99b7ce2481f8f19130812671bb5b4c57

Sharing

Copy URL Twitter E-mail

General

Target

99b7ce2481f8f19130812671bb5b4c57
Size

127KB
MD5

99b7ce2481f8f19130812671bb5b4c57
SHA1

f57aa6dadaa89dbce1eb4a92ff7b032a740772fc
SHA256

25571927e9b141e565ac1d6cd4722854384d3311a3d3057e52840a3d83dee727
SHA512

a18e5004667b99bdb71fda0a0b0c8b95dc4c517ffd604225bb9c086b6426f69f832680786deb5a19dd09df88a56d085c5fcec9461976cdb82701f8f87227b4cb
SSDEEP

1536:o+aKYNxYIDA+oZckor9Hp7xir1SFcj24bTSIU3lysxPgcmBySXgiOA8fAFV0kP:2NxwTWkoxg1SFgbRCQT7OApP0kP

Score

1^/10

Malware Config

Signatures

Files

99b7ce2481f8f19130812671bb5b4c57
.exe windows:4 windows x86 arch:x86

f29672e1c514843a1df2c5873720bab6

Code Sign

6a:00:48:28:70:01:9e:6a:b0:eb:07:41:4f:31:65:7c
Certificate

Issuer

CN=fHyv

Not Before

06/06/2012, 07:29

Not After

31/12/2039, 23:59

Subject

CN=fHyv

Extended Key Usages

ExtKeyUsageCodeSigning

11:08:7a:90:0b:25:93:d7:f6:fb:7f:54:c6:f7:53:e2:a2:91:46:2c
Signer

Actual PE Digest

11:08:7a:90:0b:25:93:d7:f6:fb:7f:54:c6:f7:53:e2:a2:91:46:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAllocEx
CloseHandle

gdi32

GetStockObject

advapi32

RegCloseKey

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f29672e1c514843a1df2c5873720bab6

Code Sign

6a:00:48:28:70:01:9e:6a:b0:eb:07:41:4f:31:65:7cCertificate

Extended Key Usages

11:08:7a:90:0b:25:93:d7:f6:fb:7f:54:c6:f7:53:e2:a2:91:46:2cSigner

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 91KB - Virtual size: 90KB

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 192B

6a:00:48:28:70:01:9e:6a:b0:eb:07:41:4f:31:65:7c
Certificate

11:08:7a:90:0b:25:93:d7:f6:fb:7f:54:c6:f7:53:e2:a2:91:46:2c
Signer

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 91KB - Virtual size: 90KB

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 192B