08effc0fff2ab2d337356452b05df0de

Sharing

Copy URL Twitter E-mail

General

Target

08effc0fff2ab2d337356452b05df0de
Size

77KB
MD5

08effc0fff2ab2d337356452b05df0de
SHA1

4d9006054d8735a08c5fde8ee7e66487a50d6f28
SHA256

58aa60795cbaff087c8f4cf9e9c72cab974e1de0ac655a86ccb265c908762fa7
SHA512

9f9772d2e3801fae525cb32d9d09110fc425bea982853bd4e9af438d38d98a707e02bd821ca27f2f1b5dcf495494c28fd4ab684b4fa598f25149b77b68e44043
SSDEEP

768:cr3i3AukW1TCTJIAPKjMe/VQVD5JLwXY49oHoGdEiHZZ:cr3i3AukiCTJvPKxaV9X45mZZ

Score

1^/10

Malware Config

Signatures

Files

08effc0fff2ab2d337356452b05df0de
.exe windows:5 windows x86 arch:x86

b887ad96448d62d4b84a6695fcd35f8a

Code Sign

67:52:ee:b9:eb:d5:e8:4c:b6:5f:33:34:ec:27:cc:0c
Certificate

Issuer

CN=HEwn

Not Before

20/05/2012, 19:10

Not After

31/12/2039, 23:59

Subject

CN=HEwn

Extended Key Usages

ExtKeyUsageCodeSigning

85:38:ba:6e:b1:ad:ad:46:fa:2c:8e:3e:6c:dc:28:d3:81:3c:07:38
Signer

Actual PE Digest

85:38:ba:6e:b1:ad:ad:46:fa:2c:8e:3e:6c:dc:28:d3:81:3c:07:38

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
lstrcatW
GetWindowsDirectoryW
VirtualAllocEx
CreateFileW

user32

SetRect
GetDialogBaseUnits
GetSysColor
CallWindowProcA
GetKeyState
SetFocus
GetWindowLongA
SetScrollPos
SetWindowTextA
SetClassLongA
InvalidateRect
PostQuitMessage
DefWindowProcA
MoveWindow

gdi32

GetStockObject
SetTextColor
DeleteObject
CreateSolidBrush
SetBkColor

advapi32

RegOpenKeyW
RegCloseKey

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b887ad96448d62d4b84a6695fcd35f8a

Code Sign

67:52:ee:b9:eb:d5:e8:4c:b6:5f:33:34:ec:27:cc:0cCertificate

Extended Key Usages

85:38:ba:6e:b1:ad:ad:46:fa:2c:8e:3e:6c:dc:28:d3:81:3c:07:38Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 1024B - Virtual size: 870B

.data Size: 10KB - Virtual size: 10KB

.data3 Size: 10KB - Virtual size: 9KB

.data2 Size: 10KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 976B

67:52:ee:b9:eb:d5:e8:4c:b6:5f:33:34:ec:27:cc:0c
Certificate

85:38:ba:6e:b1:ad:ad:46:fa:2c:8e:3e:6c:dc:28:d3:81:3c:07:38
Signer

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 1024B - Virtual size: 870B

.data
Size: 10KB - Virtual size: 10KB

.data3
Size: 10KB - Virtual size: 9KB

.data2
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 976B