bebacf2ab0d2bac0c77406a74a61d442

Sharing

Copy URL

Twitter E-mail

General

Target

bebacf2ab0d2bac0c77406a74a61d442
Size

191KB
MD5

bebacf2ab0d2bac0c77406a74a61d442
SHA1

033ac4d84d6f9d5505f6ff6d287387ecfc67de95
SHA256

f2c336d36648d8c427ba91cb57a2c6611bf8579792b14bcd534a372d1206d490
SHA512

18e55867ce4edd7becd265387f1079e45a21b3edab9f58af236ce5b1a32a14a253ea1fc5daf5bf02f5ded5fcb5fce8a6fbd34723df0061c9ef32304075d43a48
SSDEEP

3072:ivFgdEP/zL7cYp0c10OTfnrQz+sGnmqyqEx9aGo4ob3lN5dlLIjZw7qCTOojwx:ivFgWzL7cYHpfrQmmpDzaP4ob3lbd+2E

Score

1^/10

Malware Config

Signatures

Files

bebacf2ab0d2bac0c77406a74a61d442
.exe windows:4 windows x86 arch:x86

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

Issuer

CN=Application Compatibility UI

Not Before

31-12-2008 16:00

Not After

31-12-2014 16:00

Subject

CN=Application Compatibility UI

Extended Key Usages

ExtKeyUsageCodeSigning

13:03:f9:0a:15:0a:67:b6:1a:0d:5b:cc:a9:5d:66:b4:88:b5:6b:8a
Signer

Actual PE Digest

13:03:f9:0a:15:0a:67:b6:1a:0d:5b:cc:a9:5d:66:b4:88:b5:6b:8a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

Sections

(
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

(
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

:
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

:
Size: 512B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

;
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

*
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca5205d29d2e0fa326b0238a3aaed518

Code Sign

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2Certificate

Extended Key Usages

13:03:f9:0a:15:0a:67:b6:1a:0d:5b:cc:a9:5d:66:b4:88:b5:6b:8aSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

( Size: - Virtual size: 20KB

( Size: - Virtual size: 260B

" Size: - Virtual size: 1KB

: Size: - Virtual size: 1KB

+ Size: - Virtual size: 8B

+ Size: 512B - Virtual size: 24B

/ Size: - Virtual size: 1KB

: Size: 512B - Virtual size: 136KB

; Size: - Virtual size: 17KB

* Size: 187KB - Virtual size: 187KB

+ Size: 512B - Virtual size: 112B

2f:6d:1b:0d:3e:bb:b8:8b:4a:0f:b2:46:69:8a:ad:c2
Certificate

13:03:f9:0a:15:0a:67:b6:1a:0d:5b:cc:a9:5d:66:b4:88:b5:6b:8a
Signer

(
Size: - Virtual size: 20KB

(
Size: - Virtual size: 260B

"
Size: - Virtual size: 1KB

:
Size: - Virtual size: 1KB

+
Size: - Virtual size: 8B

+
Size: 512B - Virtual size: 24B

/
Size: - Virtual size: 1KB

:
Size: 512B - Virtual size: 136KB

;
Size: - Virtual size: 17KB

*
Size: 187KB - Virtual size: 187KB

+
Size: 512B - Virtual size: 112B