10cfcc9cd15a7664530ff295735c29b3

Sharing

Copy URL Twitter E-mail

General

Target

10cfcc9cd15a7664530ff295735c29b3
Size

177KB
MD5

10cfcc9cd15a7664530ff295735c29b3
SHA1

552cff9f5f38d23e5a125e4f1ed6dc0d522e44db
SHA256

9bde3d9b757e980a65ef4d56ae7cb4631cb32e94d1750a3cc79bce2c92783c9a
SHA512

69755419465e7a59ea4bd987dcb59c23fa00f199838cc5b1715ca3b26e80c937ecf77918e60a6412930a76235994079cb7121c3fed125ebb28a67f5f6af60290
SSDEEP

3072:I/vaq7tkDoR/jeyumob4sYdP56uHTcpxL4tFbT8ync3WqQ:I/i0ysjEfYdP3HTcnL4tFbnncGh

Score

1^/10

Malware Config

Signatures

Files

10cfcc9cd15a7664530ff295735c29b3
.exe windows:5 windows x86 arch:x86

ae5e6017d3a083f159f46bf185983e18

Code Sign

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16
Certificate

Issuer

CN=0osU

Not Before

19/06/2012, 07:13

Not After

31/12/2039, 23:59

Subject

CN=0osU

Extended Key Usages

ExtKeyUsageCodeSigning

f7:68:41:a5:6c:71:3e:55:e2:5c:dc:95:2d:c8:f6:34:7f:d2:95:c2
Signer

Actual PE Digest

f7:68:41:a5:6c:71:3e:55:e2:5c:dc:95:2d:c8:f6:34:7f:d2:95:c2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
FileTimeToDosDateTime
lstrcatA
GetProcAddress
LoadLibraryW
GetCommandLineA
CreateFileA
CreateFileMappingA
EnumSystemCodePagesW
FindFirstFileExW
GetACP
GetComputerNameExW
GetConsoleAliasesLengthW
GetConsoleDisplayMode
QueueUserAPC
SignalObjectAndWait
TlsFree
WaitCommEvent
WriteProfileStringA

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.16
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data17
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data16
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data15
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data14
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data13
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data12
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae5e6017d3a083f159f46bf185983e18

Code Sign

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16Certificate

Extended Key Usages

f7:68:41:a5:6c:71:3e:55:e2:5c:dc:95:2d:c8:f6:34:7f:d2:95:c2Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 165KB - Virtual size: 165KB

.rdata Size: 1024B - Virtual size: 568B

.data Size: 512B - Virtual size: 372B

.16 Size: 1KB - Virtual size: 1KB

.data17 Size: 1024B - Virtual size: 1000B

.data16 Size: 1024B - Virtual size: 1000B

.data15 Size: 1024B - Virtual size: 1000B

.data14 Size: 1024B - Virtual size: 1000B

.data13 Size: 1024B - Virtual size: 1000B

.data12 Size: 1024B - Virtual size: 1000B

.reloc Size: 1024B - Virtual size: 1.2MB

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16
Certificate

f7:68:41:a5:6c:71:3e:55:e2:5c:dc:95:2d:c8:f6:34:7f:d2:95:c2
Signer

.text
Size: 165KB - Virtual size: 165KB

.rdata
Size: 1024B - Virtual size: 568B

.data
Size: 512B - Virtual size: 372B

.16
Size: 1KB - Virtual size: 1KB

.data17
Size: 1024B - Virtual size: 1000B

.data16
Size: 1024B - Virtual size: 1000B

.data15
Size: 1024B - Virtual size: 1000B

.data14
Size: 1024B - Virtual size: 1000B

.data13
Size: 1024B - Virtual size: 1000B

.data12
Size: 1024B - Virtual size: 1000B

.reloc
Size: 1024B - Virtual size: 1.2MB