26af4aa99ef71facb44670e088bb96f7

Sharing

Copy URL Twitter E-mail

General

Target

26af4aa99ef71facb44670e088bb96f7
Size

172KB
MD5

26af4aa99ef71facb44670e088bb96f7
SHA1

d47d801b3c14c1e6aa9f9e83c660f031d1453e2a
SHA256

821cf68c370774ec9ecc9a377a41769162894158eec58fdd1a8f2d52d19f39c5
SHA512

d516aa3ca83fed73495a130c7239af6f92a3d5f391dcf440626332bc619c673da6a620f06d421d54e912a7303e071af26006c807e42f61897ae767d1020f0770
SSDEEP

3072:tAGwe1B0tyLDTe3YP5TGHdJ7gSAD6Fo2ZKh12r/u5NbjES/eVOtiMlEzOklbFRk:Xwe7+yLPR8cSAaZwkUhEXVAEzOke

Score

1^/10

Malware Config

Signatures

Files

26af4aa99ef71facb44670e088bb96f7
.exe windows:4 windows x86 arch:x86

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

Issuer

CN=Application Compatibility UI

Not Before

31/12/2008, 16:00

Not After

31/12/2014, 16:00

Subject

CN=Application Compatibility UI

Extended Key Usages

ExtKeyUsageCodeSigning

3b:cc:7b:1d:9f:56:ed:79:f3:69:03:12:a5:9b:b7:98:9a:53:39:03
Signer

Actual PE Digest

3b:cc:7b:1d:9f:56:ed:79:f3:69:03:12:a5:9b:b7:98:9a:53:39:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

Sections

*
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

;
Size: - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

!
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

-
Size: 512B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

)
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2Certificate

Extended Key Usages

3b:cc:7b:1d:9f:56:ed:79:f3:69:03:12:a5:9b:b7:98:9a:53:39:03Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

* Size: - Virtual size: 15KB

; Size: - Virtual size: 164B

! Size: - Virtual size: 1KB

@ Size: - Virtual size: 1KB

" Size: - Virtual size: 8B

7 Size: 512B - Virtual size: 24B

3 Size: - Virtual size: 1KB

- Size: 512B - Virtual size: 124KB

" Size: - Virtual size: 17KB

3 Size: 169KB - Virtual size: 168KB

) Size: 512B - Virtual size: 92B

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

3b:cc:7b:1d:9f:56:ed:79:f3:69:03:12:a5:9b:b7:98:9a:53:39:03
Signer

*
Size: - Virtual size: 15KB

;
Size: - Virtual size: 164B

!
Size: - Virtual size: 1KB

@
Size: - Virtual size: 1KB

"
Size: - Virtual size: 8B

7
Size: 512B - Virtual size: 24B

3
Size: - Virtual size: 1KB

-
Size: 512B - Virtual size: 124KB

"
Size: - Virtual size: 17KB

3
Size: 169KB - Virtual size: 168KB

)
Size: 512B - Virtual size: 92B