7313d06b6ed99628f2c9e8815834730c

Sharing

Copy URL Twitter E-mail

General

Target

7313d06b6ed99628f2c9e8815834730c
Size

79KB
MD5

7313d06b6ed99628f2c9e8815834730c
SHA1

12f88405554b218c7ea7b45562fd574e7bbfc74c
SHA256

1481bfdd3238e628107abe1ed03a1368200edf5969694640c6928e06229aae93
SHA512

55ffcb69862f60ec7c33aafbf2d8d2807b7e4b62f0f1f7fd27cb3bcf5ac727bccfe20710132b2c931a862cc34609e31d95217620561a49bf5a7f033c85d0e675
SSDEEP

768:X8evUX/OmUV/rfsbXHMPc1TpwcKVe09W/otmMwZ+tEm1FrG/Wuc6NKWBXTHL8Ihn:NwVMixozmbMENnc4XrXsWjcdFFtxNu

Score

1^/10

Malware Config

Signatures

Files

7313d06b6ed99628f2c9e8815834730c
.exe windows:5 windows x86 arch:x86

4aeb5fd14abbfd9924fd8017994aeeaa

Code Sign

a1:bb:85:69:95:0c:0b:20:80:a1:1a:0e:2f:61:8b:33
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/03/2013, 00:00

Not After

06/03/2016, 23:59

Subject

CN=Kimahri Software inc.,O=Kimahri Software inc.,POSTALCODE=H3A 1E7,STREET=666 Sherbrooke Rue w,L=Montreal,ST=Quebec,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:fe:95:3c:f9:54:f7:6e:4b:e7:1e:e3:50:09:15:dd:d5:d7:64:7d
Signer

Actual PE Digest

39:fe:95:3c:f9:54:f7:6e:4b:e7:1e:e3:50:09:15:dd:d5:d7:64:7d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

kernel32

GetVersion
GetCurrentProcessId
GetLastError
InitializeCriticalSectionAndSpinCount
LoadResource
SizeofResource
CloseHandle
GetModuleFileNameA
GetModuleHandleA
FindResourceW
FindResourceExW
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32First
Process32Next
AreFileApisANSI
MultiByteToWideChar
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
MoveFileExW
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
GetProcAddress
TlsFree
LockResource
GetModuleHandleW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
HeapSize
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
HeapDestroy
TlsSetValue
GetStartupInfoW

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteExA

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4aeb5fd14abbfd9924fd8017994aeeaa

Code Sign

a1:bb:85:69:95:0c:0b:20:80:a1:1a:0e:2f:61:8b:33Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

39:fe:95:3c:f9:54:f7:6e:4b:e7:1e:e3:50:09:15:dd:d5:d7:64:7dSigner

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

kernel32

advapi32

shell32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 22KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 480B

a1:bb:85:69:95:0c:0b:20:80:a1:1a:0e:2f:61:8b:33
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

39:fe:95:3c:f9:54:f7:6e:4b:e7:1e:e3:50:09:15:dd:d5:d7:64:7d
Signer

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 22KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 480B