6fe70f8f4ea1c8acc664fb723ba383e4

Sharing

Copy URL Twitter E-mail

General

Target

6fe70f8f4ea1c8acc664fb723ba383e4
Size

75KB
MD5

6fe70f8f4ea1c8acc664fb723ba383e4
SHA1

265bc5d44ffb81ac1023ff6c5c292ed5a6b6ae7c
SHA256

e941a9df6a7178687b3b8c49ebdcd513f34d6b48b621248ebc0a747722560478
SHA512

a16f539ac69f80c7efe75de929b35fc28467ae6115452b4fc1d0ea3ac5caa7f322fdea7371634f5e20e3465c86fd202bccb0389d23d484fea62d3d5cb3207ad3
SSDEEP

1536:79XY9s0/Cnkw4qKxJVPpQCSIDQvkyeZkdfobq:79oKkbtpDS0IkyeZkdwb

Score

1^/10

Malware Config

Signatures

Files

6fe70f8f4ea1c8acc664fb723ba383e4
.exe windows:5 windows x86 arch:x86

38048b0cb9be073b4a03e8f744642a97

Code Sign

73:c2:e8:4a:e6:53:2c:94:4e:85:92:3a:67:87:27:6a
Certificate

Issuer

CN=evtwetvbqwe45vb2

Not Before

01/03/2012, 08:06

Not After

31/12/2039, 23:59

Subject

CN=evtwetvbqwe45vb2

Extended Key Usages

ExtKeyUsageCodeSigning

5e:b7:8e:59:ba:ef:06:01:ec:6d:6f:61:9f:a2:69:28:99:bd:c0:6e
Signer

Actual PE Digest

5e:b7:8e:59:ba:ef:06:01:ec:6d:6f:61:9f:a2:69:28:99:bd:c0:6e

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetProcAddress
LoadLibraryA
InterlockedCompareExchange

user32

DdeEnableCallback
DdeInitializeA
DefWindowProcA
DeleteMenu
DestroyMenu
DialogBoxIndirectParamA
DlgDirListW
DrawTextExA
EndDeferWindowPos
EnumDesktopsA
EnumDisplaySettingsW
EnumPropsExA
EnumPropsExW
EnumWindowStationsA
FreeDDElParam
GetAltTabInfo
GetClassInfoExA
GetClassInfoExW
GetClassWord
GetDCEx
GetDesktopWindow
GetDlgItemInt
GetIconInfo
GetMenuStringA
GetMessageExtraInfo
GetScrollInfo
GetTabbedTextExtentA
GetUserObjectInformationA
GetWindow
InSendMessageEx
InternalGetWindowText
InvalidateRect
InvertRect
IsCharAlphaNumericA
IsDialogMessage
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadImageW
LoadMenuIndirectW
MenuItemFromPoint
MessageBoxIndirectA
MsgWaitForMultipleObjectsEx
OpenWindowStationW
PostQuitMessage
PtInRect
RegisterDeviceNotificationA
RemovePropA
RemovePropW
SendInput
SendNotifyMessageA
SetCapture
SetClipboardViewer
SetLastErrorEx
SetMessageExtraInfo
SetWindowContextHelpId
SetWindowLongA
SetWindowWord
SetWindowsHookExW
SubtractRect
ToAscii
TranslateMDISysAccel
UnhookWindowsHook
UnionRect
UnregisterClassW
VkKeyScanA
WinHelpA
WindowFromPoint
wvsprintfA
DdeCmpStringHandles
CreateIconIndirect
CreateIcon
CreateDialogParamW
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyAcceleratorTableW
CloseWindowStation
CheckRadioButton
CheckMenuItem
CharUpperBuffW
CharLowerBuffW
CharLowerBuffA
CharLowerA
ChangeMenuW
ChangeDisplaySettingsA
CallMsgFilterA
BlockInput
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
ChooseColorA

ole32

CLIPFORMAT_UserSize
CLSIDFromString
CoAddRefServerProcess
CoCancelCall
CoCreateGuid
CoDeactivateObject
CoFileTimeToDosDateTime
CoFreeLibrary
CoFreeUnusedLibraries
CoGetClassObject
CoGetStdMarshalEx
CoInitializeSecurity
CoMarshalInterThreadInterfaceInStream
CoQueryAuthenticationServices
CoQueryClientBlanket
CoReactivateObject
CoRegisterPSClsid
CoRegisterSurrogate
CoRegisterSurrogateEx
CoReleaseMarshalData
CoRevertToSelf
CoRevokeClassObject
CoSetProxyBlanket
CoSuspendClassObjects
CoTaskMemAlloc
CoTaskMemRealloc
CoTreatAsClass
CreateBindCtx
CreateOleAdviseHolder
DllGetClassObjectWOW
DoDragDrop
FreePropVariantArray
GetClassFile
GetConvertStg
GetHookInterface
HACCEL_UserMarshal
HACCEL_UserUnmarshal
HBITMAP_UserMarshal
HBITMAP_UserUnmarshal
HBRUSH_UserFree
HBRUSH_UserMarshal
HBRUSH_UserSize
HDC_UserSize
HENHMETAFILE_UserFree
HENHMETAFILE_UserMarshal
HGLOBAL_UserMarshal
HMENU_UserUnmarshal
HMETAFILEPICT_UserMarshal
HMETAFILE_UserFree
HPALETTE_UserMarshal
HWND_UserSize
IsAccelerator
OleConvertIStorageToOLESTREAMEx
OleCreateDefaultHandler
OleCreateFromFileEx
OleCreateLinkEx
OleCreateLinkFromDataEx
OleGetAutoConvert
OleGetIconOfFile
OleQueryCreateFromData
OleRun
OleSetClipboard
OleUninitialize
ProgIDFromCLSID
PropStgNameToFmtId
ReadStringStream
SNB_UserSize
STGMEDIUM_UserFree
SetDocumentBitStg
StgCreatePropStg
StgCreateStorageEx
StgOpenAsyncDocfileOnIFillLockBytes
StgOpenStorageEx
StgSetTimes
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserSize
WdtpInterfacePointer_UserUnmarshal
WriteClassStm
WriteOleStg
WriteStringStream

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38048b0cb9be073b4a03e8f744642a97

Code Sign

73:c2:e8:4a:e6:53:2c:94:4e:85:92:3a:67:87:27:6aCertificate

Extended Key Usages

5e:b7:8e:59:ba:ef:06:01:ec:6d:6f:61:9f:a2:69:28:99:bd:c0:6eSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 616B

.text Size: 61KB - Virtual size: 61KB

.reloc Size: 2KB - Virtual size: 1KB

73:c2:e8:4a:e6:53:2c:94:4e:85:92:3a:67:87:27:6a
Certificate

5e:b7:8e:59:ba:ef:06:01:ec:6d:6f:61:9f:a2:69:28:99:bd:c0:6e
Signer

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 616B

.text
Size: 61KB - Virtual size: 61KB

.reloc
Size: 2KB - Virtual size: 1KB