5c0c6cc60f2558fa69cf2a267bd83b5a

Sharing

Copy URL Twitter E-mail

General

Target

5c0c6cc60f2558fa69cf2a267bd83b5a
Size

142KB
MD5

5c0c6cc60f2558fa69cf2a267bd83b5a
SHA1

cf451563ec4090c59c352bc24aab28d02b43cab3
SHA256

58ed80a2ae50be2360541d6eb98ef9f7926f969368293e91a0e1073b3755afd2
SHA512

01fb27364d1fcd978f8230ac369e0221558140de947f649889eba57df4fcf146610aa94827293bed58ab7c2b4317298dbcccfc5235e378a0709e207ad07d9c4b
SSDEEP

3072:QSz6zUXgwanwRhzhuB2wnkqzetJV9av7IcGmt9F:QSz6zUwwnFwnv6HavJ9F

Score

1^/10

Malware Config

Signatures

Files

5c0c6cc60f2558fa69cf2a267bd83b5a
.exe windows:3 windows x86 arch:x86

432c2bed14f73cfd08259cf5f97d9b41

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2c:01:58:55:22:e8:fa:61:13:8a:ef:a4:f6:27:ee:a8
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

02/03/2010, 00:00

Not After

02/03/2011, 23:59

Subject

CN=Comodo Security Solutions\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Comodo Security Solutions\, Inc.,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

db:e5:bc:5e:b8:96:1e:2e:e3:8a:b5:f8:c5:3b:d5:aa:f5:96:15:6f
Signer

Actual PE Digest

db:e5:bc:5e:b8:96:1e:2e:e3:8a:b5:f8:c5:3b:d5:aa:f5:96:15:6f

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetAtomNameW
HeapCreate
GetModuleHandleA
GetModuleHandleW
GetOEMCP
IsBadCodePtr
GetModuleHandleA
GlobalAlloc
EnumCalendarInfoW
GetProcessId
EnumSystemCodePagesA
VirtualAlloc
GetExitCodeProcess

user32

UpdateLayeredWindow
CreateMenu
GetDC
GetMenuItemID
GetDesktopWindow
IsWindowEnabled
mouse_event
GetMenuState
CharPrevW
OffsetRect
GetMenuItemRect
GetDlgItem
LoadCursorW
EnableWindow
DrawTextW
GetTopWindow
RegisterWindowMessageW
CreateDialogIndirectParamW
GetDesktopWindow
EndMenu
IsMenu
AnimateWindow
SetWindowTextW
SetDlgItemInt
AppendMenuA

shlwapi

PathIsUNCW
PathFindExtensionA
PathIsFileSpecA
PathCreateFromUrlA
SHIsLowMemoryMachine
StrFormatKBSizeW
StrPBrkW
PathFindExtensionW
PathSearchAndQualifyA
StrCSpnA
wnsprintfW
PathRemoveBlanksA
PathMatchSpecA
UrlUnescapeA

gdi32

ExcludeClipRect
RemoveFontResourceW
PolyBezier
GetEnhMetaFileA
CreateFontIndirectExW
GetCharABCWidthsA
FillRgn
GetOutlineTextMetricsA
StretchDIBits
CopyMetaFileA
RoundRect
RectVisible
SetAbortProc
EnumFontFamiliesExW
EnumFontsA

advapi32

RegRestoreKeyA
RegCreateKeyExW

shell32

ExtractIconW
StrRChrA
ShellExecuteExW
Shell_NotifyIconA
SHCreateDirectory
SHBrowseForFolder
StrChrA
StrNCmpW
StrRChrW
StrCmpNW

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

432c2bed14f73cfd08259cf5f97d9b41

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

2c:01:58:55:22:e8:fa:61:13:8a:ef:a4:f6:27:ee:a8Certificate

Extended Key Usages

Key Usages

db:e5:bc:5e:b8:96:1e:2e:e3:8a:b5:f8:c5:3b:d5:aa:f5:96:15:6fSigner

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

gdi32

advapi32

shell32

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 113KB - Virtual size: 128KB

.rsrc Size: 9KB - Virtual size: 8KB

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

2c:01:58:55:22:e8:fa:61:13:8a:ef:a4:f6:27:ee:a8
Certificate

db:e5:bc:5e:b8:96:1e:2e:e3:8a:b5:f8:c5:3b:d5:aa:f5:96:15:6f
Signer

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 113KB - Virtual size: 128KB

.rsrc
Size: 9KB - Virtual size: 8KB