52f075f171f6d296631555cf4fc08a8d

Sharing

Copy URL Twitter E-mail

General

Target

52f075f171f6d296631555cf4fc08a8d
Size

322KB
MD5

52f075f171f6d296631555cf4fc08a8d
SHA1

92b8001070d4aadb3bba00aa00f0f0756d0041cc
SHA256

200ff297710cd6522945500db07c41cca3b630b9c98ab82a6917e4218a45dc88
SHA512

4b6f3b7c64aad9aa588c2c12dc1509e537454ea1b6bdb5990fffe08c2e882ae8588101a595cb31730345ae0bfee2cf049ded4bc30aef09d06eb8c49907943d54
SSDEEP

6144:MKHy1QcYvzMVfvG//moCannnj/82JzpROc/TMx6pNuCMqDAmnTuJK:ZHD/bMR+aanL825pROcLMxuNu4SJK

Score

1^/10

Malware Config

Signatures

Files

52f075f171f6d296631555cf4fc08a8d
.exe windows:4 windows x86 arch:x86

fcbab61987596a204203b83b29e80846

Code Sign

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

17/09/2014, 00:00

Not After

25/11/2015, 12:00

Subject

CN=Consortium ltd.,O=Consortium ltd.,L=Roseau,ST=Commonwealth of Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e2:ad:05:e4:30:23:b5:67:05:90:40:83:81:a3:1a:a3:ec:4b:15:58
Signer

Actual PE Digest

e2:ad:05:e4:30:23:b5:67:05:90:40:83:81:a3:1a:a3:ec:4b:15:58

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

VerQueryValueW

kernel32

TlsSetValue
GetLastError
CreateFileMappingA
FreeLibrary
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
CloseHandle
QueryPerformanceCounter
DeleteFileW
CreateThread
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
ReadFile
SetStdHandle
SetFilePointer
HeapReAlloc
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
LockResource
lstrcmpiA
CreateFileA
VirtualAlloc
WriteFile
GetCommandLineW
GetTickCount
GetStringTypeW
GetModuleHandleW
GetVersionExA
GetVersion
ExitProcess
TlsGetValue
GetStartupInfoA
GetModuleHandleA
GetProcAddress
GetCommandLineA
LCMapStringW
GetStringTypeA
FlushFileBuffers

user32

CreateWindowExA
GetSystemMenu
GetClassNameA
InvalidateRect
IsDialogMessageA
GetWindowLongA
GetSystemMetrics
GetClassInfoA
MessageBoxA
ShowWindow
RegisterClipboardFormatA
IsChild
IsIconic
IsRectEmpty
IsWindow
RemovePropA
SetMenu
SetMenuItemInfoA
SetPropA
SetRect
SetScrollInfo
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
IsWindowEnabled
IsWindowVisible
IsZoomed
RemoveMenu
GetClientRect
RegisterClassExA
EndDialog
GetCapture

gdi32

SetAbortProc
GetLogColorSpaceW
SetBkMode
DeleteObject
CreatePen
CreatePenIndirect
GetClipBox
SetBkColor
DeleteEnhMetaFile
CreateFontIndirectA
OffsetWindowOrgEx
ExcludeClipRect
DeleteMetaFile

comdlg32

ReplaceTextW

advapi32

AllocateAndInitializeSid
RegCloseKey
RegSetValueExW

shell32

ShellExecuteA

ole32

CoInitialize
CoUninitialize

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayPutElement
VariantInit
SafeArrayRedim

Sections

.text
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcbab61987596a204203b83b29e80846

Code Sign

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8Certificate

Extended Key Usages

Key Usages

e2:ad:05:e4:30:23:b5:67:05:90:40:83:81:a3:1a:a3:ec:4b:15:58Signer

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 268KB - Virtual size: 264KB

.qdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 28KB - Virtual size: 26KB

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8
Certificate

e2:ad:05:e4:30:23:b5:67:05:90:40:83:81:a3:1a:a3:ec:4b:15:58
Signer

.text
Size: 268KB - Virtual size: 264KB

.qdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 28KB - Virtual size: 26KB