5cb2d03aaf6ba01f379c27625bee55b8

Sharing

Copy URL Twitter E-mail

General

Target

5cb2d03aaf6ba01f379c27625bee55b8
Size

376KB
MD5

5cb2d03aaf6ba01f379c27625bee55b8
SHA1

ec245c60ebdd98381e0cd78860ac33c8c45551c6
SHA256

39e952a0c9d8128db0bc07eede5773b9f18ca115d3f3a4868895dcaf927b018c
SHA512

f689aa695318dc3606c187b7d108791af243c40eefa1355e761213a936870b51c24482930b9762ee6ebfff274deeaffa7995f4b633012591ef9d0763386c022e
SSDEEP

6144:gqqFLB8KOCy/cAl+Lyi+AiHhrOaU7Lias4fPx1:nqSCdAI2PXhrOV7DlB1

Score

1^/10

Malware Config

Signatures

Files

5cb2d03aaf6ba01f379c27625bee55b8
.exe windows:4 windows x86 arch:x86

c0e3c82d70aee7b576fb1792ca507a00

Code Sign

44:6a:d8:6a:af:f5:bd:4e:ba:bf:7e:4a:fb:87:3f:b3
Certificate

Issuer

CN=cUOiFinbahmNzvTKd mDvhrOweoOVDALaYBzrHSFJDSiBJnoEGFIXLbiBTUUxwoTHpKe LYkeWtKBVBRQAYZpBrPFyZfnOtsfJdYyFbBcZPFgtfCCeRlFiMyHhRPvNKNPhTArmEtIGKzLatzRvnxWR

Not Before

29/06/2012, 09:34

Not After

31/12/2039, 23:59

Subject

CN=cUOiFinbahmNzvTKd mDvhrOweoOVDALaYBzrHSFJDSiBJnoEGFIXLbiBTUUxwoTHpKe LYkeWtKBVBRQAYZpBrPFyZfnOtsfJdYyFbBcZPFgtfCCeRlFiMyHhRPvNKNPhTArmEtIGKzLatzRvnxWR

Extended Key Usages

ExtKeyUsageCodeSigning

97:44:25:9d:aa:27:76:7f:96:06:66:05:cb:11:5f:76:a5:24:8f:24
Signer

Actual PE Digest

97:44:25:9d:aa:27:76:7f:96:06:66:05:cb:11:5f:76:a5:24:8f:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
GetCommandLineA
VirtualAllocEx

advapi32

RegCloseKey
RegOpenKeyW

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0e3c82d70aee7b576fb1792ca507a00

Code Sign

44:6a:d8:6a:af:f5:bd:4e:ba:bf:7e:4a:fb:87:3f:b3Certificate

Extended Key Usages

97:44:25:9d:aa:27:76:7f:96:06:66:05:cb:11:5f:76:a5:24:8f:24Signer

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 51KB - Virtual size: 51KB

.data Size: 1024B - Virtual size: 920B

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 318KB - Virtual size: 318KB

.reloc Size: 512B - Virtual size: 224B

44:6a:d8:6a:af:f5:bd:4e:ba:bf:7e:4a:fb:87:3f:b3
Certificate

97:44:25:9d:aa:27:76:7f:96:06:66:05:cb:11:5f:76:a5:24:8f:24
Signer

.text
Size: 51KB - Virtual size: 51KB

.data
Size: 1024B - Virtual size: 920B

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 318KB - Virtual size: 318KB

.reloc
Size: 512B - Virtual size: 224B