06e0b33b2ad19a96765b29824516b08c

Sharing

Copy URL

Twitter E-mail

General

Target

06e0b33b2ad19a96765b29824516b08c
Size

322KB
MD5

06e0b33b2ad19a96765b29824516b08c
SHA1

9e5760c1bf5caf5f799a2ddfab930316f3f86ab7
SHA256

f273fedb3d953ee02c4e8b68d3875740ffbf06e625080ffbfe5e18a29600a2ee
SHA512

ebfecc29e13c60de209d93ec5c6070190d03acf74da8bedb9f295c693a182e7f2690e0579dd2db0e8480eff9ec25c13d9d7b0269f955441d5e0705ee650533da
SSDEEP

6144:mnuPxdfPiuo1LElHb4RvZglDMGsI1FnyMWBguJJ:mMxxKuo12b4JeZVurJJ

Score

1^/10

Malware Config

Signatures

Files

06e0b33b2ad19a96765b29824516b08c
.exe windows:4 windows x86 arch:x86

a80f3ec3b7b94e36c5607a502e4829a9

Code Sign

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

17-09-2014 00:00

Not After

25-11-2015 12:00

Subject

CN=Consortium ltd.,O=Consortium ltd.,L=Roseau,ST=Commonwealth of Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

15:98:6a:e4:92:57:4c:78:f4:5e:7a:18:46:bc:ab:21:2a:25:30:63
Signer

Actual PE Digest

15:98:6a:e4:92:57:4c:78:f4:5e:7a:18:46:bc:ab:21:2a:25:30:63

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

VerQueryValueW

kernel32

TlsSetValue
GetLastError
CreateFileMappingA
FreeLibrary
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
CloseHandle
QueryPerformanceCounter
CreateThread
DeleteFileW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
ReadFile
SetStdHandle
SetFilePointer
HeapReAlloc
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
LockResource
lstrcmpiA
CreateFileA
VirtualAlloc
WriteFile
GetCommandLineW
GetTickCount
GetStringTypeW
GetModuleHandleW
GetVersionExA
GetVersion
ExitProcess
TlsGetValue
GetStartupInfoA
GetModuleHandleA
GetProcAddress
GetCommandLineA
LCMapStringW
GetStringTypeA
FlushFileBuffers

user32

CreateWindowExA
GetSystemMenu
GetClassNameA
InvalidateRect
IsDialogMessageA
GetWindowLongA
GetSystemMetrics
GetClassInfoA
MessageBoxA
ShowWindow
RegisterClipboardFormatA
IsChild
IsIconic
IsRectEmpty
IsWindow
RemovePropA
SetMenu
SetMenuItemInfoA
SetPropA
SetRect
SetScrollInfo
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
IsWindowEnabled
IsWindowVisible
IsZoomed
RemoveMenu
GetClientRect
RegisterClassExA
EndDialog
GetCapture

gdi32

Rectangle
SetAbortProc
GetLogColorSpaceW
SetBkMode
DeleteObject
CreatePen
CreatePenIndirect
GetClipBox
SetBkColor
DeleteEnhMetaFile
CreateFontIndirectA
OffsetWindowOrgEx
ExcludeClipRect
DeleteMetaFile

comdlg32

ReplaceTextW

advapi32

GetUserNameA
AllocateAndInitializeSid
RegCloseKey
RegSetValueExW

shell32

ShellExecuteA

ole32

CoInitialize
CoUninitialize

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayPutElement
VariantInit
SafeArrayRedim

Sections

.text
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a80f3ec3b7b94e36c5607a502e4829a9

Code Sign

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8Certificate

Extended Key Usages

Key Usages

15:98:6a:e4:92:57:4c:78:f4:5e:7a:18:46:bc:ab:21:2a:25:30:63Signer

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 268KB - Virtual size: 264KB

.qdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 28KB - Virtual size: 26KB

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8
Certificate

15:98:6a:e4:92:57:4c:78:f4:5e:7a:18:46:bc:ab:21:2a:25:30:63
Signer

.text
Size: 268KB - Virtual size: 264KB

.qdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 28KB - Virtual size: 26KB