53f52d8a70a858e326407cfb70da9948[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

53f52d8a70a858e326407cfb70da9948.exe
Size

119KB
MD5

53f52d8a70a858e326407cfb70da9948
SHA1

9a5b233aa644fa7b5844f9dc9e952f26844c5501
SHA256

cfb30a5b606a52bcaa2f47815b5596ebebf7c1d7f141c7410c049d60576f53a5
SHA512

3ab51b8bd636a7364ee69edc82e2276a78ab17f0ded40e01f923ab2adacd58f56e654f089e2720371c4810604181a028a67e35362d6647fa0d346d110bc1b500
SSDEEP

1536:IlqcrERMjrFMfM4Iht/5Ag9+8Dc6L5xSjBQQfXNaPm5qisuAqaDSMqbrGBGXer:mBnP/5Ao+AdvS9XNaPmQuAqojSer

Score

1^/10

Malware Config

Signatures

Files

53f52d8a70a858e326407cfb70da9948.exe
.exe windows:4 windows x86 arch:x86

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

04:b4:64:7f:58:6c:a9:50:b2:7d:28:e6:d5:01:dc:6e
Certificate

Issuer

CN=SyvZ

Not Before

24/05/2012, 05:06

Not After

31/12/2039, 23:59

Subject

CN=SyvZ

Extended Key Usages

ExtKeyUsageCodeSigning

81:87:49:8a:56:b6:8c:8c:a6:16:20:fd:7c:ad:86:46:44:ac:c7:04
Signer

Actual PE Digest

81:87:49:8a:56:b6:8c:8c:a6:16:20:fd:7c:ad:86:46:44:ac:c7:04

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx
WriteFile
GetModuleHandleW
GetProcAddress

advapi32

RegCloseKey

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

04:b4:64:7f:58:6c:a9:50:b2:7d:28:e6:d5:01:dc:6eCertificate

Extended Key Usages

81:87:49:8a:56:b6:8c:8c:a6:16:20:fd:7c:ad:86:46:44:ac:c7:04Signer

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 97KB - Virtual size: 97KB

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 176B

04:b4:64:7f:58:6c:a9:50:b2:7d:28:e6:d5:01:dc:6e
Certificate

81:87:49:8a:56:b6:8c:8c:a6:16:20:fd:7c:ad:86:46:44:ac:c7:04
Signer

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 97KB - Virtual size: 97KB

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 176B