SSEFix_1[.]27[.]0[.]0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SSEFix_1.27.0.0.exe
Size

3.8MB
MD5

14f9c68e6ba61ee7a97b0ba136a61213
SHA1

5f79b3d7a8521c1d426f23185f7e9b5077b7804a
SHA256

48babf466925b48b325481f4b6b6ca0ea24b6993a11d6b43d33869cd11c50bfb
SHA512

50b272caace03fa13e4b9e124233696b8576c856ab561799a51008c4df6ab46baf56fb1ee293da8c3c52a50c89e49275d26ca74e367368fcc868b3c6224c05ed
SSDEEP

98304:0Ku6tPwc231Jpk6c1vvdbNGRfqfz8pd/Bg:0pNW6ONGRc8C

Score

1^/10

Malware Config

Signatures

Files

SSEFix_1.27.0.0.exe
.exe windows:5 windows x86 arch:x86

d8d0c13e70770ca8dcded357f9de6c46

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4e:43:b0:f9:1b:7f:91:e8:e2:c1:31:59:0d:32:9a:93
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

14/11/2012, 00:00

Not After

14/12/2015, 23:59

Subject

CN=SteelSeries ApS,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=SteelSeries ApS,L=Copenhagen,ST=N/A,C=DK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d3:18:06:c7:ef:e3:cf:13:8a:d1:34:4f:96:a3:7c:13:1d:42:27:2a
Signer

Actual PE Digest

d3:18:06:c7:ef:e3:cf:13:8a:d1:34:4f:96:a3:7c:13:1d:42:27:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\pants\Develop\SSEFix\Release\SSEFix.pdb

Imports

hid

HidD_GetIndexedString
HidD_SetFeature
HidD_GetSerialNumberString
HidD_GetProductString
HidP_GetCaps
HidD_GetAttributes
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetManufacturerString
HidD_GetHidGuid

setupapi

SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
CM_Get_Device_ID_Size
CM_Get_Device_IDW
SetupDiGetDeviceRegistryPropertyW
SetupOpenInfFileW
SetupFindFirstLineW
SetupGetStringFieldW
SetupCloseInfFile
SetupDiGetDeviceInfoListDetailW
CM_Get_Device_ID_ExW
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsW
CMP_WaitNoPendingInstallEvents
SetupDiGetINFClassW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiSetDeviceRegistryPropertyW
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
CM_Disconnect_Machine
SetupCopyOEMInfW
SetupDiClassGuidsFromNameExW
SetupDiGetClassDevsExW
SetupDiCreateDeviceInfoListExW
SetupDiOpenDeviceInfoW
SetupDiEnumDeviceInfo

kernel32

GetFileSizeEx
GetFileTime
VirtualProtect
FindResourceExW
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
RtlUnwind
HeapReAlloc
RaiseException
GetSystemTimeAsFileTime
GetDriveTypeW
GetProcessHeap
ExitProcess
ExitThread
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetErrorMode
GetStartupInfoA
HeapCreate
VirtualFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
LCMapStringA
GetCurrentDirectoryA
GetConsoleCP
GetConsoleMode
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetStringTypeA
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetDriveTypeA
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
CreateFileW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetFileSize
lstrcpyW
GetCurrentDirectoryW
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalFlags
FileTimeToSystemTime
lstrlenA
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
LocalAlloc
GetModuleHandleA
ResumeThread
GetCurrentThread
ReadFile
FileTimeToLocalFileTime
GetProfileIntW
SearchPathW
ConvertDefaultLocale
EnumResourceLanguagesW
CloseHandle
WriteFile
WaitForSingleObject
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleFileNameW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FreeResource
WideCharToMultiByte
SetLastError
CopyFileW
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
WaitForMultipleObjects
CreateFileA
GlobalFree
TlsFree
CreateFileMappingW
MapViewOfFile
TlsAlloc
TlsGetValue
GlobalAlloc
TlsSetValue
GetCurrentProcessId
GetCurrentThreadId
SetThreadPriority
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
LocalFree
FormatMessageW
FindClose
FindNextFileW
TerminateThread
FindFirstFileW
lstrlenW
GetFileAttributesW
GetFullPathNameW
GetVersionExW
GetWindowsDirectoryW
CreateMutexW
CreateDirectoryW
GetTempFileNameW
LoadLibraryW
GetTempPathW
WaitForMultipleObjectsEx
ResetEvent
GetOverlappedResult
WriteFileEx
DeviceIoControl
ReadFileEx
WaitForSingleObjectEx
CancelIo
CreateEventW
GetTickCount
CreateProcessW
SetEvent
OpenEventW
OpenProcess
GetLastError
FreeLibrary
GetProcAddress
RemoveDirectoryW
DeleteFileW
GetCurrentProcess
IsWow64Process
Sleep
CreateThread
SetHandleCount

user32

BringWindowToTop
IsRectEmpty
InvalidateRect
IsMenu
GetSystemMenu
SetClassLongW
SetParent
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
CreateAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
GetAsyncKeyState
CharUpperW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
PostThreadMessageW
SetRectEmpty
DeleteMenu
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
UnregisterClassW
DestroyMenu
GetMenuItemInfoW
InflateRect
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SystemParametersInfoW
MessageBeep
RedrawWindow
IsZoomed
PostQuitMessage
LoadMenuW
MapVirtualKeyW
GetKeyNameTextW
ReleaseDC
GetDC
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
SetMenuItemBitmaps
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
LockWindowUpdate
GetPropW
RemovePropW
GetIconInfo
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
MessageBoxW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
CopyRect
PtInRect
GetMenu
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
IsWindow
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
LoadStringW
UnregisterDeviceNotification
RegisterDeviceNotificationW
CharNextW
DestroyWindow
EnumChildWindows
RegisterClipboardFormatW
DrawStateW
OpenClipboard
CopyImage
DestroyIcon
LoadImageW
CreateWindowExW
RegisterClassExW
SetWindowLongW
DefWindowProcW
GetWindowLongW
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
GetWindowRect
GetNextDlgGroupItem
DestroyCursor
GetWindowRgn
MapDialogRect
CreateMenu
SetPropW
GetDoubleClickTime
LoadIconW
KillTimer
SendMessageW
PostMessageW
SetTimer
EnableWindow
SubtractRect
CopyIcon
CharUpperBuffW
GetUpdateRect
FrameRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
IsClipboardFormatAvailable
MapVirtualKeyExW
IsCharLowerW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetCursorPos
SetRect
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
EmptyClipboard
CloseClipboard
GetFocus
SetClipboardData
GetMenuCheckMarkDimensions

gdi32

DeleteObject
SelectClipRgn
LineTo
IntersectClipRect
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
ExcludeClipRect
GetTextMetricsW
CreateFontIndirectW
SetRectRgn
CombineRgn
SetTextAlign
DPtoLP
OffsetRgn
GetRgnBox
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
GetTextColor
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
SetPixel
CreateDIBSection
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
Polyline
Ellipse
Polygon
Rectangle
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
MoveToEx
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
PatBlt
CreateRectRgnIndirect
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CopyMetaFileW
GetTextExtentPoint32W
GetDeviceCaps

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW

shell32

DragFinish
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
DragQueryFileW
SHAppBarMessage
SHGetFileInfoW

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleGetClipboard
DoDragDrop
OleLockRunning
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CLSIDFromString
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop

oleaut32

SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen

winmm

PlaySoundW

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

gdiplus

GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStreamICM
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipGetImagePixelFormat
GdipDrawImageI
GdipCloneImage
GdipGetImageGraphicsContext

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8d0c13e70770ca8dcded357f9de6c46

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

4e:43:b0:f9:1b:7f:91:e8:e2:c1:31:59:0d:32:9a:93Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

d3:18:06:c7:ef:e3:cf:13:8a:d1:34:4f:96:a3:7c:13:1d:42:27:2aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

hid

setupapi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

winmm

imm32

gdiplus

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 325KB - Virtual size: 325KB

.data Size: 40KB - Virtual size: 84KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.reloc Size: 202KB - Virtual size: 202KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

4e:43:b0:f9:1b:7f:91:e8:e2:c1:31:59:0d:32:9a:93
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

d3:18:06:c7:ef:e3:cf:13:8a:d1:34:4f:96:a3:7c:13:1d:42:27:2a
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 325KB - Virtual size: 325KB

.data
Size: 40KB - Virtual size: 84KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

.reloc
Size: 202KB - Virtual size: 202KB