3716d7a3c98201792df20f0ce3dfd8f0

Sharing

Copy URL

Twitter E-mail

General

Target

3716d7a3c98201792df20f0ce3dfd8f0
Size

35KB
MD5

3716d7a3c98201792df20f0ce3dfd8f0
SHA1

34987bc15ef2876c86d67040ab98348ce0e82653
SHA256

164699a8b53cabf553870f55d54b2bd4fecef36d783d41ee83d82b642ca5037c
SHA512

988d458102f87b589d902b5c14e0b072b97df6d4e779480328e860a19a78a9041b61c119935c664f06db4584a68d8b32b210c87658ff99ee825bfa5ed739b86b
SSDEEP

768:zyMPVzXjrEX3wVdvEs/27krRKoc4KYIoxU:eMPdrEGdvf+SET4lIoG

Score

1^/10

Malware Config

Signatures

Files

3716d7a3c98201792df20f0ce3dfd8f0
.exe windows:4 windows x86 arch:x86

98ce7b6533cbd67993e36dafb4e95946

Code Sign

04:7a:55
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

03-03-2009 12:58

Not After

03-03-2024 12:58

Subject

CN=Certum Time-Stamping Authority,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

04:7a:53
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

03-03-2009 12:53

Not After

03-03-2024 12:53

Subject

CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07:11:d3
Certificate

Issuer

CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-08-2010 14:56

Not After

01-09-2011 14:56

Subject

CN=Jernej Simoncic - Open Source Developer,OU=-,O=Open Source Developer,C=SI,1.2.840.113549.1.9.1=#0c0d6a65726e656a40656e612e7369

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1c:a9:82:c1:d7:95:6f:3a:b8:78:a5:38:19:d2:22:f1:cb:d7:08:05
Signer

Actual PE Digest

1c:a9:82:c1:d7:95:6f:3a:b8:78:a5:38:19:d2:22:f1:cb:d7:08:05

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
FreeConsole
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetStdHandle
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
PeekNamedPipe
ReadFile
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TerminateThread
TlsGetValue
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WriteFile

msvcrt

_close
_dup
_itoa
_kbhit
_open
_read
_strcmpi
_strnicmp
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_isatty
_onexit
_setjmp
_setmode
_sleep
_winmajor
abort
atexit
atoi
calloc
exit
fflush
fprintf
fputc
free
fwrite
getenv
gets
longjmp
malloc
memcmp
memcpy
memset
rand
signal
sprintf
srand
strcat
strchr
strcmp
strcpy
strlen
strncmp
strncpy
time
vfprintf

wsock32

WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
getservbyname
getservbyport
getsockname
htons
inet_addr
inet_ntoa
listen
ntohs
recv
recvfrom
select
send
setsockopt
shutdown
socket

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 412B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

98ce7b6533cbd67993e36dafb4e95946

Code Sign

04:7a:55Certificate

Extended Key Usages

04:7a:53Certificate

Key Usages

07:11:d3Certificate

Extended Key Usages

Key Usages

1c:a9:82:c1:d7:95:6f:3a:b8:78:a5:38:19:d2:22:f1:cb:d7:08:05Signer

Headers

File Characteristics

Imports

kernel32

msvcrt

wsock32

Sections

.text Size: 21KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 92B

.rdata Size: 4KB - Virtual size: 4KB

.bss Size: - Virtual size: 412B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

04:7a:55
Certificate

04:7a:53
Certificate

07:11:d3
Certificate

1c:a9:82:c1:d7:95:6f:3a:b8:78:a5:38:19:d2:22:f1:cb:d7:08:05
Signer

.text
Size: 21KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 92B

.rdata
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 412B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B