ecc3cb9a7f413e49adb1d66f7b0ded62191ee40fe31fd9dd948d5af5c432ea57

Sharing

Copy URL Twitter E-mail

General

Target

ecc3cb9a7f413e49adb1d66f7b0ded62191ee40fe31fd9dd948d5af5c432ea57
Size

414KB
MD5

5f5a873ed9501557c6d0203d08521b1b
SHA1

0a16389c77d9ed2354bc80f53a6687bbe42abc9f
SHA256

ecc3cb9a7f413e49adb1d66f7b0ded62191ee40fe31fd9dd948d5af5c432ea57
SHA512

2ee74dbf0a78e0e74587907a3c33fbb784b2e8129feb6a4af9fef81c2bc643e0acfc9d61053aad0b0e66ddca4e8a61969666ff4d693da719e263bc3601ed7ab1
SSDEEP

12288:kPTyKQlfZwgZGR8HN5jggETcvI/9uCF5tI5sJ9:kbyTlfZwgZGitKRCX0SsJ9

Score

N/A

Malware Config

Signatures

Files

ecc3cb9a7f413e49adb1d66f7b0ded62191ee40fe31fd9dd948d5af5c432ea57
.exe windows x86

e5b1b51ab0ae46f829e571e31789874e

Code Sign

34:b8:91:b9:c4:a1:63:9a:44:fc:a7:81:a2:a8:78:02
Certificate

Issuer

CN=yudikhbcsfz

Not Before

12/11/2011, 17:44

Not After

31/12/2039, 23:59

Subject

CN=Jhopert Ope

8a:a4:ad:b7:6f:ee:be:cd:4d:5e:9f:79:a6:d3:80:3a:b9:61:09:33
Signer

Actual PE Digest

8a:a4:ad:b7:6f:ee:be:cd:4d:5e:9f:79:a6:d3:80:3a:b9:61:09:33

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

NO CERTIFICATE

01/01/0001, 00:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterWindowMessageA
FindWindowA
SendMessageA

ole32

OleDraw

oledlg

ord4

msvcrt

exit
_acmdln
__getmainargs
_XcptFilter
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_initterm

kernel32

GetStartupInfoA
ExitProcess
GetProcAddress
GetModuleHandleA
VirtualQueryEx
VirtualProtectEx
LocalLock
WaitForSingleObject
FoldStringA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zlquf
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5b1b51ab0ae46f829e571e31789874e

Code Sign

34:b8:91:b9:c4:a1:63:9a:44:fc:a7:81:a2:a8:78:02Certificate

8a:a4:ad:b7:6f:ee:be:cd:4d:5e:9f:79:a6:d3:80:3a:b9:61:09:33Signer

Signature Validations

Verification

01/01/0001, 00:00 Valid: false

Headers

File Characteristics

Imports

user32

ole32

oledlg

msvcrt

kernel32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 1024B - Virtual size: 856B

.data Size: 284KB - Virtual size: 366KB

zlquf Size: 110KB - Virtual size: 109KB

.rsrc Size: 5KB - Virtual size: 5KB

34:b8:91:b9:c4:a1:63:9a:44:fc:a7:81:a2:a8:78:02
Certificate

8a:a4:ad:b7:6f:ee:be:cd:4d:5e:9f:79:a6:d3:80:3a:b9:61:09:33
Signer

01/01/0001, 00:00
Valid: false

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 1024B - Virtual size: 856B

.data
Size: 284KB - Virtual size: 366KB

zlquf
Size: 110KB - Virtual size: 109KB

.rsrc
Size: 5KB - Virtual size: 5KB