General

Malware Config

Signatures

Files

• 072769a3e8b70e0f24b31278c5f4c897

  .exe windows:6 windows x86 arch:x86

  7e4a49baed74fc5fdf2cc2a93738ac6b

  
  

  Code Sign

  33:00:00:00:bc:e1:20:fd:d2:7c:c8:ee:93:00:00:00:00:00:bc

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18-08-2015 17:15

  Not After

  18-11-2016 17:15

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19-10-2011 18:41

  Not After

  19-10-2026 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  10:36:b1:30:20:57:9b:c1:d9:60:58:00:a7:74:ec:95:28:bc:e5:00:66:8f:5e:ce:49:da:4f:5c:45:d1:90:c6

  Signer

  Actual PE Digest

  10:36:b1:30:20:57:9b:c1:d9:60:58:00:a7:74:ec:95:28:bc:e5:00:66:8f:5e:ce:49:da:4f:5c:45:d1:90:c6

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  DeleteAtom

  GetModuleHandleA

  CreateTimerQueue

  GetVersion

  GetSystemInfo

  GetCurrentThreadId

  GetCurrentProcessId

  GetCurrentProcess

  CreateEventW

  CreateMutexW

  GetCommandLineW

  WaitForSingleObject

  AddAtomW

  GetProcessHeap

  HeapCreate

  QueryPerformanceFrequency

  QueryPerformanceCounter

  UnlockFileEx

  SetFilePointerEx

  SetFilePointer

  LockFileEx

  LockFile

  GetLogicalDrives

  GetFileSizeEx

  GetFileInformationByHandle

  CreateFileW

  InitializeCriticalSection

  user32

  IsDialogMessageA

  LoadIconA

  DestroyCursor

  LoadCursorA

  CheckMenuRadioItem

  FindWindowA

  SetWindowLongA

  GetWindowLongA

  GetSysColorBrush

  GetSysColor

  ChildWindowFromPoint

  ClientToScreen

  GetCursorPos

  SetCursor

  MessageBoxA

  GetWindowRect

  GetClientRect

  GetWindowTextA

  SetWindowTextA

  RedrawWindow

  InvalidateRect

  SetActiveWindow

  SetMenuItemInfoA

  InsertMenuItemA

  TrackPopupMenu

  RemoveMenu

  AppendMenuA

  GetSubMenu

  EnableMenuItem

  CheckMenuItem

  DestroyMenu

  CreatePopupMenu

  GetSystemMenu

  GetMenu

  GetSystemMetrics

  TranslateAcceleratorA

  DestroyAcceleratorTable

  LoadAcceleratorsA

  EnableWindow

  KillTimer

  SetTimer

  GetActiveWindow

  SetFocus

  CharLowerBuffA

  CharUpperA

  DestroyIcon

  EnumClipboardFormats

  GetClipboardData

  SetClipboardData

  CloseClipboard

  OpenClipboard

  DefDlgProcA

  SendDlgItemMessageA

  IsDlgButtonChecked

  CheckRadioButton

  CheckDlgButton

  GetDlgItemTextA

  SetDlgItemTextA

  SetDlgItemInt

  GetDlgItem

  EndDialog

  DialogBoxParamA

  CreateDialogParamA

  SetWindowPlacement

  GetWindowPlacement

  SetWindowPos

  MoveWindow

  DestroyWindow

  IsMenu

  EmptyClipboard

  wvsprintfA

  wsprintfA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  SendMessageA

  IsWindow

  GetClassInfoA

  UnregisterClassA

  RegisterClassA

  CallWindowProcA

  PostQuitMessage

  PostMessageA

  gdi32

  GetBrushOrgEx

  GetCharWidthFloatW

  GetCharABCWidthsW

  GetCharABCWidthsFloatW

  GetMetaRgn

  CombineRgn

  GetGraphicsMode

  GetNearestPaletteIndex

  GetObjectType

  GetOutlineTextMetricsW

  GetPixel

  GetRgnBox

  CopyMetaFileW

  CreateFontIndirectA

  DeleteObject

  Ellipse

  EnumFontFamiliesW

  EqualRgn

  ExtFloodFill

  FrameRgn

  GetROP2

  GetDCBrushColor

  GetDCPenColor

  GetBoundsRect

  GetBkMode

  GetDIBits

  GetStockObject

  GdiFlush

  UnrealizeObject

  SetBitmapDimensionEx

  ScaleWindowExtEx

  OffsetWindowOrgEx

  SetWindowExtEx

  SetViewportExtEx

  PolyBezier

  Polyline

  LPtoDP

  ExtTextOutW

  GetObjectA

  GetArcDirection

  GetMiterLimit

  StrokePath

  SelectClipPath

  AbortPath

  ModifyWorldTransform

  GdiComment

  PlayEnhMetaFileRecord

  GetWinMetaFileBits

  CopyEnhMetaFileW

  EnumMetaFile

  PlayMetaFileRecord

  GdiTransparentBlt

  GdiAlphaBlend

  UpdateColors

  SetTextColor

  SetTextCharacterExtra

  SetROP2

  StretchBlt

  SetPaletteEntries

  SetDIBitsToDevice

  SetBitmapBits

  SetBkMode

  SetDCPenColor

  SelectObject

  ExtSelectClipRgn

  SelectClipRgn

  ResizePalette

  RoundRect

  RealizePalette

  RestoreDC

  RectVisible

  PtInRegion

  PolyPolygon

  PaintRgn

  OffsetRgn

  PlgBlt

  MaskBlt

  LineTo

  InvertRgn

  GetWindowOrgEx

  GetCharWidthI

  GetTextAlign

  GetBitmapDimensionEx

  winspool.drv

  FindNextPrinterChangeNotification

  FindFirstPrinterChangeNotification

  ScheduleJob

  AbortPrinter

  WritePrinter

  FindClosePrinterChangeNotification

  comdlg32

  GetSaveFileNameA

  GetOpenFileNameA

  advapi32

  GetUserNameA

  RegQueryValueExA

  OpenProcessToken

  AdjustTokenPrivileges

  DecryptFileW

  LookupPrivilegeValueA

  RegSetValueA

  RegCloseKey

  RegCreateKeyA

  RegDeleteKeyA

  RegOpenKeyExA

  Sections

  .text

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 524B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 20B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 82KB - Virtual size: 81KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ