0206f71769d162e7e5e563e2b6592c939ebf608e22e641d97aeb39ae9987b708

Sharing

Copy URL

Twitter E-mail

General

Target

0206f71769d162e7e5e563e2b6592c939ebf608e22e641d97aeb39ae9987b708
Size

388KB
MD5

884f23c133aabcab9cabb5c3dd3f2c24
SHA1

03b1bf9b1860bce33098cb8bfeca870ce84ae8f5
SHA256

0206f71769d162e7e5e563e2b6592c939ebf608e22e641d97aeb39ae9987b708
SHA512

fdc724b68db8d1c3594e88ed187547ca9e4dd0ad44af4fa15e928088419782ca717fea05b905f6f927f81892e84c88eec98d2cc13111749a07f895171eeff6f8
SSDEEP

6144:HNAXIjJ+erLRzXQW/lU9dhG3vKDbgUlXLm0MmSpNyM:HNAIjJ++VDT/lkECf3XpXM

Score

1^/10

Malware Config

Signatures

Files

0206f71769d162e7e5e563e2b6592c939ebf608e22e641d97aeb39ae9987b708
.exe windows:4 windows x86 arch:x86

cb26ad1062c902afe19f5fc39d7ccbed

Code Sign

63:a7:43:56:d9:a6:f4:6b:b3:32:09:d6:88:b1:9d:4d
Certificate

Issuer

CN=KAqG

Not Before

11/06/2012, 08:39

Not After

31/12/2039, 23:59

Subject

CN=KAqG

Extended Key Usages

ExtKeyUsageCodeSigning

03:8c:47:c6:a3:32:7b:b4:c9:d3:56:b6:7f:b5:6c:f7:13:65:ac:a3
Signer

Actual PE Digest

03:8c:47:c6:a3:32:7b:b4:c9:d3:56:b6:7f:b5:6c:f7:13:65:ac:a3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAllocEx

advapi32

RegCloseKey

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb26ad1062c902afe19f5fc39d7ccbed

Code Sign

63:a7:43:56:d9:a6:f4:6b:b3:32:09:d6:88:b1:9d:4dCertificate

Extended Key Usages

03:8c:47:c6:a3:32:7b:b4:c9:d3:56:b6:7f:b5:6c:f7:13:65:ac:a3Signer

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 342KB - Virtual size: 341KB

.data6 Size: 512B - Virtual size: 100B

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 164B

63:a7:43:56:d9:a6:f4:6b:b3:32:09:d6:88:b1:9d:4d
Certificate

03:8c:47:c6:a3:32:7b:b4:c9:d3:56:b6:7f:b5:6c:f7:13:65:ac:a3
Signer

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 342KB - Virtual size: 341KB

.data6
Size: 512B - Virtual size: 100B

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 164B