1e7e3ecd7a48a7d0007a4ba49ded833d

Sharing

Copy URL Twitter E-mail

General

Target

1e7e3ecd7a48a7d0007a4ba49ded833d
Size

432KB
MD5

1e7e3ecd7a48a7d0007a4ba49ded833d
SHA1

1fb72522bef2b03b5eb2b880c8728c95565aa717
SHA256

884f22e330a10575cbb0b2a5ac46fc6a98ea280f196952aedc19ae83a12817d1
SHA512

5866f413e52d924c0c81d9c96c9205166507b9ccbabab18973a6ba5e690315aacac9d1135f4c458f5237aad2aa0992ddc37f130d024dae7d8f390f51548c8cd8
SSDEEP

6144:Xwufb1U8SZCEK7F5Y2qQjsuppBayRpVQ0MzGRxVX+wgnnIZsgpg8gTfP/kYVz:YEEK7tt/ppBRIbKOnWsgpg8CPcYVz

Score

1^/10

Malware Config

Signatures

Files

1e7e3ecd7a48a7d0007a4ba49ded833d
.exe windows:4 windows x86 arch:x86

fb30006b32f52722f2cfa5de4378d62a

Code Sign

2b:6f:dc:40:3c:b8:d6:84:42:55:fb:ab:b7:fd:62:65
Certificate

Issuer

CN=Root Agency

Not Before

20/12/2011, 14:11

Not After

14/07/2014, 22:00

Subject

CN=Benert

52:fd:af:3a:34:c9:d2:f8:2c:e8:aa:1c:f2:fc:c1:22:4a:fa:09:f9
Signer

Actual PE Digest

52:fd:af:3a:34:c9:d2:f8:2c:e8:aa:1c:f2:fc:c1:22:4a:fa:09:f9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
WindowFromPoint

ole32

ProgIDFromCLSID
OleSetAutoConvert
CoRevokeMallocSpy

oleaut32

RegisterTypeLi
QueryPathOfRegTypeLi

advapi32

RegReplaceKeyA
RegQueryValueExA
RegQueryMultipleValuesA
RegCreateKeyExA

urlmon

CreateAsyncBindCtx

kernel32

HeapAlloc
GetStringTypeW
VirtualAlloc
LCMapStringW
LCMapStringA
HeapReAlloc
LoadLibraryA
GetStringTypeA
GetModuleFileNameA
LeaveCriticalSection
GlobalFree
GlobalHandle
WaitForSingleObject
PulseEvent
GlobalLock
GetProfileStringA
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zvqgfn
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uegdfo
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb30006b32f52722f2cfa5de4378d62a

Code Sign

2b:6f:dc:40:3c:b8:d6:84:42:55:fb:ab:b7:fd:62:65Certificate

52:fd:af:3a:34:c9:d2:f8:2c:e8:aa:1c:f2:fc:c1:22:4a:fa:09:f9Signer

Headers

File Characteristics

Imports

user32

ole32

oleaut32

advapi32

urlmon

kernel32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 6KB - Virtual size: 92KB

.zvqgfn Size: 288KB - Virtual size: 287KB

.uegdfo Size: 110KB - Virtual size: 109KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 3KB - Virtual size: 2KB

2b:6f:dc:40:3c:b8:d6:84:42:55:fb:ab:b7:fd:62:65
Certificate

52:fd:af:3a:34:c9:d2:f8:2c:e8:aa:1c:f2:fc:c1:22:4a:fa:09:f9
Signer

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 6KB - Virtual size: 92KB

.zvqgfn
Size: 288KB - Virtual size: 287KB

.uegdfo
Size: 110KB - Virtual size: 109KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 3KB - Virtual size: 2KB