General

Malware Config

Signatures

Files

• 57fb35cf44737a4c012ffc72d301dc69

  .exe windows:4 windows x86 arch:x86

  648b44981f60b2093bfe88c1a8b2b5b6

  
  

  Code Sign

  6f:60:99:65:e4:ed:28:ba:46:53:39:83:a2:20:29:74

  Certificate

  Issuer

  CN=Root Agency

  Not Before

  16-10-2011 12:24

  Not After

  31-12-2039 23:59

  Subject

  CN=Joe's-Software-Emporium

  41:3a:53:c2:4a:fb:8d:89:ba:32:bd:46:a9:c4:dd:11:c3:7b:c6:e9

  Signer

  Actual PE Digest

  41:3a:53:c2:4a:fb:8d:89:ba:32:bd:46:a9:c4:dd:11:c3:7b:c6:e9

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  opengl32

  glEvalCoord1f

  glColor3d

  glFogf

  glCopyTexImage2D

  glColor4f

  glEvalMesh1

  glTexEnvf

  glIndexfv

  glColor3b

  glMapGrid1d

  glAccum

  glGetDoublev

  glMapGrid2d

  glIndexf

  glClipPlane

  glFogi

  glLoadIdentity

  glMapGrid2f

  glColor4b

  glScaled

  glGetFloatv

  glTranslatef

  glIndexsv

  glBindTexture

  glColor3s

  glIndexs

  glEvalCoord2d

  glCopyPixels

  glColor4d

  glRotatef

  glDrawPixels

  glScissor

  glEvalPoint2

  glCopyTexSubImage2D

  glColorMaterial

  glPushClientAttrib

  glColorMask

  glVertex4sv

  glVertex2f

  glGetString

  glTranslated

  glAlphaFunc

  glEvalCoord2f

  glIndexi

  glEvalPoint1

  glVertex2s

  glReadBuffer

  glIndexd

  glGetIntegerv

  glCopyTexImage1D

  glIndexdv

  glTexGeni

  glScalef

  glIndexiv

  glCallLists

  glColor4s

  glColor3f

  glNewList

  glColor4fv

  glNormal3s

  glGetError

  glColor3i

  glEvalCoord1d

  glColor4i

  glMapGrid1f

  glViewport

  glTexGend

  glColor3bv

  glTexImage2D

  glMaterialf

  glCallList

  glTexSubImage2D

  glTexEnvi

  glColor4bv

  glGetPixelMapuiv

  glNormal3d

  glu32

  gluNurbsCurve

  gluEndTrim

  gluPartialDisk

  gluPickMatrix

  gluQuadricOrientation

  gluGetString

  gluNewNurbsRenderer

  gluDisk

  gluEndSurface

  gluSphere

  gluBuild1DMipmaps

  gluNewTess

  gluQuadricDrawStyle

  gluTessProperty

  gluDeleteTess

  gluNewQuadric

  gluOrtho2D

  gluDeleteNurbsRenderer

  gluEndCurve

  gluDeleteQuadric

  gluTessBeginContour

  gluBeginSurface

  gluScaleImage

  gluQuadricNormals

  gluQuadricCallback

  gluNurbsSurface

  gluCylinder

  gluLoadSamplingMatrices

  gluBuild2DMipmaps

  ole32

  CreateDataAdviseHolder

  CoTaskMemAlloc

  CoInitialize

  CoUninitialize

  BindMoniker

  CoUnmarshalHresult

  CoReleaseServerProcess

  OleSetAutoConvert

  CreatePointerMoniker

  CreateAntiMoniker

  OleGetIconOfClass

  CoDisconnectObject

  CoGetStdMarshalEx

  CoAddRefServerProcess

  CoRevokeClassObject

  CoResumeClassObjects

  CoGetCurrentProcess

  ProgIDFromCLSID

  CoGetTreatAsClass

  CoRegisterMallocSpy

  CoRevokeMallocSpy

  CreateFileMoniker

  CoTaskMemFree

  OleDoAutoConvert

  oleaut32

  OleIconToCursor

  comctl32

  InitCommonControlsEx

  DrawStatusTextW

  ord17

  PropertySheetW

  ord13

  ord3

  CreateToolbarEx

  CreateStatusWindowW

  ord6

  InitializeFlatSB

  CreatePropertySheetPageW

  ord14

  PropertySheetA

  ord5

  ord4

  ord2

  shlwapi

  StrToIntA

  StrRChrW

  StrChrIW

  StrCSpnA

  StrRChrIW

  StrChrA

  StrChrW

  msvcrt

  _adjust_fdiv

  _exit

  _XcptFilter

  exit

  _acmdln

  __getmainargs

  _initterm

  __setusermatherr

  __p__commode

  __p__fmode

  __set_app_type

  _except_handler3

  _controlfp

  kernel32

  GetProcAddress

  GetModuleHandleA

  ExitProcess

  GetStartupInfoA

  VirtualAlloc

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 90KB - Virtual size: 157KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE