283f88677dc9a05f8a9a3ca67a720334

Sharing

Copy URL Twitter E-mail

General

Target

283f88677dc9a05f8a9a3ca67a720334
Size

468KB
MD5

283f88677dc9a05f8a9a3ca67a720334
SHA1

f60e950781231c1f5e05f82cce6b37ff173d16d5
SHA256

ab9b6f8e2702f0e4d48ae06024d7a65034cd6b6bc689eb40cecef0ebe1cdee0c
SHA512

3f001dabee39760390ad21140427fd65e5ef078e4f4608de8def080b0df27f9722dc4fb2fd6677f993654ddb467d5cb9b30cd94d06c37e51ce8413fa38e8a77a
SSDEEP

3072:sff9tFDCm37soTbnH+h9g75MJMkYpg8ohXe+s3Nmt2BRdUfXrsJm+o:tmrrbH+h9gNho1wjBYrA4

Score

1^/10

Malware Config

Signatures

Files

283f88677dc9a05f8a9a3ca67a720334
.dll regsvr32 windows:4 windows x86 arch:x86

a8fb08815f22f55d7aec5015849c2a20

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

13/04/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

11:21:67:1b:9c:9c:88:b9:69:99:d2:12:24:77:66:a5:d4:04
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

03/12/2013, 17:49

Not After

01/03/2017, 12:33

Subject

CN=Biz Secure Labs Pvt. Ltd.,O=Biz Secure Labs Pvt. Ltd.,L=Pune,ST=Maharashfra,C=IN,1.2.840.113549.1.9.1=#0c1a737570706f727440696e646961616e746976697275732e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

eb:4f:4a:3e:09:c1:47:b7:52:8a:da:4d:86:45:62:a4:01:64:ee:9d
Signer

Actual PE Digest

eb:4f:4a:3e:09:c1:47:b7:52:8a:da:4d:86:45:62:a4:01:64:ee:9d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
CreateProcessA
GetWindowsDirectoryA
CloseHandle
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
CreateFileA
FindNextFileA
FindFirstFileA
GlobalLock
SizeofResource
GlobalUnlock
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
HeapDestroy
IsDBCSLeadByte
LoadResource
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
FreeLibrary
WideCharToMultiByte
GetModuleFileNameA
GetShortPathNameA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetVersion
lstrlenA
DisableThreadLibraryCalls
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapCreate
VirtualFree
ExitProcess
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings

user32

GetWindowLongA
LoadImageA
EndPaint
CharNextA
GetDlgItemTextA
SetWindowLongA
SetDlgItemTextA
BeginPaint
GetClientRect

gdi32

GetObjectA
GetViewportOrgEx
GetViewportExtEx
SetViewportOrgEx
CreateCompatibleDC
SelectObject
StretchBlt
SetBkColor
SetBkMode
CreateFontA
SetTextColor
TextOutA
DeleteObject

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
RegEnumValueA
RegCloseKey
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA

shell32

DragQueryFileA

ole32

CoTaskMemRealloc
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysAllocString
RegisterTypeLi
VarUI4FromStr
SysFreeString
SysStringLen
LoadRegTypeLi
LoadTypeLi

shlwapi

PathIsDirectoryA
PathRemoveExtensionA
PathStripPathA

comctl32

DestroyPropertySheetPage
InitCommonControlsEx
CreatePropertySheetPageA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8fb08815f22f55d7aec5015849c2a20

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

11:21:67:1b:9c:9c:88:b9:69:99:d2:12:24:77:66:a5:d4:04Certificate

Extended Key Usages

Key Usages

eb:4f:4a:3e:09:c1:47:b7:52:8a:da:4d:86:45:62:a4:01:64:ee:9dSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 392KB - Virtual size: 389KB

.reloc Size: 8KB - Virtual size: 5KB

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

11:21:67:1b:9c:9c:88:b9:69:99:d2:12:24:77:66:a5:d4:04
Certificate

eb:4f:4a:3e:09:c1:47:b7:52:8a:da:4d:86:45:62:a4:01:64:ee:9d
Signer

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 392KB - Virtual size: 389KB

.reloc
Size: 8KB - Virtual size: 5KB