ash_inet2[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

ash_inet2.dll
Size

7.0MB
MD5

1260b6ada3b4370953a146c07ee1b35b
SHA1

03038fc779cdbda354c27da15b41a4f19394fa9a
SHA256

245ae1378ca6aa057b368c02b03f912e7d18efcee51a8dd4b72009d488d1b2de
SHA512

b2be91fc0e70746152dc20e74cf113f3dbf2a60936272d052679fb06e5d4c82004c3e4ee231b0a19923b26c11285580d2022b22063e1003cd9c8a55d7c7fc275
SSDEEP

49152:wfbD6xehwpm3ckbCP5UouVw4TqfCi1g7h7xmnj6suC1B/asVLFP12So3FGUHZvvA:wbDweG

Score

1^/10

Malware Config

Signatures

Files

ash_inet2.dll
.dll windows x86

105d10126d82ba2605d2d8b4987530a6

Code Sign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

04/04/2017, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

04/04/2017, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ab:7c:48:bd:ac:86:a9:55:d2:53:84:bd:a0:6f:84:38:90:24:c1:3b:63:a1:ef:ab:6f:05:df:2c:49:0c:c3:dd
Signer

Actual PE Digest

ab:7c:48:bd:ac:86:a9:55:d2:53:84:bd:a0:6f:84:38:90:24:c1:3b:63:a1:ef:ab:6f:05:df:2c:49:0c:c3:dd

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

15/01/2016, 15:07
Valid: false

a1:6f:8b:84:a2:3e:ab:84:7b:6a:f7:ae:cc:29:ec:5e:2c:3b:e1:4c
Signer

Actual PE Digest

a1:6f:8b:84:a2:3e:ab:84:7b:6a:f7:ae:cc:29:ec:5e:2c:3b:e1:4c

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

15/01/2016, 15:07
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

user32

CharNextW
LoadStringW
ShowWindow
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
FindWindowW
CharUpperBuffW
CharUpperW
CharLowerBuffW

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
SwitchToThread
SuspendThread
Sleep
SetThreadPriority
SetFilePointer
SetEvent
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
IsDebuggerPresent
LocalFree
LoadLibraryW
IsValidLocale
IsBadReadPtr
HeapSize
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExW
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeLibrary
FormatMessageW
EnumSystemLocalesW
EnumCalendarInfoW
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

Exports

Exports

TMethodImplementationIntercept
ainet_AnalyticsManagerAddFeature
ainet_AnalyticsManagerAddInfo
ainet_AnalyticsManagerEndFeature
ainet_AnalyticsManagerIsEnabled
ainet_AnalyticsManagerSetEnabled
ainet_AnalyticsManagerStartFeature
ainet_CanContactSupport
ainet_ChannelsEnable
ainet_ChannelsGetCount
ainet_ChannelsGetDescription
ainet_ChannelsGetEnabled
ainet_ChannelsGetHint
ainet_ChannelsGetID
ainet_ChannelsGetName
ainet_ChannelsSettingsAllowed
ainet_CrashReportSend
ainet_Destroy
ainet_FreeString
ainet_FreeWideString
ainet_GetInAppMessageButtonText
ainet_GetInAppMessageCount
ainet_GetInAppMessageHtml
ainet_GetInAppMessageName
ainet_GetInAppMessageText
ainet_GetInAppMessageType
ainet_GetLogFolder
ainet_GetMenuItemsCount
ainet_GetMenuItemsID
ainet_GetMenuItemsImage
ainet_GetMenuItemsImageByID
ainet_GetMenuItemsImagePNG
ainet_GetMenuItemsImagePNGByID
ainet_GetMenuItemsText
ainet_GetMenuItemsTextByMenuID
ainet_GetProductDisplayVersion
ainet_GetProductRevision
ainet_IOControllerDataReceived
ainet_Idle
ainet_Init
ainet_InitAnalyticsManager
ainet_InitIOControllerMaster
ainet_InitIOControllerSlave
ainet_InitRegistrationManager
ainet_LCIDToLangID
ainet_LanguageAddFile
ainet_LanguageDownload
ainet_LanguageFreeList
ainet_LanguageGetComment
ainet_LanguageGetCount
ainet_LanguageGetISO
ainet_LanguageGetName
ainet_LanguageGetNativeName
ainet_LanguageReceiveList
ainet_LanguageSupportIsEnabled
ainet_MakeLinkTargetURL
ainet_MakeLinkTargetURLFromTarget
ainet_OpenLinkTargetInBrowser
ainet_OpenWebTargetInBrowser
ainet_OpenWebTargetInBrowser2
ainet_ProblemReportAddFile
ainet_ProblemReportAddFileWithAlias
ainet_ProblemReportAddTextInMemory
ainet_ProblemReportClearFiles
ainet_ProblemReportSend
ainet_ProcessInAppMessage
ainet_ProcessMenuItem
ainet_RegistrationManagerDoStartupCheck
ainet_RegistrationManagerGetActivationDate
ainet_RegistrationManagerGetEdition
ainet_RegistrationManagerGetEditionLogo
ainet_RegistrationManagerGetExpirationDate
ainet_RegistrationManagerGetFullDaysLeft
ainet_RegistrationManagerGetKey
ainet_RegistrationManagerGetLicenseState
ainet_RegistrationManagerGetSharewareType
ainet_RegistrationManagerGetTrialDaysLeft
ainet_RegistrationManagerGetUpdateType
ainet_RegistrationManagerGetUpgradeCommandText
ainet_RegistrationManagerGetUpgradeName
ainet_RegistrationManagerGetUpgradeType
ainet_RegistrationManagerHasExpired
ainet_RegistrationManagerIsFirstStart
ainet_RegistrationManagerIsFullVersion
ainet_RegistrationManagerIsKeyValid
ainet_RegistrationManagerIsTrialPeriodExtended
ainet_RegistrationManagerIsUpgradeAvailable
ainet_RegistrationManagerMigrateKey
ainet_RegistrationManagerProcessKey
ainet_RegistrationManagerSetLicenseCheck
ainet_RegistrationManagerSetUpgradeName
ainet_RegistrationManagerStartAllChecks
ainet_RegistrationManagerUpdate
ainet_ResolveWebTargetURI
ainet_SetBaseFolder
ainet_SetContext
ainet_SetFile
ainet_SetIO
ainet_SetOnCloseApplicationCallback
ainet_SetOption
ainet_SetParam
ainet_SetProductEdition
ainet_SetProductFile
ainet_SetProductID
ainet_SetProductLang
ainet_SetProductLangLCID
ainet_SetProductName
ainet_SetProductVersion
ainet_SetProductVersionState
ainet_SetRegisterFile
ainet_SetRegisterIO
ainet_SetRegisterRegistryKey
ainet_SetRegisterValueStore
ainet_SetRegistryKey
ainet_SetSystemFile
ainet_SetSystemIO
ainet_SetSystemRegistryKey
ainet_SetSystemValueStore
ainet_SetUserFile
ainet_SetUserIO
ainet_SetUserRegistryKey
ainet_SetUserValueStore
ainet_SetValueStore
ainet_ShowBuyAndActivate
ainet_Shutdown
ainet_StartAllChecks
ainet_StartAllChecksNeeded
ainet_StartAnalyticsConfig
ainet_StartInfoChannelsConfig
ainet_StartInternal
ainet_StartManualUpdateCheck
ainet_StartManualUpdateCheckFlags
ainet_StartManualUpdatePopupCheck
ainet_StartManualUpgradeCheck
ainet_StartManualUpgradeCheckFlags
ainet_UpdateMessages
ainet_addParam
ainet_ex_AddContentWindowEventListener
ainet_ex_AddEventListener
ainet_ex_CreateContentWindow
ainet_ex_DownloadFileA
ainet_ex_DownloadFileW
ainet_ex_DownloadManagerAddDownloadA
ainet_ex_DownloadManagerAddDownloadW
ainet_ex_DownloadManagerExecute
ainet_ex_DownloadManagerExecuteAbort
ainet_ex_DownloadManagerFree
ainet_ex_DownloadManagerGetCount
ainet_ex_DownloadManagerInit
ainet_ex_FreeContentWindow
ainet_ex_GetEventType
ainet_ex_InitializeContentWindow
ainet_ex_IsEventType
ainet_ex_IsKeyValidForServerW
ainet_ex_IsKeyValidW
ainet_ex_IsModuleAllowed
ainet_ex_ProgressWindowFree
ainet_ex_ProgressWindowInitA
ainet_ex_ProgressWindowInitW
ainet_ex_ProgressWindowSetColor
ainet_ex_ProgressWindowSetTextA
ainet_ex_ProgressWindowSetTextW
ainet_ex_ReceiveNewVersionAvailableA
ainet_ex_ReceiveNewVersionAvailableW
ainet_ex_UpdateContentWindow
ainet_ex_UpdateMessageFree
ainet_ex_UpdateMessageGetDownloadURLA
ainet_ex_UpdateMessageGetDownloadURLW
ainet_ex_UpdateMessageGetInstallArgsA
ainet_ex_UpdateMessageGetInstallArgsW
ainet_ex_UpdateMessageGetSignatureA
ainet_ex_UpdateMessageGetSignatureW

Sections

.text
Size: 857KB - Virtual size: 857KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

105d10126d82ba2605d2d8b4987530a6

Code Sign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18Certificate

Extended Key Usages

Key Usages

Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18Certificate

Extended Key Usages

Key Usages

Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

ab:7c:48:bd:ac:86:a9:55:d2:53:84:bd:a0:6f:84:38:90:24:c1:3b:63:a1:ef:ab:6f:05:df:2c:49:0c:c3:ddSigner

Signature Validations

Verification

15/01/2016, 15:07 Valid: false

a1:6f:8b:84:a2:3e:ab:84:7b:6a:f7:ae:cc:29:ec:5e:2c:3b:e1:4cSigner

Signature Validations

Verification

15/01/2016, 15:07 Valid: false

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

Exports

Exports

Sections

.text Size: 857KB - Virtual size: 857KB

.itext Size: 3KB - Virtual size: 2KB

.data Size: 19KB - Virtual size: 18KB

.bss Size: - Virtual size: 21KB

.idata Size: 4KB - Virtual size: 3KB

.didata Size: 512B - Virtual size: 490B

.edata Size: 6KB - Virtual size: 6KB

.rdata Size: 512B - Virtual size: 69B

.reloc Size: 81KB - Virtual size: 80KB

.rsrc Size: 12KB - Virtual size: 12KB

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

ab:7c:48:bd:ac:86:a9:55:d2:53:84:bd:a0:6f:84:38:90:24:c1:3b:63:a1:ef:ab:6f:05:df:2c:49:0c:c3:dd
Signer

15/01/2016, 15:07
Valid: false

a1:6f:8b:84:a2:3e:ab:84:7b:6a:f7:ae:cc:29:ec:5e:2c:3b:e1:4c
Signer

15/01/2016, 15:07
Valid: false

.text
Size: 857KB - Virtual size: 857KB

.itext
Size: 3KB - Virtual size: 2KB

.data
Size: 19KB - Virtual size: 18KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 4KB - Virtual size: 3KB

.didata
Size: 512B - Virtual size: 490B

.edata
Size: 6KB - Virtual size: 6KB

.rdata
Size: 512B - Virtual size: 69B

.reloc
Size: 81KB - Virtual size: 80KB

.rsrc
Size: 12KB - Virtual size: 12KB