1ed504f08a7c54df24bd3eee74b9be10

Sharing

Copy URL Twitter E-mail

General

Target

1ed504f08a7c54df24bd3eee74b9be10
Size

293KB
MD5

1ed504f08a7c54df24bd3eee74b9be10
SHA1

193464b6c2e20e1edc1044e2bd582776dcd2d9c5
SHA256

69b7b4504b883d24e0bbbbb662783b073c12634063d4ddf52a69e181ad311007
SHA512

38e89deb0e777b5622da5526384aa960d2fd208ce530b928d8710ab3095931e91ea2b1d4e082b792fe407fb3fc59f6898c844afda924b04f8f2effdeabb4c593
SSDEEP

6144:QPdMFMANEVzGlcEDUl4qaRYVQjJTGbusJRhgnGXcPD7Xm2BeddhMHyjw34:hNEh8cSLqdksisDhgnGcBBedDMWwI

Score

1^/10

Malware Config

Signatures

Files

1ed504f08a7c54df24bd3eee74b9be10
.exe windows:4 windows x86 arch:x86

001acfa1c7ef8aa1a8bdc2548f818da7

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

Issuer

CN=ggggggggg

Not Before

17/01/2012, 12:30

Not After

31/12/2039, 23:59

Subject

CN=ggggggggg

Extended Key Usages

ExtKeyUsageCodeSigning

44:a9:88:2d:66:59:e5:36:b7:1b:12:b6:7a:26:f9:09:97:cc:18:62
Signer

Actual PE Digest

44:a9:88:2d:66:59:e5:36:b7:1b:12:b6:7a:26:f9:09:97:cc:18:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationA
SetThreadLocale
GetDateFormatW
GlobalMemoryStatus
SetThreadPriorityBoost
SetTapePosition
LocalLock
lstrcmpi
GenerateConsoleCtrlEvent
FreeConsole
MoveFileWithProgressA
GetVersionExA
SetConsoleActiveScreenBuffer
BindIoCompletionCallback
ChangeTimerQueueTimer
GetFileSize
IsDebuggerPresent
SetFileAttributesA
GetQueuedCompletionStatus
GetExitCodeThread
MoveFileWithProgressW
HeapUnlock
GetCommState
ReadConsoleOutputA
GetConsoleTitleW
GetProcessHeap
WaitCommEvent
LocalSize
GlobalFindAtomW
GlobalFlags
OpenProcess
GetVersionExW
OpenFileMappingW
GetProcAddress
FormatMessageA
HeapWalk
GetFileAttributesA
SetMailslotInfo
EndUpdateResourceA
lstrcpyW
PurgeComm
EnumResourceNamesW
GlobalAddAtomA
GetACP
SetDefaultCommConfigA
VerSetConditionMask
CompareStringW
GetPrivateProfileSectionNamesA
Thread32First
GetLocaleInfoA
GlobalGetAtomNameA
QueryDosDeviceW
HeapLock
SetEndOfFile
GetProcessShutdownParameters
IsBadStringPtrA
FindFirstVolumeW
LoadLibraryExA
GetFileAttributesExA
QueryPerformanceCounter
SetEnvironmentVariableW
GetCommandLineA
EnumDateFormatsExA
CancelWaitableTimer
WriteProfileStringA
RtlUnwind
GetCPInfo
lstrcpy
GetLastError
GetStartupInfoA
VirtualLock
GetVolumePathNameA
CreateTimerQueueTimer
HeapSize
SetConsoleMode
_lwrite
HeapAlloc
OpenWaitableTimerA
CreateSemaphoreW
FillConsoleOutputCharacterW
CreateNamedPipeW
CommConfigDialogA
GetCompressedFileSizeW
SetCommMask
ScrollConsoleScreenBufferA
CreateMutexA
CreateRemoteThread
IsBadReadPtr
FindNextVolumeA
InterlockedIncrement
GetThreadSelectorEntry
WideCharToMultiByte
FreeEnvironmentStringsA
VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetModuleHandleA

user32

GetCaretPos
GetClipCursor
SetPropW
InvalidateRect
UnregisterDeviceNotification
GetDesktopWindow
DestroyWindow
FrameRect
PostMessageA
DdeUninitialize
SetUserObjectInformationW
CreateAcceleratorTableA
GetMenuStringA
CountClipboardFormats
CloseWindowStation
RealGetWindowClassW
CharToOemBuffA
GetWindowDC
RegisterDeviceNotificationW
CharLowerA
GetClassWord
GetAsyncKeyState
SendInput
SetLayeredWindowAttributes
LookupIconIdFromDirectoryEx
IsDlgButtonChecked
AppendMenuW
ChangeMenuW
OemKeyScan
FillRect
OemToCharBuffA
SetProcessDefaultLayout
SetKeyboardState
GetAltTabInfo
RegisterWindowMessageW
EnumThreadWindows
RegisterClassExA
GetWindowModuleFileName
GetKeyboardLayout
DrawTextW
CreatePopupMenu
SendDlgItemMessageA
ChildWindowFromPointEx
SetMessageQueue
DdeSetUserHandle
SetCursor
GetClipboardFormatNameA
ScrollWindowEx
OemToCharW
SetDoubleClickTime
DrawFrame
IsWindowVisible
ChangeDisplaySettingsA
GetDlgItemInt
GetKeyboardLayoutList
LoadAcceleratorsA
CharToOemW
UpdateWindow
GetIconInfo
SetLastErrorEx
RegisterClassA
IMPSetIMEA
ModifyMenuW
GetListBoxInfo
RegisterClipboardFormatW
SetDlgItemTextW
SetWindowLongA
EnumChildWindows
IsIconic
GetMenuItemCount
ValidateRect
CreateIcon
IsRectEmpty
GetKeyboardLayoutNameA
GetWindow
MsgWaitForMultipleObjects
CreateDialogParamW
GetPropA
GetDCEx
GetDC
IsWindow
CloseWindow
GetDlgItem
CharPrevExA
GetPropW
GetShellWindow
IsDialogMessageA
LoadIconA

advapi32

RegOpenKeyExW

ole32

HMETAFILEPICT_UserFree
HICON_UserUnmarshal
CoGetPSClsid
CoRevertToSelf
WdtpInterfacePointer_UserFree
SetConvertStg
CoGetMalloc
OleSaveToStream
CLSIDFromString
StgOpenStorageOnILockBytes
CoUninitialize
CoMarshalHresult
CoGetInterfaceAndReleaseStream
UtGetDvtd32Info
CoRegisterPSClsid
OleCreateFromDataEx
CoDisableCallCancellation
OleCreateFromFileEx
MkParseDisplayName
CreateStdProgressIndicator
OleConvertIStorageToOLESTREAMEx
OleCreateEmbeddingHelper
HMETAFILE_UserSize
HBITMAP_UserMarshal
OleQueryLinkFromData
PropStgNameToFmtId
GetClassFile
OleLoad
FreePropVariantArray
GetConvertStg
HWND_UserUnmarshal
CoGetStdMarshalEx
OleSetMenuDescriptor
CoGetInstanceFromIStorage
WriteOleStg
HENHMETAFILE_UserFree
CoGetCurrentProcess
HMETAFILE_UserFree
OleRegEnumFormatEtc
HENHMETAFILE_UserMarshal
OleRegGetUserType
OleLoadFromStream
ProgIDFromCLSID
HkOleRegisterObject
UtConvertDvtd16toDvtd32
CoGetInstanceFromFile
WriteClassStg
CoLoadLibrary
CoAddRefServerProcess
CoQueryProxyBlanket
ReadClassStg
CoRevokeMallocSpy
HBRUSH_UserFree
CoGetCallerTID
CoGetMarshalSizeMax
HMETAFILEPICT_UserUnmarshal
CoAllowSetForegroundWindow
CoTaskMemFree
CoQueryClientBlanket
OleCreateDefaultHandler
HGLOBAL_UserSize
CoBuildVersion
CoCancelCall
HICON_UserSize
StgCreateDocfile
CoSuspendClassObjects
EnableHookObject
OleDraw
OleConvertOLESTREAMToIStorageEx
MonikerCommonPrefixWith
OleSetContainedObject
CLIPFORMAT_UserSize
HGLOBAL_UserFree
SNB_UserFree
CoRegisterSurrogate
HPALETTE_UserSize
CoReleaseMarshalData
OleNoteObjectVisible
CoTaskMemRealloc
CoTreatAsClass
StgCreatePropStg
OleDoAutoConvert
OleTranslateAccelerator
SetDocumentBitStg
CoGetObjectContext

Sections

.text
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

001acfa1c7ef8aa1a8bdc2548f818da7

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77Certificate

Extended Key Usages

44:a9:88:2d:66:59:e5:36:b7:1b:12:b6:7a:26:f9:09:97:cc:18:62Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 259KB - Virtual size: 258KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 1KB - Virtual size: 1KB

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

44:a9:88:2d:66:59:e5:36:b7:1b:12:b6:7a:26:f9:09:97:cc:18:62
Signer

.text
Size: 259KB - Virtual size: 258KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 1KB - Virtual size: 1KB