532bd61f08b98d5b52c637553bf9424c

Sharing

Copy URL Twitter E-mail

General

Target

532bd61f08b98d5b52c637553bf9424c
Size

1.0MB
MD5

532bd61f08b98d5b52c637553bf9424c
SHA1

e76ffe63acf5e73fe7c49af796368baefee06888
SHA256

09ab63201401e825a2f4f91c229fc95faee7ac3e3cd1bcdd445515609a3d546d
SHA512

d0164184e77aca855f8799fc4cbfc34137026559530b06f3fe657d9d2892cff9c12ae9df31fe72a122b0010fc9efff465b25ae5512a557c5454760497ef90ff1
SSDEEP

24576:Kz8E0TYGiC/LbpeLLHj6OxUbRZd+DgeAE4Tm:K30TY3CTbpe/e6KZYNAv6

Score

1^/10

Malware Config

Signatures

Files

532bd61f08b98d5b52c637553bf9424c
.exe windows:5 windows x86 arch:x86

6b4d95b2218dc4004fbef60dd65b53ac

Code Sign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2009, 11:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

13/04/2019, 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21/12/2009, 09:32

Not After

22/12/2020, 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

11:21:8c:d7:b9:26:3b:ad:98:b3:f3:bd:78:af:bd:c7:73:e5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

10/08/2011, 12:21

Not After

10/08/2014, 12:21

Subject

CN=TechPowerUp Ltd,O=TechPowerUp Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0b:7f:6b:00:00:00:00:00:19
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:00

Not After

23/05/2016, 17:10

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:a0:bf:fe:5e:ec:c1:32:70:2b:a4:e0:81:6b:44:a0:02:10:94:c0
Signer

Actual PE Digest

3f:a0:bf:fe:5e:ec:c1:32:70:2b:a4:e0:81:6b:44:a0:02:10:94:c0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

wininet

InternetWriteFile

user32

GetKeyboardLayout

gdi32

GetLayout

msimg32

TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter

advapi32

ChangeServiceConfigW

shell32

DragFinish

comctl32

_TrackMouseEvent

shlwapi

PathFileExistsW

ole32

CoTaskMemFree

oleaut32

VarBstrFromDate

ws2_32

inet_addr

setupapi

SetupDiDestroyDeviceInfoList

winmm

timeBeginPeriod

version

GetFileVersionInfoW

oleacc

CreateStdAccessibleObject

imm32

ImmReleaseContext

Sections

.text
Size: 985KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6b4d95b2218dc4004fbef60dd65b53ac

Code Sign

04:00:00:00:00:01:20:19:c1:90:66Certificate

Key Usages

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

01:00:00:00:00:01:25:b0:b4:cc:01Certificate

Extended Key Usages

Key Usages

11:21:8c:d7:b9:26:3b:ad:98:b3:f3:bd:78:af:bd:c7:73:e5Certificate

Extended Key Usages

Key Usages

61:0b:7f:6b:00:00:00:00:00:19Certificate

Key Usages

3f:a0:bf:fe:5e:ec:c1:32:70:2b:a4:e0:81:6b:44:a0:02:10:94:c0Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wininet

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

setupapi

winmm

version

oleacc

imm32

Sections

.text Size: 985KB - Virtual size: 4.1MB

.rsrc Size: 41KB - Virtual size: 44KB

04:00:00:00:00:01:20:19:c1:90:66
Certificate

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

11:21:8c:d7:b9:26:3b:ad:98:b3:f3:bd:78:af:bd:c7:73:e5
Certificate

61:0b:7f:6b:00:00:00:00:00:19
Certificate

3f:a0:bf:fe:5e:ec:c1:32:70:2b:a4:e0:81:6b:44:a0:02:10:94:c0
Signer

.text
Size: 985KB - Virtual size: 4.1MB

.rsrc
Size: 41KB - Virtual size: 44KB