24b2ce224622231ddd7056d6de6f5bc8

Sharing

Copy URL

Twitter E-mail

General

Target

24b2ce224622231ddd7056d6de6f5bc8
Size

443KB
MD5

24b2ce224622231ddd7056d6de6f5bc8
SHA1

0048a26276deb63e2c2d45de3b3708b9c70e6e46
SHA256

973266d6341942e01cbc3f66764e1ee1d71414bddd6bb80e9ac0f7fbc6c186d9
SHA512

8eef5cb1b623c120e12f4bf78225ec1cef1f6f4303aaca69d96d561b383403f9caa4ff743b3995b91dee04fa7992ffcb5e6c20929ddf12abb854f1b9c9c1b6bf
SSDEEP

12288:1VSk3O52vFC9HLC3/+GBy3/HyRd0xqkghJzHD/yaJ/R5+Jo:1VSzcCxC3/g/Hq0dgbzHeE5+Jo

Score

1^/10

Malware Config

Signatures

Files

24b2ce224622231ddd7056d6de6f5bc8
.exe windows:4 windows x86 arch:x86

1fc665ecf88c79e06b7852eefe69b57f

Code Sign

32:89:dd:e9:e2:92:df:4d:b2:50:e6:12:d9:ee:a3:bf
Certificate

Issuer

CN=xuovczbvgxw

Not Before

18/01/2012, 09:45

Not After

31/12/2039, 23:59

Subject

CN=Okiuytr

8a:8c:ce:26:70:0f:c6:3d:69:6c:4a:9b:fe:42:ae:d2:f8:87:b1:12
Signer

Actual PE Digest

8a:8c:ce:26:70:0f:c6:3d:69:6c:4a:9b:fe:42:ae:d2:f8:87:b1:12

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropStgNameToFmtId
ReadClassStm
OleGetClipboard
OleDraw
CoMarshalHresult
CoTaskMemAlloc
CreateBindCtx
OleRun
OleCreateLinkFromDataEx
CoGetPSClsid
CreateDataAdviseHolder
MkParseDisplayName
CoLockObjectExternal

kernel32

GetStringTypeW
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GlobalSize
IsBadStringPtrA
GetStringTypeA
SetEvent
HeapValidate
GetTimeFormatA
WaitForMultipleObjects
GetDateFormatA
LocalFlags
GetSystemDefaultLangID
HeapAlloc
IsValidCodePage
GetStartupInfoA
GetProcAddress
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcd
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fc665ecf88c79e06b7852eefe69b57f

Code Sign

32:89:dd:e9:e2:92:df:4d:b2:50:e6:12:d9:ee:a3:bfCertificate

8a:8c:ce:26:70:0f:c6:3d:69:6c:4a:9b:fe:42:ae:d2:f8:87:b1:12Signer

Headers

File Characteristics

Imports

ole32

kernel32

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 3KB - Virtual size: 96KB

.xcd Size: 402KB - Virtual size: 401KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 5KB - Virtual size: 4KB

32:89:dd:e9:e2:92:df:4d:b2:50:e6:12:d9:ee:a3:bf
Certificate

8a:8c:ce:26:70:0f:c6:3d:69:6c:4a:9b:fe:42:ae:d2:f8:87:b1:12
Signer

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 3KB - Virtual size: 96KB

.xcd
Size: 402KB - Virtual size: 401KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 5KB - Virtual size: 4KB