7dccfddeeb6dc22c6160eec68c85f1e6

Sharing

Copy URL

Twitter E-mail

General

Target

7dccfddeeb6dc22c6160eec68c85f1e6
Size

338KB
MD5

7dccfddeeb6dc22c6160eec68c85f1e6
SHA1

b717767987ec884990f009cb0e2a336444339ce3
SHA256

23e94b30f05924c29fc1a06ee9efe4b866684760fb3e58db23e5e0d744197e64
SHA512

3da499ba242d58d43530545e75e662ad984db42f0b0b69ad9c0ab7cce2ecf517b7df953c2e58d7b4a5873d7e0ace021bcd0768e5520c7ff76a28e3d3984090f6
SSDEEP

6144:/mwX70wXvKO5fgYONYKAidSONMjvJG/nZ6LKx0OA6BThZ4wY:/mO4wf7fgYOWiwOq0PZ6IbrGwY

Score

1^/10

Malware Config

Signatures

Files

7dccfddeeb6dc22c6160eec68c85f1e6
.exe windows:4 windows x86 arch:x86

bdf5bdb3c14b5fa675e7903de83c527c

Code Sign

53:42:75:56:08:ea:16:7e:b2:b4:0b:33:1e:52:b4:e6
Certificate

Issuer

CN=dnfbdegochj

Not Before

02/07/2012, 07:26

Not After

31/12/2039, 23:59

Subject

CN=Logety

92:f8:ae:1b:79:4f:6a:ac:64:56:fe:97:21:32:4f:77:eb:ca:1a:54
Signer

Actual PE Digest

92:f8:ae:1b:79:4f:6a:ac:64:56:fe:97:21:32:4f:77:eb:ca:1a:54

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
SendDlgItemMessageA
OpenIcon
EnumChildWindows
SetSysColors
AnyPopup
MessageBoxA
DialogBoxParamA
MessageBoxIndirectA
ArrangeIconicWindows
ShowWindow
SetForegroundWindow

advapi32

PrivilegeCheck
NotifyChangeEventLog
RegCloseKey
CloseEventLog
RegQueryValueExA
RegSetValueA
RegConnectRegistryA
ReadEventLogW

kernel32

GetLastError
VirtualAlloc
GetProcAddress
GetPrivateProfileIntA
LocalReAlloc
GetACP
LocalFree
TlsSetValue
LocalLock
GetModuleHandleA
LocalHandle
GetStartupInfoA
GetProfileStringA

winspool.drv

DeviceCapabilitiesA
AddPrinterConnectionA
AddFormA
AddPrinterDriverW
DeletePrinterDriverExW
AddPrinterW
AddJobA
EnumJobsW
AddPrintProcessorA
DeletePrinter
GetPrinterDriverA
GetJobA
AdvancedDocumentPropertiesA
DeletePrinterDriverW
AddPrinterDriverExW

msvcrt

_except_handler3
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_exit
_controlfp

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdf5bdb3c14b5fa675e7903de83c527c

Code Sign

53:42:75:56:08:ea:16:7e:b2:b4:0b:33:1e:52:b4:e6Certificate

92:f8:ae:1b:79:4f:6a:ac:64:56:fe:97:21:32:4f:77:eb:ca:1a:54Signer

Headers

File Characteristics

Imports

user32

advapi32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 313KB - Virtual size: 313KB

.data Size: 512B - Virtual size: 101KB

.rsrc Size: 7KB - Virtual size: 7KB

53:42:75:56:08:ea:16:7e:b2:b4:0b:33:1e:52:b4:e6
Certificate

92:f8:ae:1b:79:4f:6a:ac:64:56:fe:97:21:32:4f:77:eb:ca:1a:54
Signer

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 313KB - Virtual size: 313KB

.data
Size: 512B - Virtual size: 101KB

.rsrc
Size: 7KB - Virtual size: 7KB