1257ed4bc54daa05d8e0962f67227705

Sharing

Copy URL Twitter E-mail

General

Target

1257ed4bc54daa05d8e0962f67227705
Size

1.1MB
MD5

1257ed4bc54daa05d8e0962f67227705
SHA1

c41b657c79a09c150aa170243e1c450d6dcec606
SHA256

64f7ee64a85714afa869271965ada1e1ba588b07a205a3a5eda41e9265512b0b
SHA512

279fd0b09c4b0038aa3c7bc524578f0cc175f32716de9a49404df59fce3f70d18ea8fe03cfa3f0219c9f4ff582874811cb3ef668c39187fb9d78a5ff5d3f542e
SSDEEP

24576:UlTshPoDiXbNSXIN6L/Y1ja1zwdY4k2A/QaFcEYZFE:UshPjNSXGic+FwTbA4SRB

Score

1^/10

Malware Config

Signatures

Files

1257ed4bc54daa05d8e0962f67227705
.exe windows:5 windows x86 arch:x86

d06d9fcfee6847d7784c8b5dcf5f0e1c

Code Sign

41:ec:d1:e9:0b:16:6e:bb:4f:99:62:ad:07:43:df:67
Certificate

Issuer

CN=AGNVGONZ

Not Before

18/12/2018, 11:40

Not After

31/12/2039, 23:59

Subject

CN=AGNVGONZ

Extended Key Usages

ExtKeyUsageCodeSigning

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8d:5c:27:e4:0a:5e:b6:6f:6c:61:bc:0e:4a:35:f7:6b:2b:2a:4f:38:31:a6:e5:af:ea:e2:14:a6:8d:45:66:91
Signer

Actual PE Digest

8d:5c:27:e4:0a:5e:b6:6f:6c:61:bc:0e:4a:35:f7:6b:2b:2a:4f:38:31:a6:e5:af:ea:e2:14:a6:8d:45:66:91

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
LocalFree
LocalReAlloc
MoveFileA
MulDiv
MultiByteToWideChar
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadFile
RtlUnwind
SearchPathW
SetConsoleTitleA
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
LoadLibraryW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerLanguageNameW
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
_lclose
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
VirtualAllocEx
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
IsDebuggerPresent
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
HeapFree
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalLock
GlobalGetAtomNameW
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetTimeZoneInformation
GetTickCount
GetTempFileNameA
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProfileStringW
GetProfileIntW
GetProfileIntA
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLogicalDriveStringsA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFileType
GetFileInformationByHandle
GetFileAttributesW
GetEnvironmentStringsW
GetEnvironmentStrings
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FileTimeToSystemTime
CallNamedPipeW
FileTimeToLocalFileTime
ExitThread
ExitProcess
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateProcessW
CreateFileW
CreateFileA
CreateEventW
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
TerminateProcess

user32

SetParent
SetRect
SetRectEmpty
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
SetWindowsHookW
ShowCursor
ShowWindow
SystemParametersInfoW
ToUnicodeEx
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHook
UnregisterDeviceNotification
UpdateWindow
ValidateRect
WinHelpW
wsprintfA
wsprintfW
CountClipboardFormats
CharNextW
EndMenu
GetWindowTextLengthW
IsCharLowerW
IsCharUpperA
OpenIcon
CharUpperW
IsCharUpperW
LoadImageW
LoadIconW
LoadCursorW
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDlgButtonChecked
IsCharAlphaW
IsCharAlphaNumericW
InvertRect
InvalidateRect
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindow
SetMenu
GetSysColor
GetSubMenu
GetParent
GetMessageW
GetMessagePos
GetMenuItemCount
GetMenu
GetKeyState
GetFocus
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetClientRect
GetClassNameW
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
FillRect
EqualRect
EnumDisplaySettingsW
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DrawMenuBar
DrawIcon
DrawAnimatedRects
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DeferWindowPos
DefWindowProcW
CreateWindowExW
CreateMenu
CreateCursor
CopyRect
CopyAcceleratorTableW
ClientToScreen
CheckRadioButton
CheckMenuItem
CheckDlgButton
CharPrevW
CharLowerBuffW
CallWindowProcW
BringWindowToTop
BeginPaint
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetDlgItemInt
SetDebugErrorLevel
SetCursor
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageW
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterDeviceNotificationW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageW
OffsetRect
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
MessageBeep
MapWindowPoints
LoadStringW
GetSystemMetrics
LoadMenuW
BeginDeferWindowPos
AdjustWindowRect
IntersectRect

gdi32

CreatePen
CreateSolidBrush
DeleteDC
DeleteMetaFile
DeleteObject
EngCreatePalette
EngMultiByteToUnicodeN
EngQueryLocalTime
ExcludeClipRect
FillRgn
GdiGetCharDimensions
GetBitmapDimensionEx
GetBkMode
GetCharABCWidthsW
GetCharWidthA
GetDIBits
GetDeviceCaps
GetFontResourceInfoW
GetObjectW
GetPaletteEntries
GetROP2
GetStockObject
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextExtentPoint32W
LineTo
MoveToEx
PatBlt
CreatePatternBrush
Polygon
RealizePalette
Rectangle
ResetDCA
RestoreDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDeviceGammaRamp
SetMapMode
SetROP2
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StartPage
StretchBlt
StretchDIBits
TextOutA
TextOutW
bInitSystemAndFontsDirectoriesW
GetPolyFillMode
GetBkColor
BeginPath
CreatePalette
CreateMetaFileW
CreateHalftonePalette
CreateFontIndirectW
CreateEllipticRgn
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CopyMetaFileW
CopyEnhMetaFileA
CloseMetaFile
PolyBezier
AddFontMemResourceEx

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyW

shell32

ExtractIconW
ShellExecuteEx
ShellAboutW
SHPathPrepareForWriteW
CommandLineToArgvW
DoEnvironmentSubstA
DragAcceptFiles
DragFinish
DragQueryFile
DragQueryFileW
DragQueryPoint
ExtractAssociatedIconExW
ExtractIconExA
ExtractIconExW
WOWShellExecute
SHBrowseForFolderA
SHBrowseForFolderW
SHCreateProcessAsUserW
SHFileOperationA
SHFileOperationW
SHGetDataFromIDListA
SHGetFileInfoW
SHGetMalloc
SHGetSpecialFolderPathA
SHInvokePrinterCommandW
SHLoadNonloadedIconOverlayIdentifiers

shlwapi

StrCmpNIW
StrRStrIA
StrChrIW
StrStrIA

comctl32

CreateStatusWindowW
CreateToolbarEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 996KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d06d9fcfee6847d7784c8b5dcf5f0e1c

Code Sign

41:ec:d1:e9:0b:16:6e:bb:4f:99:62:ad:07:43:df:67Certificate

Extended Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

8d:5c:27:e4:0a:5e:b6:6f:6c:61:bc:0e:4a:35:f7:6b:2b:2a:4f:38:31:a6:e5:af:ea:e2:14:a6:8d:45:66:91Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

comctl32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 1024B - Virtual size: 996KB

41:ec:d1:e9:0b:16:6e:bb:4f:99:62:ad:07:43:df:67
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

8d:5c:27:e4:0a:5e:b6:6f:6c:61:bc:0e:4a:35:f7:6b:2b:2a:4f:38:31:a6:e5:af:ea:e2:14:a6:8d:45:66:91
Signer

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 1024B - Virtual size: 996KB