General

Malware Config

Signatures

Files

• 8c6c1b198d895aacf4ccea121fbde47c

  .exe windows:5 windows x86 arch:x86

  4f1132f5f49b10638357e13aadd56a63

  
  

  Code Sign

  46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83

  Certificate

  Issuer

  CN=222222222

  Not Before

  13-02-2012 04:39

  Not After

  31-12-2039 23:59

  Subject

  CN=222222222

  Extended Key Usages

  ExtKeyUsageCodeSigning

  cd:59:cb:37:0d:17:11:48:c2:be:63:48:c3:ad:a3:97:0c:6f:e6:28

  Signer

  Actual PE Digest

  cd:59:cb:37:0d:17:11:48:c2:be:63:48:c3:ad:a3:97:0c:6f:e6:28

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  LoadLibraryA

  GetProcAddress

  GetSystemInfo

  VirtualAlloc

  GetWindowsDirectoryW

  user32

  ActivateKeyboardLayout

  AllowSetForegroundWindow

  AppendMenuW

  BlockInput

  BringWindowToTop

  CallMsgFilter

  CallMsgFilterW

  CallWindowProcW

  CharLowerA

  CharToOemBuffW

  CharUpperBuffA

  CheckMenuItem

  ChildWindowFromPoint

  ChildWindowFromPointEx

  CloseWindow

  CloseWindowStation

  CopyAcceleratorTableW

  CountClipboardFormats

  CreateAcceleratorTableW

  CreateDesktopA

  CreateDialogIndirectParamW

  CreateDialogParamW

  CreateIcon

  CreateIconIndirect

  CreateMDIWindowW

  CreateWindowExA

  DdeConnect

  DdeFreeStringHandle

  DdeImpersonateClient

  DdeKeepStringHandle

  DdeNameService

  DdeQueryStringW

  DdeSetQualityOfService

  DefFrameProcW

  DeferWindowPos

  DeregisterShellHookWindow

  DestroyCursor

  DestroyWindow

  DlgDirSelectComboBoxExW

  DlgDirSelectExA

  DrawCaption

  DrawEdge

  DrawFrameControl

  DrawStateW

  DrawTextA

  DrawTextExA

  EndTask

  EnumClipboardFormats

  EnumDesktopsW

  EnumDisplayDevicesW

  EnumDisplayMonitors

  EnumDisplaySettingsA

  GetAncestor

  GetClassInfoExA

  GetClassLongA

  GetClassLongW

  GetClipboardOwner

  GetComboBoxInfo

  GetCursor

  GetDlgItem

  GetGUIThreadInfo

  GetKeyNameTextA

  GetKeyboardType

  GetMenuInfo

  GetMenuItemInfoA

  GetMenuItemRect

  GetMessageExtraInfo

  GetMessageW

  GetMonitorInfoA

  GetMouseMovePointsEx

  GetNextDlgGroupItem

  GetSubMenu

  GetTitleBarInfo

  GetWindowDC

  GetWindowTextLengthW

  HideCaret

  IMPGetIMEA

  IMPQueryIMEA

  IMPQueryIMEW

  IsChild

  IsDialogMessageA

  IsIconic

  KillTimer

  LoadAcceleratorsA

  LoadBitmapW

  LoadIconW

  LoadKeyboardLayoutA

  LoadStringA

  LockWorkStation

  MessageBoxA

  MessageBoxIndirectA

  MessageBoxIndirectW

  MessageBoxW

  ModifyMenuA

  ModifyMenuW

  MonitorFromPoint

  MonitorFromWindow

  MsgWaitForMultipleObjectsEx

  NotifyWinEvent

  OemKeyScan

  OffsetRect

  OpenDesktopA

  OpenIcon

  PaintDesktop

  PtInRect

  RegisterClassA

  ReleaseDC

  ReplyMessage

  SendInput

  SendNotifyMessageW

  SetCapture

  SetCaretBlinkTime

  SetClassLongW

  SetDebugErrorLevel

  SetMenu

  SetMenuItemInfoW

  SetPropW

  SetSystemCursor

  SetUserObjectInformationW

  SetUserObjectSecurity

  SetWindowTextW

  ShowCursor

  ShowOwnedPopups

  SystemParametersInfoA

  TrackPopupMenu

  TranslateMDISysAccel

  TranslateMessage

  UnhookWinEvent

  UnregisterClassA

  keybd_event

  mouse_event

  wvsprintfW

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 516B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text7

  Size: 1024B - Virtual size: 1000B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text5

  Size: 171KB - Virtual size: 171KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text6

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ