60adc4040036e91654cec3e9bcfdc3ea

Sharing

Copy URL Twitter E-mail

General

Target

60adc4040036e91654cec3e9bcfdc3ea
Size

115KB
MD5

60adc4040036e91654cec3e9bcfdc3ea
SHA1

aa281312670713ca42f4dc502fb27a1c56eb6625
SHA256

57f653af428cf5c02c7cf7e09fbaf8319472ad255cdbf96b1ff09759769e4342
SHA512

d7ef35bdede23e4116b5c6e49587631ac496b01308655d49ee226fa49241a6d40dc289441f6903ca8c16567064a27ad10fc4020d7e2e8afa0938a5d30c3f46be
SSDEEP

1536:xyx09d+C9cYqJDotAk1dV7iKzw9jUPxxXIh0FCVNG3Q/qIh0FCVNG3Q/+da:xyx09dAYqUAYLCY5xXzoG3QCzoG3QGda

Score

1^/10

Malware Config

Signatures

Files

60adc4040036e91654cec3e9bcfdc3ea
.dll windows:5 windows x86 arch:x86

261233cf18e2ff5ae8ba656ef78f6ada

Code Sign

46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83
Certificate

Issuer

CN=222222222

Not Before

13/02/2012, 04:39

Not After

31/12/2039, 23:59

Subject

CN=222222222

Extended Key Usages

ExtKeyUsageCodeSigning

1b:3c:23:06:55:ca:2f:03:d7:30:ee:85:a8:cc:d8:d4:8c:45:0e:65
Signer

Actual PE Digest

1b:3c:23:06:55:ca:2f:03:d7:30:ee:85:a8:cc:d8:d4:8c:45:0e:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
GetSystemInfo
GetProcAddress
LoadLibraryA
GetWindowsDirectoryW

comdlg32

GetFileTitleW
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
ChooseColorA
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
PrintDlgA

oleaut32

BSTR_UserSize
BstrFromVector
CreateErrorInfo
CreateStdDispatch
CreateTypeLib2
DispCallFunc
DispInvoke
GetErrorInfo
LHashValOfNameSys
LHashValOfNameSysA
LPSAFEARRAY_Marshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LoadRegTypeLi
LoadTypeLi
OaBuildVersion
OleIconToCursor
OleLoadPicture
OleLoadPictureEx
OleLoadPictureFileEx
OleSavePictureFile
OleTranslateColor
RegisterActiveObject
RevokeActiveObject
SafeArrayAccessData
SafeArrayAllocDescriptorEx
SafeArrayCopy
SafeArrayCreateEx
SafeArrayDestroy
SafeArrayDestroyDescriptor
SafeArrayGetElement
SafeArrayGetIID
SafeArrayGetVartype
SafeArrayLock
SafeArrayPtrOfIndex
SafeArraySetIID
SafeArrayUnaccessData
SafeArrayUnlock
SysAllocString
SysAllocStringLen
UnRegisterTypeLi
VARIANT_UserSize
VarAbs
VarBoolFromCy
VarBoolFromDate
VarBoolFromDec
VarBoolFromR8
VarBoolFromStr
VarBstrFromCy
VarBstrFromR4
VarBstrFromR8
VarBstrFromUI2
VarBstrFromUI4
VarCat
VarCmp
VarCyFix
VarCyFromBool
VarCyFromDisp
VarCyFromI1
VarCyFromR8
VarCyRound
VarDateFromCy
VarDecAdd
VarDecCmpR8
VarDecFix
VarDecFromDate
VarDecFromI1
VarDecFromUI4
VarDecNeg
VarFormat
VarFormatDateTime
VarFormatNumber
VarI1FromBool
VarI1FromI2
VarI1FromI4
VarI1FromR4
VarI1FromUI2
VarI2FromBool
VarI2FromStr
VarI4FromBool
VarI4FromCy
VarI4FromDate
VarI4FromDisp
VarI4FromI1
VarI4FromUI1
VarImp
VarInt
VarPow
VarR4CmpR8
VarR4FromDate
VarR4FromDec
VarR4FromI1
VarR4FromR8
VarR4FromStr
VarR4FromUI1
VarR4FromUI2
VarR8FromI1
VarR8FromI2
VarR8FromStr
VarR8FromUI1
VarR8Pow
VarR8Round
VarUI1FromBool
VarUI1FromCy
VarUI1FromDec
VarUI1FromI1
VarUI1FromI4
VarUI1FromR4
VarUI1FromUI4
VarUI2FromCy
VarUI2FromDate
VarUI4FromI1
VarUI4FromUI1
VarUdateFromDate
VariantChangeTypeEx
VariantCopyInd
VectorFromBstr

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

261233cf18e2ff5ae8ba656ef78f6ada

Code Sign

46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83Certificate

Extended Key Usages

1b:3c:23:06:55:ca:2f:03:d7:30:ee:85:a8:cc:d8:d4:8c:45:0e:65Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

oleaut32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 516B

.text7 Size: 1024B - Virtual size: 1000B

.text5 Size: 20KB - Virtual size: 20KB

.text6 Size: 1KB - Virtual size: 1KB

.rsrc Size: 82KB - Virtual size: 81KB

.reloc Size: 2KB - Virtual size: 1KB

46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83
Certificate

1b:3c:23:06:55:ca:2f:03:d7:30:ee:85:a8:cc:d8:d4:8c:45:0e:65
Signer

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 516B

.text7
Size: 1024B - Virtual size: 1000B

.text5
Size: 20KB - Virtual size: 20KB

.text6
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 82KB - Virtual size: 81KB

.reloc
Size: 2KB - Virtual size: 1KB