DesktopReminderSetup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

DesktopReminderSetup.exe
Size

19.1MB
MD5

16370a9157fa0c21470205bc21f8cc4c
SHA1

f90dc8393e5195476a9dc4fdfb4177bd40ba0c9c
SHA256

1996405aa7358dcd755280dd3aeefa628e80ef41df9755291ace31e8425c2b65
SHA512

11ece5ef994269e2c4bb2b55fca8624bfe48de8b88768dcf5c6fdf0656a9366d31ed2c3eb1e74fa86c94517b5cf4c71012d71cc72fb8a3000edb9e0fad8ac4a5
SSDEEP

393216:X8ST6YSjPDlbelRrLdE8XeJUY2mjEqMfEAI12qKY3NjOszxW/3:pTgbDlbezLdE88BVjEhfEp1nMl

Score

1^/10

Malware Config

Signatures

Files

DesktopReminderSetup.exe
.exe windows x86

c7ad02eb9e6056c54d42bc0a36f8ba98

Code Sign

04:7a:55
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

03/03/2009, 12:58

Not After

03/03/2024, 12:58

Subject

CN=Certum Time-Stamping Authority,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

fa:33:b7:9d:d4:96:cf:d1:0c:84:65:39:a4:9d:63:b5
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

20/09/2011, 11:04

Not After

20/09/2026, 23:59

Subject

CN=Certum Code Signing CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

38:13:83:41:71:f8:2b:93:54:ec:3f:89:8d:8d:94:69
Certificate

Issuer

CN=Certum Code Signing CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

06/01/2014, 06:47

Not After

05/01/2017, 06:47

Subject

CN=Polenter - Pawel Idzikowski,OU=Unizeto CERTUM (r) Certificates,O=Polenter - Software Solutions,C=DE,1.2.840.113549.1.9.1=#0c1769647a696b6f77736b6940706f6c656e7465722e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

4f:6d:33:78:67:c0:1c:56:5b:b2:b9:3c:a7:2f:10:bd:11:19:b2:e4
Signer

Actual PE Digest

4f:6d:33:78:67:c0:1c:56:5b:b2:b9:3c:a7:2f:10:bd:11:19:b2:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
LocalFree
FormatMessageW
FindClose
FindFirstFileW
FindNextFileW
GetLastError
CloseHandle
GetFileSize
SetFilePointer
ReadFile
SetFileTime
WriteFile
SetEndOfFile
GetCurrentDirectoryW
CreateFileW
GetStdHandle
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
VirtualAlloc
VirtualFree
GetVersionExW
WaitForSingleObject
CreateEventW
SetEvent
ResetEvent
InitializeCriticalSection
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetWindowsDirectoryW
SetFileAttributesW
RemoveDirectoryW
DeleteFileW
GetShortPathNameW
GetTempPathW
GetTempFileNameW
lstrlenW
GetFullPathNameW
Sleep
GetVersion
SetCurrentDirectoryW
GetExitCodeProcess
CreateProcessW
GetCommandLineW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryA
GetSystemTimeAsFileTime
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
CreateDirectoryW
DeleteCriticalSection
HeapCreate
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
RaiseException
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
CreateThread
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc

user32

CharUpperW
DestroyWindow
RegisterWindowMessageW
LoadIconW
KillTimer
SetTimer
PostMessageW
SetDlgItemTextW
EndDialog
IsDlgButtonChecked
SetWindowTextW
PeekMessageW
MessageBoxW
GetDesktopWindow
SetForegroundWindow
DialogBoxParamW
SendMessageW
GetWindowLongW
SetWindowLongW
ShowWindow
GetWindowTextW
GetWindowTextLengthW
LoadStringW
GetDlgItem

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

ShellExecuteExW

ole32

CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
SysAllocString
VariantClear
SysFreeString

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7ad02eb9e6056c54d42bc0a36f8ba98

Code Sign

04:7a:55Certificate

Extended Key Usages

fa:33:b7:9d:d4:96:cf:d1:0c:84:65:39:a4:9d:63:b5Certificate

Extended Key Usages

Key Usages

38:13:83:41:71:f8:2b:93:54:ec:3f:89:8d:8d:94:69Certificate

Extended Key Usages

Key Usages

4f:6d:33:78:67:c0:1c:56:5b:b2:b9:3c:a7:2f:10:bd:11:19:b2:e4Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 123KB - Virtual size: 122KB

.rdata Size: 33KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 28KB

.rsrc Size: 93KB - Virtual size: 92KB

04:7a:55
Certificate

fa:33:b7:9d:d4:96:cf:d1:0c:84:65:39:a4:9d:63:b5
Certificate

38:13:83:41:71:f8:2b:93:54:ec:3f:89:8d:8d:94:69
Certificate

4f:6d:33:78:67:c0:1c:56:5b:b2:b9:3c:a7:2f:10:bd:11:19:b2:e4
Signer

.text
Size: 123KB - Virtual size: 122KB

.rdata
Size: 33KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 28KB

.rsrc
Size: 93KB - Virtual size: 92KB