1555e7ae203b7df92f9ecd50b65bb727

Sharing

Copy URL Twitter E-mail

General

Target

1555e7ae203b7df92f9ecd50b65bb727
Size

354KB
MD5

1555e7ae203b7df92f9ecd50b65bb727
SHA1

b5d181bc7ed4e8a51386d7ae42a8ea292ade47b2
SHA256

ede018d6ab66b24803402bc8d1fda61520907453dad82d424939943d1fa9308d
SHA512

e94ef5c05f14b6f6f5bf553b60f74c0e9e2fa6142ae02590538595e40df4d7a5d0ba80f2c4824d6032dd748fe9e2b37b4cfb0b3d0e85bd2985889b7dc3bef6c2
SSDEEP

6144:Dahf22W/lDhuFDIliBXylokhDHMEO+qCpMn9EqBMhXNUotueku:022W/thBmXyOkpHLOpmMt2hdDseku

Score

1^/10

Malware Config

Signatures

Files

1555e7ae203b7df92f9ecd50b65bb727
.exe windows:4 windows x86 arch:x86

557ebe3be24fbb83c712781056c65714

Code Sign

1f:f6:d9:ed:57:4e:c2:a0:99:38:9b:4b:de:6c:6d:c4
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/02/2015, 00:00

Not After

25/02/2016, 23:59

Subject

CN=Consortium Group ltd,O=Consortium Group ltd,POSTALCODE=00152,STREET=CORNER OF GR.MARLBOROUGH UN GR.GEORGE STR.+STREET=3RD FLOOR\, C&h TOWERS\,,L=ROSEAU,ST=ROSEAU,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

77:ca:cb:08:33:be:a7:ee:3f:07:72:3f:c9:4c:ff:d4:c1:27:0e:e2
Signer

Actual PE Digest

77:ca:cb:08:33:be:a7:ee:3f:07:72:3f:c9:4c:ff:d4:c1:27:0e:e2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Write
ord17

wininet

InternetOpenA
InternetCloseHandle
HttpEndRequestA

kernel32

lstrcmpiA
GetModuleHandleW
ReadFile
GetLastError
DeleteFileW
GetCurrentProcess
GetUserDefaultLangID
CreateThread
QueryPerformanceCounter
CloseHandle
GetCurrentProcessId
GetTempPathW
CreateDirectoryW
GetTempPathA
GetSystemInfo
GetStringTypeExA
FreeResource
InterlockedIncrement
LoadLibraryA
GetSystemTimeAsFileTime
SetCurrentDirectoryW
CreateFileA
GetCPInfo
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStringTypeW
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
HeapFree
SetFilePointer
SetEndOfFile
MultiByteToWideChar
VirtualAlloc
ExitProcess
WriteFile
SetErrorMode
GetVersion
GetTickCount
GetCommandLineA
GetStartupInfoA
GetVersionExA
GetModuleHandleA
GetProcAddress
GetACP
GetCurrentThreadId
GetOEMCP
LCMapStringA
LCMapStringW
GetStringTypeA
CreateFileMappingA

user32

ShowWindow
IsZoomed
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
GetWindowPlacement
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
IsWindowEnabled
IsWindowVisible
GetWindowRect
CharNextW
RegisterClassExA
MessageBoxA
CreateWindowExA
GetSystemMetrics

gdi32

GetLogColorSpaceW
SetAbortProc
DeleteMetaFile
OffsetWindowOrgEx
CreateFontIndirectA
DeleteEnhMetaFile
SetEnhMetaFileBits
SetPixel
SetROP2
StretchBlt
UnrealizeObject
Rectangle
GetStockObject

comdlg32

ReplaceTextW

advapi32

AllocateAndInitializeSid
RegCloseKey
RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc

oleaut32

SafeArrayCreate
VariantInit
VariantChangeType

Sections

.text
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

557ebe3be24fbb83c712781056c65714

Code Sign

1f:f6:d9:ed:57:4e:c2:a0:99:38:9b:4b:de:6c:6d:c4Certificate

Extended Key Usages

Key Usages

77:ca:cb:08:33:be:a7:ee:3f:07:72:3f:c9:4c:ff:d4:c1:27:0e:e2Signer

Headers

File Characteristics

Imports

comctl32

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 284KB - Virtual size: 282KB

.data Size: 32KB - Virtual size: 30KB

.tls Size: 4KB - Virtual size: 12B

.rsrc Size: 28KB - Virtual size: 26KB

1f:f6:d9:ed:57:4e:c2:a0:99:38:9b:4b:de:6c:6d:c4
Certificate

77:ca:cb:08:33:be:a7:ee:3f:07:72:3f:c9:4c:ff:d4:c1:27:0e:e2
Signer

.text
Size: 284KB - Virtual size: 282KB

.data
Size: 32KB - Virtual size: 30KB

.tls
Size: 4KB - Virtual size: 12B

.rsrc
Size: 28KB - Virtual size: 26KB