5004b486c32f5a7bfab40d1154d8a19b

Sharing

Copy URL Twitter E-mail

General

Target

5004b486c32f5a7bfab40d1154d8a19b
Size

7KB
MD5

5004b486c32f5a7bfab40d1154d8a19b
SHA1

f8724c641c6f43ffc94304e55d265db6c80d33c4
SHA256

24e5bcbdd0973b69157d6c93cb5b745324d777305c91277dd71b72f12e5474e7
SHA512

42d80eebc51097b15e7f2b995d88b04562eb4a441b843a7a4a94bd710354aa7b81abbdeeb319f907aa2af4b56e0940025c5e19b9c0ab44707ef05a7b59ebe979
SSDEEP

96:LTWgDK23B+6q+KXMIbD8j8JMnanI4wEz7yMhtjv9cQ87IK4KoSE:LTO23Ift8j8CnanbyMrj6Q87Iv

Score

1^/10

Malware Config

Signatures

Files

5004b486c32f5a7bfab40d1154d8a19b
.dll windows:4 windows x86 arch:x86

dfa7af1bb543cc6ba2271b2d75a94587

Code Sign

30:0e:65:f3:90:ef:d3:48:a8:5e:b2:ff:fc:e7:83:cf
Certificate

Issuer

CN=Signate,OU=Signate,O=Signate,L=Astella,C=CA,1.2.840.113549.1.9.1=#0c1061646d696e40617374656c6c612e6361

Not Before

22/06/2012, 00:00

Not After

21/06/2013, 23:59

Subject

CN=Signate,OU=Signate,O=Signate,L=Astella,C=CA,1.2.840.113549.1.9.1=#0c1061646d696e40617374656c6c612e6361

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey

kernel32

GetModuleFileNameA
GetModuleHandleA
Sleep
lstrcmpiA
lstrlenA

shlwapi

SHCopyKeyW

user32

UnhookWindowsHookEx
CallNextHookEx

Exports

Exports

AdlerGear
CloseGuard
SetGuard

Sections

.text
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 509B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rado2
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

koilt
Size: 512B - Virtual size: 171B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dfa7af1bb543cc6ba2271b2d75a94587

Code Sign

30:0e:65:f3:90:ef:d3:48:a8:5e:b2:ff:fc:e7:83:cfCertificate

Extended Key Usages

Key Usages

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

advapi32

kernel32

shlwapi

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 934B

.rdata Size: 512B - Virtual size: 509B

.data Size: - Virtual size: 1KB

rado2 Size: 512B - Virtual size: 16B

koilt Size: 512B - Virtual size: 171B

.reloc Size: 512B - Virtual size: 144B

30:0e:65:f3:90:ef:d3:48:a8:5e:b2:ff:fc:e7:83:cf
Certificate

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

.text
Size: 1024B - Virtual size: 934B

.rdata
Size: 512B - Virtual size: 509B

.data
Size: - Virtual size: 1KB

rado2
Size: 512B - Virtual size: 16B

koilt
Size: 512B - Virtual size: 171B

.reloc
Size: 512B - Virtual size: 144B