General

Malware Config

Signatures

Files

• a25bb03af28506ddf9ac6103934b962d

  .exe windows:6 windows x86 arch:x86

  340cbb019799ff7ed95694815ec3e316

  
  

  Code Sign

  33:00:00:00:bc:e1:20:fd:d2:7c:c8:ee:93:00:00:00:00:00:bc

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18-08-2015 17:15

  Not After

  18-11-2016 17:15

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19-10-2011 18:41

  Not After

  19-10-2026 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  53:ed:03:9a:d9:36:5c:82:b0:90:75:68:b8:97:9a:a0:12:3c:c7:3b:04:f8:10:b9:08:64:20:06:db:61:fa:0c

  Signer

  Actual PE Digest

  53:ed:03:9a:d9:36:5c:82:b0:90:75:68:b8:97:9a:a0:12:3c:c7:3b:04:f8:10:b9:08:64:20:06:db:61:fa:0c

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  DeleteAtom

  GetModuleHandleA

  CreateTimerQueue

  GetVersion

  GetSystemInfo

  GetCurrentThreadId

  GetCurrentProcessId

  GetCurrentProcess

  WaitForMultipleObjects

  CreateEventW

  CreateMutexW

  LeaveCriticalSection

  EnterCriticalSection

  AddAtomW

  GetProcessHeap

  HeapCreate

  QueryPerformanceFrequency

  UnlockFileEx

  SetFilePointerEx

  GetCommandLineW

  SetFilePointer

  LockFileEx

  GetLogicalDrives

  GetFileSizeEx

  GetFileSize

  GetFileInformationByHandle

  CreateFileW

  InitializeCriticalSection

  user32

  LoadIconA

  DestroyIcon

  IsDialogMessageA

  DestroyCursor

  LoadCursorA

  CheckMenuRadioItem

  FindWindowA

  SetWindowLongA

  GetWindowLongA

  GetSysColorBrush

  GetSysColor

  ChildWindowFromPoint

  ClientToScreen

  SetCursor

  MessageBoxA

  GetWindowRect

  GetClientRect

  GetWindowTextA

  SetWindowTextA

  RedrawWindow

  InvalidateRect

  SetActiveWindow

  SetMenuItemInfoA

  InsertMenuItemA

  TrackPopupMenu

  RemoveMenu

  AppendMenuA

  GetSubMenu

  EnableMenuItem

  CheckMenuItem

  DestroyMenu

  CreatePopupMenu

  GetSystemMenu

  GetMenu

  GetSystemMetrics

  TranslateAcceleratorA

  DestroyAcceleratorTable

  LoadAcceleratorsA

  EnableWindow

  KillTimer

  SetTimer

  GetActiveWindow

  SetFocus

  CharLowerBuffA

  CharUpperA

  EmptyClipboard

  EnumClipboardFormats

  GetClipboardData

  SetClipboardData

  CloseClipboard

  OpenClipboard

  DefDlgProcA

  SendDlgItemMessageA

  IsDlgButtonChecked

  CheckRadioButton

  CheckDlgButton

  GetDlgItemTextA

  SetDlgItemTextA

  SetDlgItemInt

  GetDlgItem

  EndDialog

  DialogBoxParamA

  CreateDialogParamA

  SetWindowPlacement

  GetWindowPlacement

  SetWindowPos

  MoveWindow

  DestroyWindow

  IsMenu

  wvsprintfA

  wsprintfA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  IsWindow

  GetClassInfoA

  UnregisterClassA

  RegisterClassA

  CallWindowProcA

  PostQuitMessage

  PostMessageA

  SendMessageA

  GetCursorPos

  gdi32

  GetTextCharacterExtra

  GetTextExtentPoint32W

  GetFontUnicodeRanges

  GetCharWidthI

  RemoveFontResourceExW

  RemoveFontMemResourceEx

  GetRandomRgn

  PatBlt

  RestoreDC

  ResetDCW

  RemoveFontResourceW

  RoundRect

  SelectClipRgn

  GetObjectType

  GetDIBits

  GetCurrentObject

  GetCharABCWidthsW

  GetCharWidthFloatW

  GetCharWidth32W

  GetROP2

  ExtFloodFill

  EqualRgn

  EnumFontFamiliesW

  DeleteObject

  GetStockObject

  CreateFontIndirectA

  OffsetRgn

  SelectObject

  GdiSetBatchLimit

  UnrealizeObject

  SetViewportOrgEx

  PolylineTo

  PolyBezierTo

  LPtoDP

  GetObjectW

  GetObjectA

  GetArcDirection

  StrokePath

  GetPath

  FillPath

  AbortPath

  SetDIBColorTable

  ModifyWorldTransform

  SetWinMetaFileBits

  GetEnhMetaFilePaletteEntries

  GetEnhMetaFileHeader

  EnumEnhMetaFile

  GdiTransparentBlt

  GdiAlphaBlend

  SetTextJustification

  SetTextAlign

  SetTextColor

  SetSystemPaletteUse

  SetRectRgn

  StretchBlt

  SetLayout

  SetGraphicsMode

  SetDIBitsToDevice

  SetBitmapBits

  SetBkMode

  SetDCPenColor

  SetDCBrushColor

  Chord

  winspool.drv

  ScheduleJob

  ReadPrinter

  FindFirstPrinterChangeNotification

  FindClosePrinterChangeNotification

  comdlg32

  GetSaveFileNameA

  GetOpenFileNameA

  advapi32

  GetUserNameA

  RegQueryValueExA

  OpenProcessToken

  AdjustTokenPrivileges

  DecryptFileW

  LookupPrivilegeValueA

  RegSetValueA

  RegCloseKey

  RegCreateKeyA

  RegDeleteKeyA

  RegOpenKeyExA

  Sections

  .text

  Size: 27KB - Virtual size: 26KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 516B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 20B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 144KB - Virtual size: 143KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ