33ac8273cc04f85b990a3de863826528

Sharing

Copy URL Twitter E-mail

General

Target

33ac8273cc04f85b990a3de863826528
Size

124KB
MD5

33ac8273cc04f85b990a3de863826528
SHA1

3d4ecef6c87758b2d7ffc03b3e62a51191c3e50f
SHA256

1f8835b27c05390f93eaacdd13c8ca6f285f132453ca58e62de125d43804d7b6
SHA512

5319921072dbd5cc225afabcde3aaddec4ad0a28b5703dfea9fe9fb13149077eac740d596a27e1bf2dfff2e2a66c2ca6a7a353f82a02edb3c8ae434b634053d7
SSDEEP

1536:2i/z17LYULdXyvIgU1aefMBiohuTX0lCa/iNtIXXllvKMd4aQlfmvoMX8U3I5q+W:2iaUMgggoBtwr0oOXX1d4d+vnIHZ4

Score

1^/10

Malware Config

Signatures

Files

33ac8273cc04f85b990a3de863826528
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

25503313f00cbd95ab74807f492d4680

Code Sign

78:c3:9a:b6:34:aa:69:af:4b:d0:e0:61:b2:eb:8f:c2
Certificate

Issuer

CN=745151523473828749344452357275986644156596975679379247834998615149872657872319825765771313563416948333348556489778289253257224968431186231535688433375

Not Before

17/07/2012, 07:53

Not After

31/12/2039, 23:59

Subject

CN=745151523473828749344452357275986644156596975679379247834998615149872657872319825765771313563416948333348556489778289253257224968431186231535688433375

Extended Key Usages

ExtKeyUsageCodeSigning

10:7a:9e:47:8b:3c:93:86:b3:83:e1:2e:0e:7d:95:a1:b6:df:7c:67
Signer

Actual PE Digest

10:7a:9e:47:8b:3c:93:86:b3:83:e1:2e:0e:7d:95:a1:b6:df:7c:67

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetCommandLineA
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetWindowsDirectoryW
lstrcatW
CloseHandle
GetModuleHandleA
GetStartupInfoA

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data14
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data13
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data12
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data11
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data10
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data9
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data8
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25503313f00cbd95ab74807f492d4680

Code Sign

78:c3:9a:b6:34:aa:69:af:4b:d0:e0:61:b2:eb:8f:c2Certificate

Extended Key Usages

10:7a:9e:47:8b:3c:93:86:b3:83:e1:2e:0e:7d:95:a1:b6:df:7c:67Signer

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 104KB - Virtual size: 104KB

.data14 Size: 512B - Virtual size: 100B

.data13 Size: 512B - Virtual size: 100B

.data12 Size: 512B - Virtual size: 100B

.data11 Size: 512B - Virtual size: 100B

.data10 Size: 512B - Virtual size: 100B

.data9 Size: 512B - Virtual size: 100B

.data8 Size: 512B - Virtual size: 100B

.data7 Size: 512B - Virtual size: 100B

.data6 Size: 512B - Virtual size: 100B

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 228B

78:c3:9a:b6:34:aa:69:af:4b:d0:e0:61:b2:eb:8f:c2
Certificate

10:7a:9e:47:8b:3c:93:86:b3:83:e1:2e:0e:7d:95:a1:b6:df:7c:67
Signer

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 104KB - Virtual size: 104KB

.data14
Size: 512B - Virtual size: 100B

.data13
Size: 512B - Virtual size: 100B

.data12
Size: 512B - Virtual size: 100B

.data11
Size: 512B - Virtual size: 100B

.data10
Size: 512B - Virtual size: 100B

.data9
Size: 512B - Virtual size: 100B

.data8
Size: 512B - Virtual size: 100B

.data7
Size: 512B - Virtual size: 100B

.data6
Size: 512B - Virtual size: 100B

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 228B