bfeeb5bbd91283145223c6c5e4cf6002

Sharing

Copy URL Twitter E-mail

General

Target

bfeeb5bbd91283145223c6c5e4cf6002
Size

379KB
MD5

bfeeb5bbd91283145223c6c5e4cf6002
SHA1

880d6bcca2244c6b2dc5b8db9efde3d0105f8e6c
SHA256

4f0cab6115c3eae794c87b5cde7c05f1870c90ffa7149b6fa7b430dac50a5c81
SHA512

ef73e1ce99445680c440b1d0e4c56e2dd93384fe2c2b63b665a3a797c54854c16105509c1a014413c2622ca892d6a1d5142e67d3df7f9659b8345ea0f35a79df
SSDEEP

6144:pKdkK8En7ULewJH+8zRCvesbAZHuWaiiqLiKqk+F8hzo15QDgy8jX0mYGD0aQ5kZ:p2ULVHdz4V8LaXqGbk+F8hk1iky8LXIq

Score

1^/10

Malware Config

Signatures

Files

bfeeb5bbd91283145223c6c5e4cf6002
.exe windows:4 windows x86 arch:x86

440af681c80b5c1f624bd9dfad71f28e

Code Sign

11:95:6f:d4:d3:8c:f8:86:4e:f8:ca:d4:6a:2d:9f:08
Certificate

Issuer

CN=Root Agency

Not Before

04/11/2011, 05:49

Not After

22/10/2034, 22:00

Subject

CN=The USERTRUST Network

Extended Key Usages

ExtKeyUsageCodeSigning

a1:51:7a:25:74:b1:aa:42:12:e8:df:93:14:ec:bd:ca:78:68:f2:ab
Signer

Actual PE Digest

a1:51:7a:25:74:b1:aa:42:12:e8:df:93:14:ec:bd:ca:78:68:f2:ab

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glClipPlane
glRasterPos2f
glRasterPos4fv
glEndList
glRasterPos2i
glTranslated
glEvalPoint2
glGetTexEnviv
glTexImage1D
glIndexd
glTexEnvf
glPixelTransferi
glAccum
glEvalCoord2d

user32

ShowWindow
SetWindowPlacement
IsChild
SetDlgItemTextA
GetWindowPlacement
EnumChildWindows
MoveWindow
GetNextDlgTabItem
GetSysColor

advapi32

RegRestoreKeyA
RegSaveKeyA
RegUnLoadKeyA
RegEnumKeyExA
RegSetValueA
RegFlushKey

msvcrt

_controlfp
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

kernel32

GetPrivateProfileSectionA
WritePrivateProfileStructA
WriteProfileStringA
EnterCriticalSection
WideCharToMultiByte
HeapAlloc
WriteProfileSectionA
GlobalHandle
IsValidLocale
GlobalLock
PulseEvent
GlobalReAlloc
VirtualAllocEx
VirtualAlloc
ExitProcess
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetCPInfoExA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 250KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

440af681c80b5c1f624bd9dfad71f28e

Code Sign

11:95:6f:d4:d3:8c:f8:86:4e:f8:ca:d4:6a:2d:9f:08Certificate

Extended Key Usages

a1:51:7a:25:74:b1:aa:42:12:e8:df:93:14:ec:bd:ca:78:68:f2:abSigner

Headers

File Characteristics

Imports

opengl32

user32

advapi32

msvcrt

kernel32

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 110KB - Virtual size: 109KB

.data Size: 250KB - Virtual size: 328KB

.tls Size: 512B - Virtual size: 4B

.rsrc Size: 5KB - Virtual size: 5KB

11:95:6f:d4:d3:8c:f8:86:4e:f8:ca:d4:6a:2d:9f:08
Certificate

a1:51:7a:25:74:b1:aa:42:12:e8:df:93:14:ec:bd:ca:78:68:f2:ab
Signer

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 110KB - Virtual size: 109KB

.data
Size: 250KB - Virtual size: 328KB

.tls
Size: 512B - Virtual size: 4B

.rsrc
Size: 5KB - Virtual size: 5KB