Video_Driver_N3N4M_WN_9[.]18[.]10[.]3071_A00[.]EXE

Sharing

Copy URL Twitter E-mail

General

Target

Video_Driver_N3N4M_WN_9.18.10.3071_A00.EXE
Size

155.2MB
MD5

ada483a1dc845125237627b0bbfbc585
SHA1

cfa68b8a81cd83e7fa079b8f5dae216cc982556b
SHA256

aec8555948a89cb8b1acea6414551c4b09cd53a355b7303dbea73d43d9de231c
SHA512

67ecee5ab8094eaeaaadf601fea348ace84d82867430240258a22291b7c9f68ced79864f34060a2542cc3d07b868298cfc29cc54e022a86654169e1e95be997e
SSDEEP

3145728:TulDWvl6AQra9ZqgwpjQQG7WReQUPmec9OHCrn8DC5+bsUO5E:Ygug0jwqRe4bkCr8u5+bsUO

Score

1^/10

Malware Config

Signatures

Files

Video_Driver_N3N4M_WN_9.18.10.3071_A00.EXE
.exe windows x86

Password: infected

847cd35355d592e14eb3126fa98df10e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:19:f3:5d:00:01:00:00:05:66
Certificate

Issuer

CN=Dell Inc. Enterprise Issuing CA2,O=Dell Inc.

Not Before

20/01/2012, 23:32

Not After

20/01/2014, 23:42

Subject

CN=Dell Inc.,OU=PG,O=Dell Inc.,L=Round Rock,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

10:4f:47:1b:00:00:00:00:00:1c
Certificate

Issuer

CN=Dell Inc. Enterprise CA,O=Dell Inc.

Not Before

19/01/2012, 20:03

Not After

19/01/2017, 20:13

Subject

CN=Dell Inc. Enterprise Issuing CA2,O=Dell Inc.

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:00:03:ae
Certificate

Issuer

CN=GTE CyberTrust Global Root,OU=GTE CyberTrust Solutions\, Inc.,O=GTE Corporation,C=US

Not Before

17/11/2004, 15:25

Not After

13/08/2018, 23:59

Subject

CN=Dell Inc. Enterprise CA,O=Dell Inc.

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment
KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

38:cf:08:15:ea:6c:fc:82:0d:09:64:83:43:37:4e:83:10:ba:56:26
Signer

Actual PE Digest

38:cf:08:15:ea:6c:fc:82:0d:09:64:83:43:37:4e:83:10:ba:56:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

GetSystemInfo
VirtualQuery
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
DebugBreak
FatalAppExitA
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetFileInformationByHandle
PeekNamedPipe
SetCurrentDirectoryA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetEnvironmentVariableW
GetLastError
GetVersionExW
CloseHandle
GetFileType
GetExitCodeProcess
WaitForSingleObjectEx
DeleteFileW
GetTempFileNameW
ReadFile
CreateFileW
CreateDirectoryA
lstrlenW
GetWindowsDirectoryW
WideCharToMultiByte
RemoveDirectoryW
SetUnhandledExceptionFilter
MultiByteToWideChar
lstrlenA
GetModuleFileNameW
GetFullPathNameW
LocalFree
FormatMessageW
FindClose
VirtualAlloc
GetShortPathNameW
RemoveDirectoryA
GetLocaleInfoW
FindFirstFileW
CopyFileW
FindNextFileW
GetFileAttributesW
FindFirstFileA
CopyFileA
FindNextFileA
SetFileAttributesW
GetFileAttributesA
FindResourceW
SizeofResource
LockResource
LoadResource
GetCommandLineW
GetModuleHandleW
FindResourceA
SetStdHandle
HeapReAlloc
ExitProcess
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
GetSystemTimeAsFileTime
RtlUnwind
LocalLock
LocalUnlock
FindResourceExW
GetDiskFreeSpaceW
VirtualProtect
GetProfileIntW
SearchPathW
GetSystemDirectoryW
GetTempPathW
GetTickCount
lstrcpyW
GetCurrentDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
SetErrorMode
GlobalFlags
SystemTimeToFileTime
GetAtomNameW
GlobalGetAtomNameW
TlsFree
LocalReAlloc
GlobalHandle
GlobalReAlloc
WaitForMultipleObjects
CreateMutexW
ReleaseSemaphore
CreateSemaphoreW
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
CreateThread
ExitThread
CreateDirectoryW
GetDriveTypeW
DeleteFileA
ConvertDefaultLocale
EnumResourceLanguagesW
GlobalLock
GlobalAlloc
GetModuleFileNameA
LoadLibraryExW
CompareStringA
lstrcmpA
GetVolumeInformationW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
lstrcmpiW
GetThreadLocale
GetStringTypeExW
MoveFileW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
RaiseException
SetLastError
GlobalSize
MulDiv
GetCurrentDirectoryA
GetStartupInfoA
CreateProcessA
FindFirstVolumeA
GetLogicalDriveStringsA
FindVolumeClose
HeapAlloc
InterlockedExchange
lstrcmpiA
lstrcpynA
GetProcessHeap
HeapFree
FileTimeToSystemTime
GlobalUnlock
GetFileTime
GetLocaleInfoA
GetDriveTypeA
SetVolumeLabelA
GetFullPathNameA
GetVolumeInformationA
FileTimeToLocalFileTime
CreateFileA
SetFileAttributesA
SetFileTime
GetVersion
lstrcpyA
GetSystemDirectoryA
LoadLibraryA
TlsGetValue
GetCurrentProcess
GetCurrentThread
DuplicateHandle
TlsSetValue
InterlockedIncrement
TlsAlloc
GetCurrentThreadId
InterlockedCompareExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseMutex
CreateMutexA
GetVersionExA
GetModuleHandleA
GetStartupInfoW
CreateProcessW
WaitForSingleObject
GetSystemTime
GetLocalTime
FreeResource
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCurrentProcessId
FreeConsole
AttachConsole
GetStdHandle
Sleep
GetProcAddress
LocalAlloc
InterlockedDecrement
LoadLibraryW
FreeLibrary
GlobalFree

user32

SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetCursorPos
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
InsertMenuItemW
TranslateAcceleratorW
GetNextDlgGroupItem
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageW
DestroyIcon
CopyImage
OpenClipboard
DrawStateW
RegisterClipboardFormatW
EnumChildWindows
LockWindowUpdate
BringWindowToTop
KillTimer
SetTimer
IsMenu
GetSystemMenu
SetClassLongW
SetParent
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
CreateAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
GetAsyncKeyState
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
PostThreadMessageW
LoadMenuW
SetRectEmpty
WaitMessage
WindowFromPoint
DeleteMenu
UnregisterClassW
DestroyMenu
GetMenuItemInfoW
InflateRect
GetDialogBaseUnits
SetWindowContextHelpId
MapDialogRect
CharNextW
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
GetSysColorBrush
MsgWaitForMultipleObjects
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
SystemParametersInfoW
MessageBeep
RedrawWindow
PostQuitMessage
CharUpperW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuDefaultItem
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
IsClipboardFormatAvailable
SendNotifyMessageW
InSendMessage
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffW
CopyIcon
SubtractRect
GetIconInfo
GetDoubleClickTime
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SetWindowLongW
SetWindowPos
OffsetRect
CreateMenu
GetWindowRgn
DestroyCursor
GetDCEx
WindowFromDC
GetTabbedTextExtentW
GetTabbedTextExtentA
GrayStringW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
CharToOemA
OemToCharA
FindWindowW
GetParent
GetWindowThreadProcessId
GetWindow
PostMessageW
LoadIconW
EnableWindow
FlashWindow
GetClientRect
IsIconic
SendMessageW
DrawIcon
LoadCursorW
SetCursor
GetCursorPos
wsprintfW
MessageBoxW
GetSystemMetrics
IsZoomed

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
GetRgnBox
GetBkColor
GetTextColor
GetTextExtentPoint32W
GetTextMetricsW
CreateFontIndirectW
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
OffsetRgn
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
SetDIBColorTable
OffsetViewportOrgEx
RealizePalette
StretchBlt
SetPixel
CreateDIBSection
GetCharWidthW
CreateFontW
StretchDIBits
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetTextExtentPoint32A
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
SetPixelV
SelectObject
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
GetDeviceCaps
GetDIBits
CreateDCW
CopyMetaFileW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
GetJobW
ClosePrinter

advapi32

RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetSecurityDescriptorLength
GetSecurityDescriptorGroup
IsValidSid
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
IsValidAcl
GetFileSecurityW
SetFileSecurityW
RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
IsTextUnicode
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeValueW
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityDescriptorControl
GetKernelObjectSecurity
SetKernelObjectSecurity
IsValidSecurityDescriptor
GetSecurityDescriptorDacl

shell32

ExtractIconW
SHGetFolderPathW
CommandLineToArgvW
SHGetPathFromIDListW
SHBrowseForFolderW
ord680
SHFileOperationW
SHGetFileInfoW
ShellExecuteW
DragQueryFileW
DragFinish
ShellExecuteExW
SHAppBarMessage
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder

comctl32

InitCommonControlsEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx

shlwapi

PathRemoveFileSpecW
PathRemoveExtensionW
PathFindExtensionA
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathAppendW
PathFindExtensionW

ole32

CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
DoDragDrop
OleDuplicateData
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoCreateGuid
StringFromGUID2
CoDisconnectObject
CLSIDFromString
OleFlushClipboard
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CreateStreamOnHGlobal
OleRun
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleLockRunning
OleSetMenuDescriptor
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleSetClipboard
OleIsCurrentClipboard
SetConvertStg
OleGetClipboard
CoRegisterClassObject
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
CoGetMalloc
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
OleRegGetMiscStatus
OleRegEnumVerbs
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromData
OleSaveToStream
WriteClassStm
OleSave
IsAccelerator
OleDestroyMenuDescriptor
OleTranslateAccelerator
OleCreateMenuDescriptor
CoRegisterMessageFilter
WriteFmtUserTypeStg
CoRevokeClassObject

oleaut32

VariantClear
OleCreateFontIndirect
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadTypeLi
RegisterTypeLi
LoadRegTypeLi
DispCallFunc
SysAllocStringLen
VariantChangeType
VariantCopy
VarBstrCmp
SysStringByteLen
SysStringLen
SysAllocString
SysFreeString
VariantInit
GetErrorInfo
SetErrorInfo
SysAllocStringByteLen
CreateErrorInfo

gdiplus

GdipDeleteGraphics
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipAlloc
GdipFree

ws2_32

bind
listen
WSAStartup
socket
ioctlsocket
connect
__WSAFDIsSet
getsockopt
recv
send
select
closesocket
WSACleanup
WSASetLastError
ntohs
getservbyport
gethostbyaddr
htons
getservbyname
htonl
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr
getsockname

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Exports

Exports

?freePMInfo@@YAHPAUPMInfo@@@Z
?getPMInfo@@YAHHPAPAUPMInfo@@@Z
?getPMStatus@@YAHXZ
?getTestPMInfo@@YAHHPAPAUPMInfo@@@Z

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 735KB - Virtual size: 735KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

847cd35355d592e14eb3126fa98df10e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

15:19:f3:5d:00:01:00:00:05:66Certificate

Extended Key Usages

Key Usages

10:4f:47:1b:00:00:00:00:00:1cCertificate

Key Usages

04:00:03:aeCertificate

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

38:cf:08:15:ea:6c:fc:82:0d:09:64:83:43:37:4e:83:10:ba:56:26Signer

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

ws2_32

imm32

winmm

Exports

Exports

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 735KB - Virtual size: 735KB

.data Size: 47KB - Virtual size: 87KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 226KB - Virtual size: 226KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

15:19:f3:5d:00:01:00:00:05:66
Certificate

10:4f:47:1b:00:00:00:00:00:1c
Certificate

04:00:03:ae
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

38:cf:08:15:ea:6c:fc:82:0d:09:64:83:43:37:4e:83:10:ba:56:26
Signer

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 735KB - Virtual size: 735KB

.data
Size: 47KB - Virtual size: 87KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 226KB - Virtual size: 226KB