ada99cc37a657754bc26ecac02ed4c00

Sharing

Copy URL

Twitter E-mail

General

Target

ada99cc37a657754bc26ecac02ed4c00
Size

174KB
MD5

ada99cc37a657754bc26ecac02ed4c00
SHA1

0423ccf1edc48425521b86e97381ae05d0f7fa4e
SHA256

e3e650c22d5bbcefdf5604eea5d7b0bf4e82464757060357aeffdfe4813cf3da
SHA512

8b243d3f75c1f1635cabf17d3718bdf4ae19a55bf1d58ed5198b30ea7cdc398c17b32d822d64d6957d02c42a33f3d35978cfb7059939daba677ba4d8947bbb6c
SSDEEP

3072:X1WAlUd89ZeGWmDgMBMyveidWaoaDNS3Trt21cFWiI1MU6XbvX8pWEvwiZHOp:X1WkkGWmDjM5yS3XtYcFWieMPLkpWEvO

Score

1^/10

Malware Config

Signatures

Files

ada99cc37a657754bc26ecac02ed4c00
.exe windows:4 windows x86 arch:x86

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

Issuer

CN=Application Compatibility UI

Not Before

31-12-2008 16:00

Not After

31-12-2014 16:00

Subject

CN=Application Compatibility UI

Extended Key Usages

ExtKeyUsageCodeSigning

69:6d:68:4a:dc:c5:18:c6:9a:08:41:71:eb:5f:18:03:ba:ce:bb:dc
Signer

Actual PE Digest

69:6d:68:4a:dc:c5:18:c6:9a:08:41:71:eb:5f:18:03:ba:ce:bb:dc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

Sections

<
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<
Size: - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

,
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8
Size: 512B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

%
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

?
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2Certificate

Extended Key Usages

69:6d:68:4a:dc:c5:18:c6:9a:08:41:71:eb:5f:18:03:ba:ce:bb:dcSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

< Size: - Virtual size: 15KB

< Size: - Virtual size: 164B

$ Size: - Virtual size: 1KB

< Size: - Virtual size: 1KB

1 Size: - Virtual size: 8B

" Size: 512B - Virtual size: 24B

, Size: - Virtual size: 1KB

8 Size: 512B - Virtual size: 124KB

% Size: - Virtual size: 16KB

= Size: 170KB - Virtual size: 170KB

? Size: 512B - Virtual size: 96B

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

69:6d:68:4a:dc:c5:18:c6:9a:08:41:71:eb:5f:18:03:ba:ce:bb:dc
Signer

<
Size: - Virtual size: 15KB

<
Size: - Virtual size: 164B

$
Size: - Virtual size: 1KB

<
Size: - Virtual size: 1KB

1
Size: - Virtual size: 8B

"
Size: 512B - Virtual size: 24B

,
Size: - Virtual size: 1KB

8
Size: 512B - Virtual size: 124KB

%
Size: - Virtual size: 16KB

=
Size: 170KB - Virtual size: 170KB

?
Size: 512B - Virtual size: 96B