fea73fdedd59029aaf0f0bb226628312

Sharing

Copy URL Twitter E-mail

General

Target

fea73fdedd59029aaf0f0bb226628312
Size

15.6MB
MD5

fea73fdedd59029aaf0f0bb226628312
SHA1

ee2e4542c8ce9d8aa58d9e516d47a07aba125a62
SHA256

7005c9142096cf9b47307f879c68274d6192cfcc107b9a66e538f8e2d04afe83
SHA512

3739d4835c578c4d9bff80e9e08ac01fe883eb5de03754b7a80402eeaa5bb108e1322ea45089d4343f82625a1386930ed291821e97f57a1140b4b4dcd4a25ff6
SSDEEP

98304:gKmDmsWNT0OhmF9hS/QeNYh7NqzIIbi83AOp+4u+Z/XC/1w4QGLypdkjemuW7YGR:nkF9hS/bNYQ7tpxLZ/yQGLyBD1Tb7MD

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Dll-files.com fixer 2.7.72/Crack/RegCleanPro.dll
unpack001/Dll-files.com fixer 2.7.72/Crack/xmllite.dll
unpack001/Dll-files.com fixer 2.7.72/dffsetup.exe

Files

fea73fdedd59029aaf0f0bb226628312
.zip
Dll-files.com fixer 2.7.72/Crack/Chinese_rcp.ini
Dll-files.com fixer 2.7.72/Crack/CleanSchedule.exe
.exe windows:5 windows x86 arch:x86

452cb81db771f9f3f1589eaa4399a710

Code Sign

1f:d1:04:1a:cb:53:2f:c7:5a:cf:ac:54:c7:d9:45:00
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

14/03/2011, 00:00

Not After

13/03/2014, 23:59

Subject

CN=Tilf AB,O=Tilf AB,POSTALCODE=21125,STREET=Norra Vallgatan 20,L=Malmo,ST=skane,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4f:3f:dd:7b:00:a0:59:5c:fe:90:c5:d9:2e:6b:83:d5:d4:56:a4:70
Signer

Actual PE Digest

4f:3f:dd:7b:00:a0:59:5c:fe:90:c5:d9:2e:6b:83:d5:d4:56:a4:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetProcAddress
GetCurrentProcess
LCMapStringW
LCMapStringA
GetStartupInfoW
GetLastError
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CoInitializeEx

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 846KB - Virtual size: 845KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Dll-files.com fixer 2.7.72/Crack/DLLFixer.exe
.exe windows:5 windows x86 arch:x86

879d8bc585705ff68746c5c5f3b05980

Code Sign

1f:d1:04:1a:cb:53:2f:c7:5a:cf:ac:54:c7:d9:45:00
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

14/03/2011, 00:00

Not After

13/03/2014, 23:59

Subject

CN=Tilf AB,O=Tilf AB,POSTALCODE=21125,STREET=Norra Vallgatan 20,L=Malmo,ST=skane,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1a:7f:12:2a:4a:58:86:f6:e6:0d:dd:fc:46:1c:02:93:a8:c2:cd:2d
Signer

Actual PE Digest

1a:7f:12:2a:4a:58:86:f6:e6:0d:dd:fc:46:1c:02:93:a8:c2:cd:2d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpOpenRequestW
InternetCloseHandle
HttpSendRequestW
InternetOpenW
InternetConnectW

kernel32

VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
SetEnvironmentVariableW
SetCurrentDirectoryW
RtlUnwind
ExitThread
CreateThread
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDriveTypeA
IsDebuggerPresent
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceW
GlobalLock
GlobalUnlock
GlobalAlloc
Sleep
IsBadReadPtr
GetModuleHandleW
GetProcAddress
GetVersionExW
InitializeCriticalSection
DeleteCriticalSection
GetLastError
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileAttributesW
lstrlenW
WideCharToMultiByte
GetLogicalDriveStringsW
GetCurrentThread
GetCurrentProcess
LocalAlloc
LocalFree
CloseHandle
lstrcpyW
SetLastError
LoadLibraryW
lstrlenA
MultiByteToWideChar
FreeResource
GetSystemTime
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
WaitForSingleObject
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetStartupInfoW
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
GetFullPathNameW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetFileTime
GetFileSizeEx
GetFileAttributesExW
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
GetVersionExA
GlobalFree
GetCurrentProcessId
RaiseException
RemoveDirectoryW
CreateProcessW
CopyFileW
MulDiv
GetTempFileNameW
GetShortPathNameW
SetThreadPriority
SetPriorityClass
QueryDosDeviceW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetLogicalDrives
GlobalMemoryStatusEx
SetFileAttributesW
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
MoveFileW
WritePrivateProfileStringW
GetPrivateProfileStringW
FreeLibrary
GetComputerNameW
InterlockedDecrement
ReleaseMutex
CreateMutexW
GetModuleFileNameW
ExpandEnvironmentStringsW
LoadLibraryA
lstrcmpW
ExitProcess
GetTickCount
GetLocalTime
UnmapViewOfFile
GetFileSize
GetFileInformationByHandle
SetFileTime
CreateDirectoryW
LocalFileTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
FindNextFileW
InterlockedIncrement
InterlockedExchange
ReadFile
SetFilePointer
FindClose
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpiW
GetCPInfo
GetVersion
DeleteFileW
WriteFile
CreateFileW
TryEnterCriticalSection
ResumeThread
SuspendThread
SetEvent
ResetEvent
CreateEventW
SearchPathW
GetDriveTypeW

user32

SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
SetMenu
GetScrollPos
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
EqualRect
DefWindowProcW
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetFocus
SetWindowPos
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CheckDlgButton
UnhookWindowsHookEx
GetMenuStringW
IsWindowEnabled
ScreenToClient
GetWindowDC
RedrawWindow
SetActiveWindow
DrawAnimatedRects
SetParent
EnumChildWindows
GetClassNameW
RegisterWindowMessageW
IsIconic
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
MessageBoxW
SetMenuDefaultItem
GetSystemMenu
RegisterWindowMessageA
BringWindowToTop
SetWindowLongW
GetKeyState
EndDialog
TrackPopupMenu
EnableMenuItem
SetMenuItemInfoW
LoadMenuW
GetWindowLongW
GetSubMenu
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
ModifyMenuW
GetMenuItemCount
AppendMenuW
ReleaseDC
GetDC
GetDesktopWindow
DestroyIcon
DrawIconEx
GetMenuItemInfoW
SetRect
DrawEdge
SetFocus
FindWindowExW
SetForegroundWindow
ShowWindow
WaitForInputIdle
FindWindowW
GetDlgCtrlID
GetWindow
MoveWindow
AdjustWindowRectEx
ClientToScreen
EndPaint
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
ValidateRect
CharUpperW
DestroyMenu
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
WindowFromPoint
CopyAcceleratorTableW
BeginPaint
GetSystemMetrics
DrawFocusRect
FillRect
IsRectEmpty
InvalidateRgn
UnregisterClassW
CharNextW
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
GetSysColor
TranslateMessage
LoadIconW
PtInRect
ReleaseCapture
OffsetRect
DispatchMessageW
GetMessageW
PeekMessageW
GetCapture
SetCapture
GetCursorPos
SetTimer
KillTimer
PostQuitMessage
UpdateWindow
SystemParametersInfoW
IsWindow
GetWindowRect
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
PostMessageW
GetClientRect
GetAsyncKeyState
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
LoadImageW
CopyRect
SendMessageW
MapWindowPoints
GetParent
InvalidateRect
SetCursor
LoadCursorW
EnableWindow
LoadBitmapW
GetLastActivePopup

gdi32

LineTo
MoveToEx
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SetMapMode
ExtSelectClipRgn
CreateBitmap
GetStockObject
GetRgnBox
GetTextColor
GetClipBox
SetTextColor
SetBkMode
RestoreDC
SaveDC
SetBkColor
Rectangle
SetPixel
GetPixel
CreateDIBSection
Ellipse
GetTextExtentPoint32W
GetBkMode
CreatePen
GetDeviceCaps
DeleteObject
CreateFontW
GetTextExtentPointA
GetTextMetricsA
DeleteDC
SelectObject
CreateSolidBrush
PatBlt
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetBkColor
DPtoLP
GetMapMode
CreateCompatibleBitmap
LPtoDP
StretchBlt
CreateRectRgnIndirect
CreateFontIndirectW
BitBlt
CreateCompatibleDC
GetObjectW

comdlg32

GetFileTitleW

advapi32

OpenProcessToken
DuplicateToken
AllocateAndInitializeSid
RegQueryValueW
RegOpenKeyW
RegSaveKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegFlushKey
GetUserNameW
ChangeServiceConfigW
StartServiceW
ControlService
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegEnumKeyW
RegEnumValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
OpenThreadToken

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHFileOperationW
ShellExecuteExW
ShellExecuteW
SHGetFolderPathW
SHChangeNotify
DragAcceptFiles
Shell_NotifyIconW
SHAppBarMessage
SHGetPathFromIDListW

comctl32

ord17
ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathIsFileSpecW
PathIsNetworkPathW
PathFileExistsW
PathFindOnPathW
PathSearchAndQualifyW
SHCreateStreamOnFileW
PathAppendW
SHDeleteValueW
SHDeleteKeyW
PathFindFileNameW
PathFindNextComponentW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathGetArgsW

oledlg

OleUIBusyW

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoInitialize

oleaut32

OleCreateFontIndirect
SafeArrayCreate
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
LoadRegTypeLi
DispCallFunc
VariantChangeType
SysStringLen
SysAllocStringLen
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
VariantCopy
SysFreeString
SysAllocString
SysStringByteLen
VariantInit
SysAllocStringByteLen
VariantClear

urlmon

URLDownloadToFileW

sfc

SfcIsFileProtected

xmllite

CreateXmlWriter

secur32

GetUserNameExW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ws2_32

closesocket
WSACleanup
WSAStartup
WSACloseEvent
freeaddrinfo
WSASetLastError
WSASocketW
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSARecv
WSACreateEvent
WSASetEvent
getaddrinfo
WSAEventSelect

userenv

GetProfilesDirectoryW

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Dll-files.com fixer 2.7.72/Crack/Danish_rcp.ini
Dll-files.com fixer 2.7.72/Crack/Dutch_rcp.ini
Dll-files.com fixer 2.7.72/Crack/Finnish_rcp_fi.ini
Dll-files.com fixer 2.7.72/Crack/French_rcp.ini
Dll-files.com fixer 2.7.72/Crack/German_rcp.ini
Dll-files.com fixer 2.7.72/Crack/Italian_rcp.ini
Dll-files.com fixer 2.7.72/Crack/Japanese_rcp.ini
Dll-files.com fixer 2.7.72/Crack/Norwegian_rcp.ini
Dll-files.com fixer 2.7.72/Crack/Portuguese_rcp.ini
Dll-files.com fixer 2.7.72/Crack/RegCleanPro.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

?GetHardwareHash@@YAPBDXZ

Sections

.iOTA
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Dll-files.com fixer 2.7.72/Crack/Spanish_rcp.ini
Dll-files.com fixer 2.7.72/Crack/Swedish_rcp.ini
Dll-files.com fixer 2.7.72/Crack/TraditionalCn_rcp_zh-tw.ini
Dll-files.com fixer 2.7.72/Crack/eng_rcp.Ini
Dll-files.com fixer 2.7.72/Crack/greek_rcp_el.ini
Dll-files.com fixer 2.7.72/Crack/ico.ico
Dll-files.com fixer 2.7.72/Crack/isxdl.dll
.dll windows:5 windows x86 arch:x86

9b176b5c5d5d8911e040bc16c2ed1a20

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2f:57:40:7b:1f:0c:3d:f5:06:bb:71:a0:e3:f0:ef:d2
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

09/02/2010, 00:00

Not After

10/03/2013, 23:59

Subject

CN=Systweak Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Systweak Inc,L=JAIPUR,ST=Rajasthan,C=IN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

43:a7:a9:48:a3:c5:1c:94:7e:df:2d:11:9f:96:6d:65:f3:53:a2:f2
Signer

Actual PE Digest

43:a7:a9:48:a3:c5:1c:94:7e:df:2d:11:9f:96:6d:65:f3:53:a2:f2

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoA
GetNumberFormatA
InitializeCriticalSection
DeleteCriticalSection
CreateEventA
CloseHandle
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetLastError
CreateFileA
GetFileSize
SetFilePointer
ResetEvent
WaitForSingleObject
WriteFile
GetModuleHandleA
FormatMessageA
LocalFree
GetPrivateProfileStringA
RaiseException
DeleteFileA
CreateThread
SetEvent
FreeLibrary
lstrlenA
GetProcAddress
lstrcmpiA
MultiByteToWideChar
IsDBCSLeadByte
lstrlenW
LoadLibraryExA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
GetCurrentProcess
FlushInstructionCache
SetLastError
GetCurrentThreadId
LoadLibraryA
LocalAlloc
InterlockedExchange
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
VirtualProtect
GetModuleHandleW
GetSystemInfo
VirtualQuery
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
Sleep
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

Exports

Exports

isxdl_AddFile
isxdl_AddFileSize
isxdl_ClearFiles
isxdl_Download
isxdl_DownloadFiles
isxdl_GetFileName
isxdl_IsConnected
isxdl_SetOption

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Dll-files.com fixer 2.7.72/Crack/korean_rcp_ko.ini
Dll-files.com fixer 2.7.72/Crack/polish_rcp_pl.Ini
Dll-files.com fixer 2.7.72/Crack/portugese_rcp_pt.ini
Dll-files.com fixer 2.7.72/Crack/russian_rcp_ru.ini
Dll-files.com fixer 2.7.72/Crack/turkish_rcp_tr.ini
Dll-files.com fixer 2.7.72/Crack/xmllite.dll
.dll windows:6 windows x86 arch:x86

1cafc7cf5b049d07a62fe966d60d6888

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_unlock
__dllonexit
_lock
_onexit
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
_purecall
memmove
memset
memcpy
wcschr
_vsnwprintf

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
RaiseException
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
InterlockedDecrement
InterlockedIncrement
GetTickCount
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
SetUnhandledExceptionFilter

Exports

Exports

CreateXmlReader
CreateXmlReaderInputWithEncodingCodePage
CreateXmlReaderInputWithEncodingName
CreateXmlWriter
CreateXmlWriterOutputWithEncodingCodePage
CreateXmlWriterOutputWithEncodingName

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Dll-files.com fixer 2.7.72/dffsetup.exe
.exe windows:5 windows x86 arch:x86

483f0c4259a9148c34961abbda6146c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GetWindowsDirectoryW
GetVersionExW
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CompareStringW
CloseHandle
Sleep

comctl32

InitCommonControls

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

452cb81db771f9f3f1589eaa4399a710

Code Sign

1f:d1:04:1a:cb:53:2f:c7:5a:cf:ac:54:c7:d9:45:00Certificate

Extended Key Usages

Key Usages

4f:3f:dd:7b:00:a0:59:5c:fe:90:c5:d9:2e:6b:83:d5:d4:56:a4:70Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 846KB - Virtual size: 845KB

879d8bc585705ff68746c5c5f3b05980

Code Sign

1f:d1:04:1a:cb:53:2f:c7:5a:cf:ac:54:c7:d9:45:00Certificate

Extended Key Usages

Key Usages

1a:7f:12:2a:4a:58:86:f6:e6:0d:dd:fc:46:1c:02:93:a8:c2:cd:2dSigner

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

sfc

xmllite

secur32

version

ws2_32

userenv

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 388KB - Virtual size: 387KB

.data Size: 33KB - Virtual size: 68KB

.rsrc Size: 6.1MB - Virtual size: 6.1MB

Headers

File Characteristics

Exports

Exports

Sections

.iOTA Size: 244KB - Virtual size: 244KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 36KB - Virtual size: 36KB

.reloc Size: 36KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 1KB

9b176b5c5d5d8911e040bc16c2ed1a20

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

2f:57:40:7b:1f:0c:3d:f5:06:bb:71:a0:e3:f0:ef:d2Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

1f:d1:04:1a:cb:53:2f:c7:5a:cf:ac:54:c7:d9:45:00
Certificate

4f:3f:dd:7b:00:a0:59:5c:fe:90:c5:d9:2e:6b:83:d5:d4:56:a4:70
Signer

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 846KB - Virtual size: 845KB

1f:d1:04:1a:cb:53:2f:c7:5a:cf:ac:54:c7:d9:45:00
Certificate

1a:7f:12:2a:4a:58:86:f6:e6:0d:dd:fc:46:1c:02:93:a8:c2:cd:2d
Signer

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 388KB - Virtual size: 387KB

.data
Size: 33KB - Virtual size: 68KB

.rsrc
Size: 6.1MB - Virtual size: 6.1MB

.iOTA
Size: 244KB - Virtual size: 244KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 36KB - Virtual size: 36KB

.reloc
Size: 36KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 1KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

2f:57:40:7b:1f:0c:3d:f5:06:bb:71:a0:e3:f0:ef:d2
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

43:a7:a9:48:a3:c5:1c:94:7e:df:2d:11:9f:96:6d:65:f3:53:a2:f2
Signer

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 8KB - Virtual size: 8KB

.text
Size: 107KB - Virtual size: 106KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 968B

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 81KB - Virtual size: 80KB

.itext
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 4KB - Virtual size: 3KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 6KB

.rsrc
Size: 462KB - Virtual size: 462KB