8fb3ac3b8cc113ec60a38555d4af2a5f

Sharing

Copy URL

Twitter E-mail

General

Target

8fb3ac3b8cc113ec60a38555d4af2a5f
Size

293KB
MD5

8fb3ac3b8cc113ec60a38555d4af2a5f
SHA1

c18f37bc664a06e2bd8e613a812f4f12576e6a9b
SHA256

62d7f9bc94ef0097ff2416784efc5fb7a2a272f5ea8f309d1abbbd882ebeff68
SHA512

2be118f879d23df023378ba05f37bc04fd6a5e765c5ee5317533506d966b156253f5b255b5232043fbdf64ada677b33c64f0904a9ded6e8855dbc519b44ad33f
SSDEEP

6144:BDcWemNSKKUtjZfszfaWDGVVGlkUiXYguuFjVWwnWTH7hnug:tReK5ZMDmdXY6V+rQg

Score

1^/10

Malware Config

Signatures

Files

8fb3ac3b8cc113ec60a38555d4af2a5f
.exe windows:4 windows x86 arch:x86

18fa0b44bc9900686146f19f18d710a5

Code Sign

7f:f5:10:74:37:ce:c2:45:bb:be:0d:12:5f:95:2f:25
Certificate

Issuer

CN=2352323

Not Before

11-02-2012 05:41

Not After

31-12-2039 23:59

Subject

CN=2352323

Extended Key Usages

ExtKeyUsageCodeSigning

7b:6d:5e:c8:38:10:13:ab:4a:ca:b6:ba:80:13:d8:b2:c3:0e:79:1f
Signer

Actual PE Digest

7b:6d:5e:c8:38:10:13:ab:4a:ca:b6:ba:80:13:d8:b2:c3:0e:79:1f

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrlenW
lstrcpyW
CreateFileW
VirtualAlloc

user32

CreateDesktopA
EndPaint
SetMenuItemBitmaps
GetFocus
DestroyAcceleratorTable
DialogBoxParamA
IsHungAppWindow
GetMenuStringA
PostQuitMessage
IsDialogMessageA
TileChildWindows
GrayStringW
DdeAbandonTransaction
PeekMessageA
CharPrevW
ScrollWindow
wvsprintfW
CallWindowProcA
CallMsgFilterW
LoadIconW
SetCursor
GetListBoxInfo
DestroyCursor
DdeDisconnectList
EnumPropsW
RemovePropW
HideCaret
TileWindows
GetKBCodePage
AnimateWindow
DdeConnectList
FillRect
BlockInput
MonitorFromRect
SendMessageTimeoutW
GetSubMenu
SendMessageA
ShowCaret
IMPGetIMEA
CopyIcon
DdeQueryStringA
CreateCaret
ArrangeIconicWindows
CreateDialogParamA
EnableMenuItem
RegisterClipboardFormatW
DdeQueryNextServer
VkKeyScanExW
ExcludeUpdateRgn
MessageBoxW
DdeFreeDataHandle
DdeGetLastError
SetScrollPos
WaitForInputIdle
IsCharLowerA
MsgWaitForMultipleObjects
IsWindowVisible
InsertMenuW
OpenWindowStationW
CreateDialogParamW
DrawIconEx
GetMenuItemInfoA
DispatchMessageW
InvalidateRect
DlgDirSelectComboBoxExA
EndDialog
DefMDIChildProcA
GetMenuDefaultItem
RegisterClipboardFormatA
EnumDisplaySettingsExA
GetKeyboardLayoutList
TrackMouseEvent
GetAltTabInfo
CreatePopupMenu
LoadKeyboardLayoutW
ChildWindowFromPointEx
GetKeyboardType
DdeCreateStringHandleW
SetWinEventHook
wvsprintfA
IsCharUpperW
GetIconInfo
GetMenuItemID
CreateWindowExA
OemToCharBuffW
FlashWindow
SwitchDesktop
InternalGetWindowText
GetKeyboardLayout
RegisterWindowMessageW
GetWindowTextW
CallWindowProcW

advapi32

RegOpenKeyW

comctl32

ord16
ImageList_Destroy
CreateToolbarEx
InitializeFlatSB
PropertySheetA
InitMUILanguage
ImageList_AddIcon
ImageList_GetImageRect
FlatSB_SetScrollProp
FlatSB_EnableScrollBar
ImageList_Remove
ord4
ImageList_Replace
GetMUILanguage
PropertySheet
ImageList_Draw
FlatSB_GetScrollRange
FlatSB_SetScrollRange
ord3
DestroyPropertySheetPage
ImageList_DragEnter
ImageList_SetFilter
CreateStatusWindowW
ImageList_DrawIndirect
ImageList_Write
FlatSB_GetScrollPos
CreatePropertySheetPageW
ImageList_DragLeave
ImageList_GetImageCount
ord8
_TrackMouseEvent
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_SetBkColor
ImageList_LoadImageA
ord7
CreateStatusWindow
ImageList_AddMasked
ord14
ImageList_SetOverlayImage
ImageList_GetIconSize
ImageList_Copy
FlatSB_SetScrollPos
DrawStatusTextW
ImageList_DrawEx
ImageList_Read
ImageList_GetImageInfo
ImageList_ReplaceIcon
ord6
ord17
ord13
ImageList_Add
ImageList_SetIconSize
UninitializeFlatSB
ImageList_Duplicate
ImageList_LoadImageW
FlatSB_ShowScrollBar
ImageList_BeginDrag
ImageList_DragMove
ImageList_SetImageCount
ImageList_LoadImage
ImageList_EndDrag
ImageList_SetDragCursorImage
ImageList_GetIcon
CreatePropertySheetPage
PropertySheetW
FlatSB_GetScrollInfo

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textV2
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textF4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textV1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18fa0b44bc9900686146f19f18d710a5

Code Sign

7f:f5:10:74:37:ce:c2:45:bb:be:0d:12:5f:95:2f:25Certificate

Extended Key Usages

7b:6d:5e:c8:38:10:13:ab:4a:ca:b6:ba:80:13:d8:b2:c3:0e:79:1fSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

Sections

.text Size: 3KB - Virtual size: 3KB

.textV2 Size: 276KB - Virtual size: 275KB

.textF4 Size: 1KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 4KB

.textV1 Size: 1024B - Virtual size: 1000B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 1024B - Virtual size: 968B

7f:f5:10:74:37:ce:c2:45:bb:be:0d:12:5f:95:2f:25
Certificate

7b:6d:5e:c8:38:10:13:ab:4a:ca:b6:ba:80:13:d8:b2:c3:0e:79:1f
Signer

.text
Size: 3KB - Virtual size: 3KB

.textV2
Size: 276KB - Virtual size: 275KB

.textF4
Size: 1KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 4KB

.textV1
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 1024B - Virtual size: 968B