SecuriteInfo[.]com[.]PUA[.]Keygen[.]31310[.]22999[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.PUA.Keygen.31310.22999.dll
Size

719KB
MD5

77349dc793e89422a73d14fec809804b
SHA1

afe96e61102fa17d080b137e64ffd95f199fc73a
SHA256

c160eba528d0ace85b1a18e8ea4cff2e7e107524c5fc6fd7eb583e228a08105b
SHA512

9c0b584e7e0ebd22189274ffa337f5a6fcd9cf488891d5f2bdbf14715eec3aa1beb8c8b5b8b41ac9234066ca1f7fe3ef642c93dc0e855adf0d3580a792a195a2
SSDEEP

12288:WEJSEu8qHDYAfWqFeEu3jru+3zULzNyJ6fS0xJSCYW8x2klw:vJ3u8G3NyJ6fS0xJVYr2kO

Score

1^/10

Malware Config

Signatures

Files

SecuriteInfo.com.PUA.Keygen.31310.22999.dll
.dll windows:4 windows x86 arch:x86

af1391b8e78ec9758c2eb6cb8a006ea2

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:25:a4:d2:c1:f7:f7:f9:e4:0f:ab:2c:34:ec:be:2c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

05/09/2012, 00:00

Not After

04/11/2013, 23:59

Subject

CN=KNET Co.\, Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=KNET Co.\, Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f0:19:8b:e5:a3:92:1f:2b:bf:b5:ae:c5:de:4f:42:0f:75:5d:55:d7
Signer

Actual PE Digest

f0:19:8b:e5:a3:92:1f:2b:bf:b5:ae:c5:de:4f:42:0f:75:5d:55:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\KTrust\output\KNetTrustUI.pdb

Imports

wininet

InternetCrackUrlW
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
HttpQueryInfoW
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetOpenW
InternetCloseHandle
InternetOpenUrlW
InternetReadFile

kernel32

FindClose
FindFirstFileW
GetFileAttributesW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
WritePrivateProfileStringW
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetCommandLineA
GetProcessHeap
RtlUnwind
RaiseException
ExitProcess
VirtualProtect
GetSystemInfo
VirtualQuery
HeapSize
SetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
lstrlenA
GlobalFlags
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetModuleHandleA
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentProcessId
InterlockedDecrement
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
GetThreadLocale
InterlockedIncrement
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
CompareStringW
SetLastError
lstrcmpW
GetModuleHandleW
GetVersionExA
Sleep
TerminateThread
lstrcpynA
WaitForSingleObject
lstrlenW
GetSystemDefaultLangID
LoadLibraryA
GetModuleFileNameW
GetLastError
GetPrivateProfileStringW
FreeLibrary
ExpandEnvironmentStringsW
DeleteCriticalSection
GetProcAddress
WriteFile
SetFilePointer
ReadFile
SizeofResource
LoadResource
GetCurrentThreadId
LockResource
FindResourceW
CreateThread
GetPrivateProfileStringA
GetTickCount
CreateFileMappingW
WritePrivateProfileStringA
MultiByteToWideChar
GetWindowsDirectoryA
GetFileSize
CreateFileA
DeleteFileW
ExpandEnvironmentStringsA
UnmapViewOfFile
MapViewOfFile
WideCharToMultiByte
CreateFileW
GetModuleFileNameA
GetFileTime
SetFileAttributesW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
VirtualAlloc

user32

MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetWindowThreadProcessId
GetMessageW
TranslateMessage
ValidateRect
GetDesktopWindow
GetActiveWindow
UnregisterClassA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
SetWindowTextW
IsDialogMessageW
CharNextW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetNextDlgGroupItem
RemovePropW
GetFocus
SetFocus
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetSysColor
DrawTextW
InflateRect
BringWindowToTop
LoadBitmapW
CharUpperW
SetWindowPos
GetWindowLongW
ReleaseCapture
SetCapture
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
GetSysColorBrush
DestroyMenu
UnregisterClassW
EndPaint
BeginPaint
GetPropW
GetWindowDC
PostMessageW
GetParent
UpdateWindow
GetCursorPos
CallWindowProcW
SetTimer
LoadCursorW
DestroyWindow
CreateWindowExW
KillTimer
MoveWindow
ShowWindow
IsWindow
GetWindowRect
SetWindowLongW
FindWindowExW
SendMessageW
GetClientRect
PtInRect
GetClassNameW
SetCursor
ReleaseDC
GetDC
GetWindowTextW
GetSystemMetrics
IsWindowVisible
InvalidateRect
SetClassLongW
EnableWindow
CreateDialogIndirectParamW

gdi32

ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
TextOutW
CreateRectRgnIndirect
GetMapMode
GetRgnBox
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateDIBSection
DeleteObject
SelectObject
GetObjectW
CreateCompatibleDC
BitBlt
MoveToEx
LineTo
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetTextColor
GetBkColor
GetDeviceCaps
GetStockObject
SetBkColor
SetTextColor
GetClipBox
CreatePen
CreateFontW
DeleteDC

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
UrlUnescapeW
StrStrIW
PathRemoveFileSpecW
PathAppendW
UrlApplySchemeW
PathRemoveFileSpecA
PathFileExistsW
PathFileExistsA
PathAppendA
PathStripToRootW
SHGetValueW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleIsCurrentClipboard
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
OleFlushClipboard
CoRevokeClassObject

oleaut32

SafeArrayAccessData
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayGetLBound
SysAllocString
SafeArrayGetUBound
SysStringLen
SysFreeString
SafeArrayCreateVector

ws2_32

inet_ntoa
gethostbyname
setsockopt
closesocket
send
connect
WSAStartup
inet_addr
WSAGetLastError
socket
htons
recv
WSACleanup
WSASetLastError

Exports

Exports

KNetTrustUI_Attach
KNetTrustUI_CheckA
KNetTrustUI_DownloadA
KNetTrustUI_Notify

Sections

.text
Size: 364KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af1391b8e78ec9758c2eb6cb8a006ea2

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4aCertificate

Key Usages

41:25:a4:d2:c1:f7:f7:f9:e4:0f:ab:2c:34:ec:be:2cCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

f0:19:8b:e5:a3:92:1f:2b:bf:b5:ae:c5:de:4f:42:0f:75:5d:55:d7Signer

Headers

File Characteristics

PDB Paths

Imports

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

Exports

Exports

Sections

.text Size: 364KB - Virtual size: 360KB

.rdata Size: 236KB - Virtual size: 233KB

.data Size: 16KB - Virtual size: 44KB

.rsrc Size: 52KB - Virtual size: 49KB

.reloc Size: 40KB - Virtual size: 36KB

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

41:25:a4:d2:c1:f7:f7:f9:e4:0f:ab:2c:34:ec:be:2c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

f0:19:8b:e5:a3:92:1f:2b:bf:b5:ae:c5:de:4f:42:0f:75:5d:55:d7
Signer

.text
Size: 364KB - Virtual size: 360KB

.rdata
Size: 236KB - Virtual size: 233KB

.data
Size: 16KB - Virtual size: 44KB

.rsrc
Size: 52KB - Virtual size: 49KB

.reloc
Size: 40KB - Virtual size: 36KB