5bc91031b7caf2ff72dbdc76ccd2952d

Sharing

Copy URL Twitter E-mail

General

Target

5bc91031b7caf2ff72dbdc76ccd2952d
Size

639KB
MD5

5bc91031b7caf2ff72dbdc76ccd2952d
SHA1

91fa161599f5cd73dde6bb7fbbc178584b9c4822
SHA256

9e393f16ae68dec1c8e6ae4fded91f6c20d61400e7cb2d5c32c56addbb3b343d
SHA512

7f2c35c884429ae92682227e1ea1145bb7647041fae89d97f4c71e47d1695a84e611efde826ce5ae7af97958b8ca764b1be463fe0be0b13cd1c49aaab683ed3c
SSDEEP

12288:Ox3Sd4B/UA3iEmTQtstIcbv0Md7cbVqKPsmS9i007vJm:OxidifSEZtCI4v0MuR/FS9A8

Score

1^/10

Malware Config

Signatures

Files

5bc91031b7caf2ff72dbdc76ccd2952d
.rar
ripvinyl.exe
.exe windows:4 windows x86 arch:x86

c5f5fffb09afa1d62d72db0dd0d876f3

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ba:f8:7f:94:15:2c:d7:1d:e0:15:ec:a9:50:a6:2d:34
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

02/02/2008, 00:00

Not After

01/02/2011, 23:59

Subject

CN=Wieser Software Ltd,O=Wieser Software Ltd,POSTALCODE=CB5 8SX,STREET=28 Green End,L=Fen Ditton,ST=Cambridge,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetModuleFileNameA
FreeResource
GetFileAttributesA
lstrcpyA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateDirectoryA
GetCurrentThreadId
RaiseException
FlushInstructionCache
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
GetExitCodeProcess
WaitForSingleObject
GetLastError
OpenProcess
CreateProcessA
GlobalAlloc
LocalFree
FormatMessageA
GlobalFree
SetCurrentDirectoryA
EnumResourceNamesA
CloseHandle
SetEvent
MultiByteToWideChar
GetVersionExA
SetUnhandledExceptionFilter
FreeLibrary
GetProcAddress
LoadLibraryA
SetFilePointer
CreateFileA
OutputDebugStringA
GetModuleHandleA
VirtualQuery
IsBadWritePtr
GetCurrentThread
WriteFile
CreateEventA
DeleteFileA
lstrcatA
GetWindowsDirectoryA
InterlockedDecrement
GetTempPathA
lstrcmpA
GetSystemDirectoryA
InitializeCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TlsFree
TlsSetValue
SetLastError
TlsAlloc
TlsGetValue
IsValidCodePage
LocalAlloc
InterlockedExchange
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetACP
InterlockedIncrement
GetStdHandle
ExitProcess
Sleep
HeapSize
HeapCreate
HeapDestroy
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
HeapReAlloc
ExitThread
CreateThread
GetCommandLineA
GetStartupInfoA
GetCPInfo

user32

wsprintfA
SetTimer
SetWindowTextA
EndDialog
GetDlgItemTextA
SetWindowLongA
DialogBoxParamA
GetClientRect
CharNextA
EnableWindow
SetFocus
UnregisterClassA
GetActiveWindow
MessageBoxA
wvsprintfA
MessageBeep
GetWindowLongA
SystemParametersInfoA
GetWindow
MapWindowPoints
GetParent
SendDlgItemMessageA
KillTimer
UpdateWindow
SetWindowPos
PostMessageA
GetDlgItem
LoadIconA
LoadImageA
SendMessageA
GetWindowRect

ole32

CoInitialize
CoUninitialize

shell32

ShellExecuteA

oleaut32

SysFreeString
VariantClear
SysAllocString

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
HttpQueryInfoA

rpcrt4

UuidFromStringA

wintrust

WinVerifyTrust

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

c5f5fffb09afa1d62d72db0dd0d876f3

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

ba:f8:7f:94:15:2c:d7:1d:e0:15:ec:a9:50:a6:2d:34Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

ole32

shell32

oleaut32

wininet

rpcrt4

wintrust

Sections

.text Size: 113KB - Virtual size: 112KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 574KB - Virtual size: 574KB

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

ba:f8:7f:94:15:2c:d7:1d:e0:15:ec:a9:50:a6:2d:34
Certificate

.text
Size: 113KB - Virtual size: 112KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 574KB - Virtual size: 574KB