066dd5af1a0c7d6820ac9bfdb2ae8fcc

Sharing

Copy URL Twitter E-mail

General

Target

066dd5af1a0c7d6820ac9bfdb2ae8fcc
Size

171KB
MD5

066dd5af1a0c7d6820ac9bfdb2ae8fcc
SHA1

a065805d1ef8e21923b28b19856851c7f971049b
SHA256

ca353bcd746a6af0c30df2d248edc7c7bcf3e93a1510475546594ab99ee42bc2
SHA512

fc4eaddc530aad1c1f5a0e787bff5dedfa2cc5f0c83d6ff9d4ec9c2b4d7e16b2c1ae18803f8f64370badbee20c3ae804eb6f0ac9786626f38f0ea709c706aabe
SSDEEP

3072:3A/vNOWP6fBtve9oIuLT+WKsXJv0mdqNS/Pzjq9Wqe9LOhq1Rt6UyO:3AXcWP6fBtve9jNWKsVFIq/qAJXIO

Score

1^/10

Malware Config

Signatures

Files

066dd5af1a0c7d6820ac9bfdb2ae8fcc
.exe windows:4 windows x86 arch:x86

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

Issuer

CN=Application Compatibility UI

Not Before

31/12/2008, 16:00

Not After

31/12/2014, 16:00

Subject

CN=Application Compatibility UI

Extended Key Usages

ExtKeyUsageCodeSigning

18:93:02:92:7e:be:d4:17:30:5a:c8:7c:42:36:96:ad:04:de:3d:66
Signer

Actual PE Digest

18:93:02:92:7e:be:d4:17:30:5a:c8:7c:42:36:96:ad:04:de:3d:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

Sections

%
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

!
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9
Size: 512B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

)
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2Certificate

Extended Key Usages

18:93:02:92:7e:be:d4:17:30:5a:c8:7c:42:36:96:ad:04:de:3d:66Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

% Size: - Virtual size: 15KB

3 Size: - Virtual size: 164B

2 Size: - Virtual size: 1KB

! Size: - Virtual size: 1KB

$ Size: - Virtual size: 8B

< Size: 512B - Virtual size: 24B

> Size: - Virtual size: 1KB

9 Size: 512B - Virtual size: 124KB

0 Size: - Virtual size: 16KB

) Size: 168KB - Virtual size: 167KB

< Size: 512B - Virtual size: 84B

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

18:93:02:92:7e:be:d4:17:30:5a:c8:7c:42:36:96:ad:04:de:3d:66
Signer

%
Size: - Virtual size: 15KB

3
Size: - Virtual size: 164B

2
Size: - Virtual size: 1KB

!
Size: - Virtual size: 1KB

$
Size: - Virtual size: 8B

<
Size: 512B - Virtual size: 24B

>
Size: - Virtual size: 1KB

9
Size: 512B - Virtual size: 124KB

0
Size: - Virtual size: 16KB

)
Size: 168KB - Virtual size: 167KB

<
Size: 512B - Virtual size: 84B