58999b99ced0b0712c6739e498b01658

Sharing

Copy URL Twitter E-mail

General

Target

58999b99ced0b0712c6739e498b01658
Size

434KB
MD5

58999b99ced0b0712c6739e498b01658
SHA1

9fa21e89c7e5d5700ca708ba5812388a311014bd
SHA256

e7dd45bf1bdee087d253b9bf0eba9e8870faeb540783b2ddf6692fc2cf6768a1
SHA512

501c3bbd82650ed5e61ee08437b369e3f72af3c5e6e4fe8290ccc3824807495ccfad33ceb433ce80e004b7d9ba4432d618966e43ebdb70f5c0d1a7f9aea77ac5
SSDEEP

12288:F4Uo9pOLpahhB4Rd71WTRNa8xf/MEe6B0/8Kjxq/yxEBIttKDBU+1L6MqTP:FOAp+TggVoqfDeMKlq/AYItkX1WMWP

Score

1^/10

Malware Config

Signatures

Files

58999b99ced0b0712c6739e498b01658
.exe windows:4 windows x86 arch:x86

7409de92611b94598b53a6452084fa4e

Code Sign

2b:46:26:fb:96:fe:27:9e:4d:ff:c8:61:cb:19:a1:08
Certificate

Issuer

CN=lmbmpiolega

Not Before

06/12/2011, 20:14

Not After

13/03/2024, 22:00

Subject

CN=Lodefinu

59:90:df:ed:84:a9:78:40:ed:ba:af:94:4c:9e:88:1d:c5:6f:3c:74
Signer

Actual PE Digest

59:90:df:ed:84:a9:78:40:ed:ba:af:94:4c:9e:88:1d:c5:6f:3c:74

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetParent
CallWindowProcA
GetWindowTextLengthA

ole32

CoCreateInstance
StringFromGUID2
CreateAntiMoniker
StringFromCLSID
CoFreeUnusedLibraries

oleaut32

OleLoadPicture

advapi32

RegEnumKeyExA
DecryptFileA

kernel32

LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetStringTypeA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetStringTypeW
TerminateProcess
CompareStringA
VirtualAllocEx
ResetEvent
GetUserDefaultLangID
HeapLock
GetPrivateProfileStructA
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ykvsz
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7409de92611b94598b53a6452084fa4e

Code Sign

2b:46:26:fb:96:fe:27:9e:4d:ff:c8:61:cb:19:a1:08Certificate

59:90:df:ed:84:a9:78:40:ed:ba:af:94:4c:9e:88:1d:c5:6f:3c:74Signer

Headers

File Characteristics

Imports

user32

ole32

oleaut32

advapi32

kernel32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 119KB - Virtual size: 119KB

.data Size: 4KB - Virtual size: 85KB

ykvsz Size: 283KB - Virtual size: 282KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 3KB - Virtual size: 2KB

2b:46:26:fb:96:fe:27:9e:4d:ff:c8:61:cb:19:a1:08
Certificate

59:90:df:ed:84:a9:78:40:ed:ba:af:94:4c:9e:88:1d:c5:6f:3c:74
Signer

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 119KB - Virtual size: 119KB

.data
Size: 4KB - Virtual size: 85KB

ykvsz
Size: 283KB - Virtual size: 282KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 3KB - Virtual size: 2KB