228de194edf662752f523c2167e3fa60

Sharing

Copy URL Twitter E-mail

General

Target

228de194edf662752f523c2167e3fa60
Size

16KB
MD5

228de194edf662752f523c2167e3fa60
SHA1

da24fbf11c7bdd65e04a57010563c3b58dac8874
SHA256

9a7bfcdfeae16f1dd9750aa1c98dbd83a2d6b7be24a020e4e8e8cfd8c0a11e08
SHA512

4cd2de857947d709cfabbc67677b71c49d9d3c704be1e675993bb8bbedbb94b83b15db9d4914ba12bce12a692ec0ec5379480ef3d0ada0fb8711d37040a078d2
SSDEEP

192:evTl1Bva5ySFagL/nKBPhISG62pW/rJRgRBtD/rVND3koxYcWh4Ze:mhOySFagjSK962pGNRgrtD/9Wj

Score

1^/10

Malware Config

Signatures

Files

228de194edf662752f523c2167e3fa60
.exe windows:5 windows x86 arch:x86

a73818ee6ce929a61f3d475dec82923d

Code Sign

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:ca
Certificate

Issuer

CN=55121212512

Not Before

14/02/2012, 04:59

Not After

31/12/2039, 23:59

Subject

CN=55121212512

Extended Key Usages

ExtKeyUsageCodeSigning

13:8f:b3:10:b0:48:43:8e:85:48:27:c5:27:23:4a:f7:6e:59:cf:40
Signer

Actual PE Digest

13:8f:b3:10:b0:48:43:8e:85:48:27:c5:27:23:4a:f7:6e:59:cf:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

msvcrt

memset

user32

LoadBitmapA

advapi32

RegOpenKeyExA

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a73818ee6ce929a61f3d475dec82923d

Code Sign

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:caCertificate

Extended Key Usages

13:8f:b3:10:b0:48:43:8e:85:48:27:c5:27:23:4a:f7:6e:59:cf:40Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

version

Sections

.text Size: 2KB - Virtual size: 1KB

.text1 Size: 1024B - Virtual size: 600B

.text2 Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 88B

.rsrc Size: 2KB - Virtual size: 1KB

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:ca
Certificate

13:8f:b3:10:b0:48:43:8e:85:48:27:c5:27:23:4a:f7:6e:59:cf:40
Signer

.text
Size: 2KB - Virtual size: 1KB

.text1
Size: 1024B - Virtual size: 600B

.text2
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 88B

.rsrc
Size: 2KB - Virtual size: 1KB