63306aa75f5ce13b6f4cf4fb50cafcbe

Sharing

Copy URL

Twitter E-mail

General

Target

63306aa75f5ce13b6f4cf4fb50cafcbe
Size

322KB
MD5

63306aa75f5ce13b6f4cf4fb50cafcbe
SHA1

b1f93fa615f7ccdd4b828071b95964dde41687e8
SHA256

04ddeb2fcd4df7cf6a5427eb671d321e6ff3d2cf2065d7292e61f4a2effc4a5f
SHA512

aa0b8fbdac2792cc23997e2545a18dd05520e874692b2fe70a99d894640d5e99676f4a36bc27fc1915d43396f7227a5ffce376f7197ae30b0bb064f32dbe004f
SSDEEP

6144:N7n8DYw0/M/Jt4I+ad2dkerijYJl4Ad+7Aaw7fH/HHf+FfvvMJefqp3bxgefFuVT:ND8DYw04jDd2SereYF+7Aaw7fH/HHf+n

Score

1^/10

Malware Config

Signatures

Files

63306aa75f5ce13b6f4cf4fb50cafcbe
.exe windows:5 windows x86 arch:x86

9442171ce7dd27c10cfff1c62ceb42d9

Code Sign

1f:f6:d9:ed:57:4e:c2:a0:99:38:9b:4b:de:6c:6d:c4
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-02-2015 00:00

Not After

25-02-2016 23:59

Subject

CN=Consortium Group ltd,O=Consortium Group ltd,POSTALCODE=00152,STREET=CORNER OF GR.MARLBOROUGH UN GR.GEORGE STR.+STREET=3RD FLOOR\, C&h TOWERS\,,L=ROSEAU,ST=ROSEAU,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

db:92:00:ec:51:d4:93:7a:8b:60:d9:49:11:00:7f:b7:bc:a8:2d:c9
Signer

Actual PE Digest

db:92:00:ec:51:d4:93:7a:8b:60:d9:49:11:00:7f:b7:bc:a8:2d:c9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

VerQueryValueW

wininet

HttpEndRequestA

kernel32

VirtualAlloc
CreateFileA
ReadFile
GetLastError
CloseHandle
CreateFileMappingA
QueryPerformanceCounter
CreateThread
InterlockedDecrement
FreeLibrary
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
CreateEventA
CompareStringA
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
SetFilePointer
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
SetErrorMode
GetVersion
GetTickCount
ExitProcess
TlsGetValue
GetStartupInfoA
GetModuleHandleA
GetVersionExA
GetProcAddress
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
DeleteFileW

user32

IsDialogMessageA
IsChild
InvalidateRect
GetWindowLongA
GetSystemMetrics
GetCapture
IsRectEmpty
IsWindow
RemovePropA
SetMenu
SetMenuItemInfoA
SetPropA
GetSystemMenu
GetClassNameA
GetClassInfoA
CreateWindowExA
MessageBoxA
PtInRect
GetKeyboardType
LoadStringA
ShowWindow
CharNextA
IsIconic
SetRect
SetScrollInfo
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
IsWindowEnabled
IsWindowVisible
IsZoomed
RegisterClipboardFormatA
RegisterClassExA
GetScrollPos

gdi32

ExcludeClipRect
DeleteObject
CreatePen
GetLogColorSpaceW
GetClipBox
TextOutW
SetAbortProc
DeleteMetaFile
OffsetWindowOrgEx
CreateFontIndirectA
DeleteEnhMetaFile
Rectangle
CreatePenIndirect

comdlg32

GetOpenFileNameA
ChooseFontA
ReplaceTextW
FindTextW
GetSaveFileNameA

advapi32

RegCreateKeyExA
AllocateAndInitializeSid
RegCloseKey

shell32

ShellExecuteA
StrStrIA

ole32

CoTaskMemAlloc

oleaut32

VariantInit
VarRound
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayPutElement
SysAllocStringLen
SysReAllocStringLen
SysFreeString

Sections

.text
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9442171ce7dd27c10cfff1c62ceb42d9

Code Sign

1f:f6:d9:ed:57:4e:c2:a0:99:38:9b:4b:de:6c:6d:c4Certificate

Extended Key Usages

Key Usages

db:92:00:ec:51:d4:93:7a:8b:60:d9:49:11:00:7f:b7:bc:a8:2d:c9Signer

Headers

File Characteristics

Imports

comctl32

version

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 268KB - Virtual size: 264KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 28KB - Virtual size: 26KB

1f:f6:d9:ed:57:4e:c2:a0:99:38:9b:4b:de:6c:6d:c4
Certificate

db:92:00:ec:51:d4:93:7a:8b:60:d9:49:11:00:7f:b7:bc:a8:2d:c9
Signer

.text
Size: 268KB - Virtual size: 264KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 28KB - Virtual size: 26KB