31f36a89880ec4d5a9757f39dea5fb9a

Sharing

Copy URL Twitter E-mail

General

Target

31f36a89880ec4d5a9757f39dea5fb9a
Size

45KB
MD5

31f36a89880ec4d5a9757f39dea5fb9a
SHA1

f20acc8a08a5649983cb2661ccb54c24d9677c70
SHA256

17c78be68ff2291d42556e3199a6159f81a6cad0f55b87a55e8c2439b5322da2
SHA512

6a51be830f64efdd703a21693c51d67f69390832b99f7da290470184548f4855dcdf9e4c3498a45b644d475a754766fc70cd5db61b030009ae93ab22831a68c3
SSDEEP

768:yrKPDHKzKKUtYlnNBoGMkqx3qo6q6fCv2FZMXC5Hf5L/tesPKBP:yr6DYUiPoGq9qBq6fC0MXCl5hXK9

Score

1^/10

Malware Config

Signatures

Files

31f36a89880ec4d5a9757f39dea5fb9a
.exe windows:5 windows x86 arch:x86

e9125a586db5f70c6ff8cbca472de0e7

Code Sign

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16
Certificate

Issuer

CN=0osU

Not Before

19/06/2012, 07:13

Not After

31/12/2039, 23:59

Subject

CN=0osU

Extended Key Usages

ExtKeyUsageCodeSigning

00:60:7b:af:67:0a:6e:ee:14:5d:b7:6c:c0:a3:41:6e:ba:39:e8:fd
Signer

Actual PE Digest

00:60:7b:af:67:0a:6e:ee:14:5d:b7:6c:c0:a3:41:6e:ba:39:e8:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
FileTimeToDosDateTime
lstrcatA
GetProcAddress
LoadLibraryW
GetCommandLineA
CreateFileA
FindNextFileW
GetConsoleAliasExesA
ProcessIdToSessionId
QueueUserAPC
SetComputerNameExA
lstrcmpW

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.16
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data18
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data17
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data16
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data15
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data14
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data13
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data12
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9125a586db5f70c6ff8cbca472de0e7

Code Sign

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16Certificate

Extended Key Usages

00:60:7b:af:67:0a:6e:ee:14:5d:b7:6c:c0:a3:41:6e:ba:39:e8:fdSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 512B - Virtual size: 398B

.data Size: 512B - Virtual size: 376B

.16 Size: 1024B - Virtual size: 1024B

.data18 Size: 1024B - Virtual size: 1000B

.data17 Size: 1024B - Virtual size: 1000B

.data16 Size: 1024B - Virtual size: 1000B

.data15 Size: 1024B - Virtual size: 1000B

.data14 Size: 1024B - Virtual size: 1000B

.data13 Size: 1024B - Virtual size: 1000B

.data12 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 344B

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16
Certificate

00:60:7b:af:67:0a:6e:ee:14:5d:b7:6c:c0:a3:41:6e:ba:39:e8:fd
Signer

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 512B - Virtual size: 398B

.data
Size: 512B - Virtual size: 376B

.16
Size: 1024B - Virtual size: 1024B

.data18
Size: 1024B - Virtual size: 1000B

.data17
Size: 1024B - Virtual size: 1000B

.data16
Size: 1024B - Virtual size: 1000B

.data15
Size: 1024B - Virtual size: 1000B

.data14
Size: 1024B - Virtual size: 1000B

.data13
Size: 1024B - Virtual size: 1000B

.data12
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 344B