63f1ae814d265ab70c4dbfcb62d586c8

Sharing

Copy URL

Twitter E-mail

General

Target

63f1ae814d265ab70c4dbfcb62d586c8
Size

192KB
MD5

63f1ae814d265ab70c4dbfcb62d586c8
SHA1

852ad3b1a750b0a25cb972d6ca23a0690203a4c6
SHA256

c647b165262287fa25ab86cbee087b3c7cd4dc11a6a6963a86617b42cc4392a6
SHA512

3e04afbf922ecf6cb4166455dce492e050eeec0cd1ec1dc65bcd3c156e1410b665597cc14a68086dafcd3195b83448ac1307f71039e0cb8d8a60a1ffe0d2afa4
SSDEEP

6144:DpdAdczDi0DzjwJ355rUs3iizHjp7JrMLN:/AdGTexUsSSDp7NMLN

Score

1^/10

Malware Config

Signatures

Files

63f1ae814d265ab70c4dbfcb62d586c8
.exe windows:4 windows x86 arch:x86

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

Issuer

CN=Application Compatibility UI

Not Before

31-12-2008 16:00

Not After

31-12-2014 16:00

Subject

CN=Application Compatibility UI

Extended Key Usages

ExtKeyUsageCodeSigning

ad:9a:86:b3:d4:45:5c:3e:5d:86:9d:7e:84:64:16:8e:84:65:1b:92
Signer

Actual PE Digest

ad:9a:86:b3:d4:45:5c:3e:5d:86:9d:7e:84:64:16:8e:84:65:1b:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

Sections

(
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

-
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

!
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

(
Size: 512B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2Certificate

Extended Key Usages

ad:9a:86:b3:d4:45:5c:3e:5d:86:9d:7e:84:64:16:8e:84:65:1b:92Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

( Size: - Virtual size: 20KB

0 Size: - Virtual size: 260B

- Size: - Virtual size: 1KB

2 Size: - Virtual size: 1KB

@ Size: - Virtual size: 8B

! Size: 512B - Virtual size: 24B

= Size: - Virtual size: 1KB

( Size: 512B - Virtual size: 136KB

0 Size: - Virtual size: 19KB

3 Size: 189KB - Virtual size: 188KB

9 Size: 512B - Virtual size: 92B

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

ad:9a:86:b3:d4:45:5c:3e:5d:86:9d:7e:84:64:16:8e:84:65:1b:92
Signer

(
Size: - Virtual size: 20KB

0
Size: - Virtual size: 260B

-
Size: - Virtual size: 1KB

2
Size: - Virtual size: 1KB

@
Size: - Virtual size: 8B

!
Size: 512B - Virtual size: 24B

=
Size: - Virtual size: 1KB

(
Size: 512B - Virtual size: 136KB

0
Size: - Virtual size: 19KB

3
Size: 189KB - Virtual size: 188KB

9
Size: 512B - Virtual size: 92B