6f943e1f80b0d9d04d12dc06ef8678b5

Sharing

Copy URL Twitter E-mail

General

Target

6f943e1f80b0d9d04d12dc06ef8678b5
Size

200KB
MD5

6f943e1f80b0d9d04d12dc06ef8678b5
SHA1

72606cf30c98abbd831cfa1ae4aee2041a6ac359
SHA256

7dd68d6c39dc23d512020e08cb6141ba4e708c765e17a873a3ca21b1707fbf45
SHA512

e108fe46da0f646e61834f8fced98ba1ee13dcc1ed3482223c64e59a58f2216c1ada5ed9198a8e7b4e0cca167e7bdfe443634af43984610691c7a02a07c1b8a7
SSDEEP

6144:TI0Wwd8kbCBE+sGyNVx3La/sJspMtm8JKi:ZWwGLpajO/sCpeJKi

Score

1^/10

Malware Config

Signatures

Files

6f943e1f80b0d9d04d12dc06ef8678b5
.exe windows:4 windows x86 arch:x86

2930e2fa74ff264ce1373ab251770581

Code Sign

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01
Certificate

Issuer

CN=Protected Storage Driver

Not Before

31/12/2008, 16:00

Not After

31/12/2014, 16:00

Subject

CN=Protected Storage Driver

Extended Key Usages

ExtKeyUsageCodeSigning

aa:fa:94:87:53:c9:b2:28:f1:d7:08:42:e6:25:9a:9c:32:26:45:c8
Signer

Actual PE Digest

aa:fa:94:87:53:c9:b2:28:f1:d7:08:42:e6:25:9a:9c:32:26:45:c8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ole32

CoTaskMemFree

ws2_32

WSCWriteProviderOrder

Sections

#
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

'
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

&
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

;
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

9
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

;
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2930e2fa74ff264ce1373ab251770581

Code Sign

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01Certificate

Extended Key Usages

aa:fa:94:87:53:c9:b2:28:f1:d7:08:42:e6:25:9a:9c:32:26:45:c8Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

ole32

ws2_32

Sections

# Size: - Virtual size: 35KB

' Size: - Virtual size: 1KB

. Size: - Virtual size: 2KB

6 Size: - Virtual size: 2KB

/ Size: - Virtual size: 8B

& Size: 512B - Virtual size: 24B

> Size: - Virtual size: 3KB

; Size: 1024B - Virtual size: 136KB

> Size: - Virtual size: 15KB

9 Size: 196KB - Virtual size: 195KB

; Size: 512B - Virtual size: 132B

0a:c2:ec:72:b0:75:d4:50:b0:1c:c6:52:3b:30:10:01
Certificate

aa:fa:94:87:53:c9:b2:28:f1:d7:08:42:e6:25:9a:9c:32:26:45:c8
Signer

#
Size: - Virtual size: 35KB

'
Size: - Virtual size: 1KB

.
Size: - Virtual size: 2KB

6
Size: - Virtual size: 2KB

/
Size: - Virtual size: 8B

&
Size: 512B - Virtual size: 24B

>
Size: - Virtual size: 3KB

;
Size: 1024B - Virtual size: 136KB

>
Size: - Virtual size: 15KB

9
Size: 196KB - Virtual size: 195KB

;
Size: 512B - Virtual size: 132B