44e690c31a257383b132c94dab996bfb

Sharing

Copy URL Twitter E-mail

General

Target

44e690c31a257383b132c94dab996bfb
Size

119KB
MD5

44e690c31a257383b132c94dab996bfb
SHA1

b6e2f19c346cec85e4352d0e63fc77e4d228d334
SHA256

7960075563bd1e043c95eb08572590d03a4572c1a7eea75382da663ceb5aa963
SHA512

4425c638ea759f2f713e383c8d3fa794ed3715360667ca52bd83a19024e5e0de630423a72ecc3d71df2f6f09db84bb787e105cdb9ac5adeca0eed454ddf5ebba
SSDEEP

1536:Blq1rERMjrFMfM4Iht/5Ag9+8Dc6L5xSjBQQfXNaPm5qisuAqaDSMqbrGFGXe5:zgnP/5Ao+AdvS9XNaPmQuAqonSe5

Score

1^/10

Malware Config

Signatures

Files

44e690c31a257383b132c94dab996bfb
.exe windows:4 windows x86 arch:x86

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

04:b4:64:7f:58:6c:a9:50:b2:7d:28:e6:d5:01:dc:6e
Certificate

Issuer

CN=SyvZ

Not Before

24/05/2012, 05:06

Not After

31/12/2039, 23:59

Subject

CN=SyvZ

Extended Key Usages

ExtKeyUsageCodeSigning

fe:df:78:68:1c:1f:8e:16:40:60:98:d7:02:cf:36:22:e1:b7:2d:a8
Signer

Actual PE Digest

fe:df:78:68:1c:1f:8e:16:40:60:98:d7:02:cf:36:22:e1:b7:2d:a8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx
WriteFile
GetModuleHandleW
GetProcAddress

advapi32

RegCloseKey

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

04:b4:64:7f:58:6c:a9:50:b2:7d:28:e6:d5:01:dc:6eCertificate

Extended Key Usages

fe:df:78:68:1c:1f:8e:16:40:60:98:d7:02:cf:36:22:e1:b7:2d:a8Signer

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 97KB - Virtual size: 97KB

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 176B

04:b4:64:7f:58:6c:a9:50:b2:7d:28:e6:d5:01:dc:6e
Certificate

fe:df:78:68:1c:1f:8e:16:40:60:98:d7:02:cf:36:22:e1:b7:2d:a8
Signer

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 97KB - Virtual size: 97KB

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 176B