VirusShare_1f355e1c8506d9648a477c5e47e9c007

Sharing

Copy URL

Twitter E-mail

General

Target

VirusShare_1f355e1c8506d9648a477c5e47e9c007
Size

611KB
MD5

1f355e1c8506d9648a477c5e47e9c007
SHA1

17c8fdae3202f9fc738d893dba6e82970bcf0dd5
SHA256

deac1e1a0d1bafcf87f0a0f2079be8da48535d81c03b99e3a3aff2db46c57033
SHA512

fea58f52e3898a2d90e2d40a81d3253173709c63d4ae711d8b880cbcb796b1d9ff9ce31939d4e3b3ae003d0c6ecf4b74b4ef4c3642f3c80ad261da3a1e4489c3
SSDEEP

12288:ZDgGqGvqHkIIQS2t7mLt56lQSjTulG+wU1XOO1HXHnv3/W:ZDHLIIisLtQG5W

Score

1^/10

Malware Config

Signatures

Files

VirusShare_1f355e1c8506d9648a477c5e47e9c007
.exe windows:5 windows x86 arch:x86

262b62c4b962650081534cf60fcfc05b

Code Sign

28:34:fb:06:f2:0c:e3:ed:97:5a:64:a6:a9:dc:2f:35
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

16/06/2016, 00:00

Not After

16/06/2017, 23:59

Subject

CN=Prof Assist,O=Prof Assist,POSTALCODE=236010,STREET=d. 2 kv. 34\, ul.Vozdushnaya,L=Kaliningrad,ST=Kaliningrad,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6e:a2:85:21:03:84:70:73:7d:99:ef:f0:a2:d8:ff:d6:32:d7:1e:1e
Signer

Actual PE Digest

6e:a2:85:21:03:84:70:73:7d:99:ef:f0:a2:d8:ff:d6:32:d7:1e:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAllocEx
GetDriveTypeA
GetModuleHandleA

user32

DestroyWindow
DialogBoxIndirectParamA
DialogBoxParamA
DispatchMessageA
DrawIconEx
DrawTextA
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EndPaint
FillRect
FindWindowA
FindWindowExA
FlashWindowEx
FrameRect
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetFocus
GetForegroundWindow
GetKeyNameTextA
GetKeyState
GetKeyboardState
GetMenu
GetMessageA
GetParent
GetPropA
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InsertMenuA
InsertMenuItemA
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageA
IsDlgButtonChecked
IsIconic
DestroyMenu
IsWindowVisible
IsZoomed
KillTimer
LoadIconA
LoadImageA
LoadMenuA
MapDialogRect
MapVirtualKeyA
MessageBoxA
MoveWindow
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterHotKey
RegisterWindowMessageA
ReleaseDC
RemovePropA
ScreenToClient
SendDlgItemMessageA
SendMessageA
SendMessageTimeoutA
SetActiveWindow
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenuDefaultItem
SetMenuItemInfoA
SetPropA
SetScrollInfo
SetScrollPos
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowWindow
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterHotKey
UpdateWindow
WaitForInputIdle
wsprintfW
DestroyIcon
DeleteMenu
DefWindowProcA
CreateWindowExA
CreatePopupMenu
CreateDialogParamA
CloseClipboard
ClientToScreen
CheckMenuItem
CheckDlgButton
CallWindowProcA
CallNextHookEx
BeginPaint
AttachThreadInput
AppendMenuA
LoadCursorW
LoadCursorA
IsWindow

gdi32

SetBkMode

comdlg32

GetSaveFileNameA

advapi32

RegOpenKeyW
RegQueryValueExW

shell32

ShellExecuteA
ShellExecuteExA
Shell_NotifyIconA
SHGetMalloc
SHChangeNotify
SHBrowseForFolderA
SHGetPathFromIDListA

ole32

CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree

shlwapi

SHDeleteKeyA
SHDeleteEmptyKeyA

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

262b62c4b962650081534cf60fcfc05b

Code Sign

28:34:fb:06:f2:0c:e3:ed:97:5a:64:a6:a9:dc:2f:35Certificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

6e:a2:85:21:03:84:70:73:7d:99:ef:f0:a2:d8:ff:d6:32:d7:1e:1eSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 459KB - Virtual size: 459KB

.rsrc Size: 32KB - Virtual size: 31KB

28:34:fb:06:f2:0c:e3:ed:97:5a:64:a6:a9:dc:2f:35
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

6e:a2:85:21:03:84:70:73:7d:99:ef:f0:a2:d8:ff:d6:32:d7:1e:1e
Signer

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 459KB - Virtual size: 459KB

.rsrc
Size: 32KB - Virtual size: 31KB