9682cafae46c714c0004127cadafdba55de29095e59c4433d32ff3ed96069632

Sharing

Copy URL

Twitter E-mail

General

Target

9682cafae46c714c0004127cadafdba55de29095e59c4433d32ff3ed96069632
Size

442KB
MD5

0d04ab4fa295d2175de58493a1054baa
SHA1

fdb9b94bae49fb2707925073fe17af51ef5faaa2
SHA256

9682cafae46c714c0004127cadafdba55de29095e59c4433d32ff3ed96069632
SHA512

8e97af0f2431aec05d06044f2f8cfb89f594b04d16ba6513b5eeba38fdff97466e56b1cf6aff8589fe6b534d77bb02ab3c134d91295d1d8dd98fe767e1800d51
SSDEEP

12288:/99FhKA4xgcGDH9PfGRLvxUMlMMns1dRH7g:/ZhFcPOMl2Rg

Score

N/A

Malware Config

Signatures

Files

9682cafae46c714c0004127cadafdba55de29095e59c4433d32ff3ed96069632
.exe windows x86

e92a0845e779cfba4df9af29a759a3e7

Code Sign

17:01:83:af:d2:72:b7:4d:be:f3:6b:9e:3f:4d:1d:67
Certificate

Issuer

CN=gaxdhgmljyk

Not Before

03-12-2011 07:30

Not After

28-04-2012 22:00

Subject

CN=Nefigudwe

14:13:37:bc:23:6b:e9:26:73:66:9b:9d:d6:4c:9d:65:a2:e5:80:69
Signer

Actual PE Digest

14:13:37:bc:23:6b:e9:26:73:66:9b:9d:d6:4c:9d:65:a2:e5:80:69

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

NO CERTIFICATE

01-01-0001 00:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindow
ShowOwnedPopups
GetWindowTextLengthA
GetDesktopWindow

ole32

CoDosDateTimeToFileTime
CreatePointerMoniker
CoGetMalloc
OleSetContainedObject
CoUnmarshalHresult
GetRunningObjectTable
CreateClassMoniker

comctl32

DestroyPropertySheetPage
PropertySheetA

kernel32

LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
GetStringTypeA
SetEndOfFile
SetStdHandle
FlushFileBuffers
LoadLibraryA
GetStringTypeW
ReadFile
GetEnvironmentStringsW
GetCPInfo
CreateSemaphoreA
GlobalSize
ReleaseMutex
FoldStringA
GetFileType
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetStdHandle
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
CloseHandle
CreateFileA
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 297KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e92a0845e779cfba4df9af29a759a3e7

Code Sign

17:01:83:af:d2:72:b7:4d:be:f3:6b:9e:3f:4d:1d:67Certificate

14:13:37:bc:23:6b:e9:26:73:66:9b:9d:d6:4c:9d:65:a2:e5:80:69Signer

Signature Validations

Verification

01-01-0001 00:00 Valid: false

Headers

File Characteristics

Imports

user32

ole32

comctl32

kernel32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 113KB - Virtual size: 112KB

.data Size: 297KB - Virtual size: 386KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 3KB - Virtual size: 3KB

17:01:83:af:d2:72:b7:4d:be:f3:6b:9e:3f:4d:1d:67
Certificate

14:13:37:bc:23:6b:e9:26:73:66:9b:9d:d6:4c:9d:65:a2:e5:80:69
Signer

01-01-0001 00:00
Valid: false

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 113KB - Virtual size: 112KB

.data
Size: 297KB - Virtual size: 386KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 3KB - Virtual size: 3KB