signatures

Files

f1465d5ca82f3cf9f8fbbd280cb30a4333c36e0ced7b854495c7abdded34955f
.exe windows x86

43aef3e1ea4c6a172c842f4aa0657b5c

Code Sign

19:ef:f6:9d:46:b2:07:8c:40:6e:b6:b7:50:b7:97:ed
Certificate

Issuer

CN=wgzlbbpsusk

Not Before

14/12/2011, 07:12

Not After

26/08/2016, 22:00

Subject

CN=Lokinet

77:4b:b1:8c:df:83:6b:6a:40:f6:65:f1:ca:c1:4f:5b:c7:10:8d:f4
Signer

Actual PE Digest

77:4b:b1:8c:df:83:6b:6a:40:f6:65:f1:ca:c1:4f:5b:c7:10:8d:f4

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

NO CERTIFICATE

01/01/0001, 00:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDeferWindowPos
DeferWindowPos
SendDlgItemMessageA

ole32

CoGetStandardMarshal
CoRegisterPSClsid
StringFromGUID2
CreateItemMoniker
CoIsHandlerConnected

oleaut32

CreateTypeLi

kernel32

UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetThreadLocale
GlobalUnlock
GetModuleHandleA
GetProcAddress
ExitProcess
GetLastError
RemoveDirectoryA
GetStartupInfoA
GetCommandLineA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ywc
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ahjapo
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43aef3e1ea4c6a172c842f4aa0657b5c

Code Sign

19:ef:f6:9d:46:b2:07:8c:40:6e:b6:b7:50:b7:97:edCertificate

77:4b:b1:8c:df:83:6b:6a:40:f6:65:f1:ca:c1:4f:5b:c7:10:8d:f4Signer

Signature Validations

Verification

01/01/0001, 00:00 Valid: false

Headers

File Characteristics

Imports

user32

ole32

oleaut32

kernel32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 5KB - Virtual size: 93KB

ywc Size: 270KB - Virtual size: 269KB

ahjapo Size: 129KB - Virtual size: 128KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 3KB - Virtual size: 2KB

19:ef:f6:9d:46:b2:07:8c:40:6e:b6:b7:50:b7:97:ed
Certificate

77:4b:b1:8c:df:83:6b:6a:40:f6:65:f1:ca:c1:4f:5b:c7:10:8d:f4
Signer

01/01/0001, 00:00
Valid: false

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 5KB - Virtual size: 93KB

ywc
Size: 270KB - Virtual size: 269KB

ahjapo
Size: 129KB - Virtual size: 128KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 3KB - Virtual size: 2KB