c93c1de83b8b943ee6a26713d8b689e5

Sharing

Copy URL

Twitter E-mail

General

Target

c93c1de83b8b943ee6a26713d8b689e5
Size

23KB
MD5

c93c1de83b8b943ee6a26713d8b689e5
SHA1

c6a9fd7c5a2926d9d3d127fa4af1d28df3154f51
SHA256

78c05f6ef92fc7364ca05be348c752e8eb94c478c5f39dbe046e7e41cdfc9ec1
SHA512

355ce868fe04b0289e908161c63f8d85f797ba6e91e434bacc021293c9acdacdbd44cb07cb19faaa47e088a59e4e84967db1ebbe317e3f4133e5fec0a8171d78
SSDEEP

384:nDZEcDXBS4RupdKyqYDsDUXr1lIywySi3cRVT8jcwGr:DZDRStpnTsQzcv8jPO

Score

1^/10

Malware Config

Signatures

Files

c93c1de83b8b943ee6a26713d8b689e5
.exe windows:5 windows x86 arch:x86

9cec985af4cc513849a70383d8c855a7

Code Sign

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:ca
Certificate

Issuer

CN=55121212512

Not Before

14-02-2012 04:59

Not After

31-12-2039 23:59

Subject

CN=55121212512

Extended Key Usages

ExtKeyUsageCodeSigning

b1:9a:73:a4:6f:c6:17:25:d3:24:63:51:e4:b3:f5:86:f2:11:7a:c7
Signer

Actual PE Digest

b1:9a:73:a4:6f:c6:17:25:d3:24:63:51:e4:b3:f5:86:f2:11:7a:c7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAdjustment
GetSystemWindowsDirectoryA
GetVolumeNameForVolumeMountPointA
GetVolumePathNameA
GlobalAlloc
GlobalSize
Heap32ListNext
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapSize
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadResource
LocalFree
LocalShrink
MoveFileWithProgressW
OpenFile
OpenFileMappingW
OpenMutexA
OpenMutexW
PeekNamedPipe
Process32FirstW
Process32NextW
QueryDosDeviceW
ReadConsoleOutputA
ReadConsoleOutputW
ReadFile
ReplaceFile
ResetEvent
GetSystemDirectoryW
SearchPathA
SetCommBreak
SetCommTimeouts
SetConsoleCP
SetConsoleMode
SetDefaultCommConfigW
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetHandleInformation
SetMessageWaitingIndicator
SetProcessShutdownParameters
SetThreadExecutionState
SetThreadIdealProcessor
SetVolumeMountPointA
SuspendThread
UnhandledExceptionFilter
UnregisterWaitEx
VerLanguageNameA
VerifyVersionInfoA
VirtualProtect
VirtualQuery
WaitCommEvent
WideCharToMultiByte
WriteConsoleW
WriteFileEx
WriteFileGather
WritePrivateProfileSectionA
WritePrivateProfileStringA
WritePrivateProfileStructW
WriteProfileStringW
_lcreat
GetStringTypeW
GetStdHandle
GetProfileSectionW
GetProcessVersion
GetProcessTimes
GetProcessHeaps
GetProcessHeap
GetPrivateProfileStructW
GetPrivateProfileSectionW
GetPrivateProfileIntW
GetPrivateProfileIntA
GetNumberOfConsoleMouseButtons
GetNamedPipeInfo
GetMailslotInfo
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesA
GetExitCodeThread
GetEnvironmentVariableW
GetEnvironmentVariableA
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrencyFormatW
GetConsoleAliasesW
GetCommModemStatus
GetCommConfig
GetModuleHandleA
GetBinaryTypeW
GetBinaryType
GetAtomNameW
GetAtomNameA
FreeEnvironmentStringsW
FormatMessageW
FoldStringA
FlushInstructionCache
FindNextFileA
FindFirstFileW
FindCloseChangeNotification
FindClose
ExpandEnvironmentStringsW
ExitThread
EscapeCommFunction
EnumTimeFormatsW
EnumTimeFormatsA
EnumSystemLanguageGroupsW
EnumResourceNamesW
EnumLanguageGroupLocalesW
EnumCalendarInfoW
DosDateTimeToFileTime
DnsHostnameToComputerNameA
DisableThreadLibraryCalls
DeleteVolumeMountPointW
DeleteFileA
DeleteFiber
DefineDosDeviceA
CreateWaitableTimerW
CreateIoCompletionPort
CreateFileW
CreateFileMappingA
CreateDirectoryExA
CreateDirectoryA
CreateConsoleScreenBuffer
CopyFileA
ClearCommError
BuildCommDCBAndTimeoutsW
BeginUpdateResourceW
Beep
AllocConsole
GetProcAddress
ScrollConsoleScreenBufferW

msvcrt

memset

user32

LoadBitmapA

advapi32

RegOpenKeyExA
RegOpenKeyA

oleaut32

VarDateFromUdate
VarDateFromUdateEx
VarDecFromI1
VarDecFromI2
VarDecFromI4
VarDecInt
VarDecMul
VarDecNeg
VarDecRound
VarFormatCurrency
VarFormatDateTime
VarI1FromDisp
VarI1FromR4
VarI1FromUI1
VarI2FromDate
VarI2FromI1
VarI2FromUI1
VarI4FromCy
VarI4FromDate
VarI4FromI1
VarI4FromStr
VarI4FromUI2
VarI4FromUI4
VarIdiv
VarOr
VarR4CmpR8
VarR4FromDate
VarR4FromDec
VarR4FromDisp
VarR4FromI1
VarR4FromI2
VarR4FromR8
VarR4FromUI2
VarR4FromUI4
VarR8FromI2
VarR8FromR4
VarR8Pow
VarR8Round
VarRound
VarUI1FromBool
VarUI1FromDec
VarUI1FromR4
VarUI2FromCy
VarUI2FromDate
VarUI2FromDisp
VarUI2FromUI1
VarUI4FromBool
VarUI4FromCy
VarUI4FromI2
VarUI4FromI4
VarUI4FromR4
VarUI4FromStr
VariantChangeType
VariantTimeToDosDateTime
VectorFromBstr
VarDateFromR8
VarDateFromR4
VarDateFromI4
VarDateFromI2
VarDateFromCy
VarCySu
VarCyRound
VarCyMulI4
VarCyMul
VarCyInt
VarCyFromUI4
VarCyFromUI1
VarCyFromI1
VarCyFromDisp
VarCyFromDate
VarCyFix
VarCyCmpR8
VarCyCmp
VarCat
VarBstrFromR8
VarBstrFromR4
VarBstrFromI4
VarBstrFromDisp
VarBstrFromDec
VarBstrFromBool
VarBstrCat
VarBoolFromUI4
VarBoolFromUI2
VarBoolFromStr
VarBoolFromR8
VarBoolFromR4
VarBoolFromI4
VarBoolFromI2
VarBoolFromI1
VARIANT_UserSize
VARIANT_UserMarshal
UnRegisterTypeLi
SysStringByteLen
SysReAllocStringLen
SysFreeString
SafeArrayUnlock
SafeArrayUnaccessData
SafeArrayPutElement
SafeArrayGetElemsize
SafeArrayGetElement
SafeArrayDestroyData
SafeArrayCreateVector
SafeArrayAllocData
OleTranslateColor
OleSavePictureFile
OleLoadPictureFile
OleIconToCursor
OleCreatePropertyFrameIndirect
LoadTypeLibEx
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserFree
LPSAFEARRAY_Size
LPSAFEARRAY_Marshal
GetErrorInfo
DosDateTimeToVariantTime
CreateStdDispatch
BstrFromVector
BSTR_UserUnmarshal
BSTR_UserSize
SafeArrayGetVartype

imm32

ImmCreateContext
ImmCreateSoftKeyboard
ImmDestroyContext
ImmDestroyIMCC
ImmDestroySoftKeyboard
ImmDisableIME
ImmEnumInputContext
ImmEnumRegisterWordW
ImmEscapeA
ImmEscapeW
ImmGenerateMessage
ImmGetCandidateListA
ImmGetCandidateListCountW
ImmGetCandidateWindow
ImmGetCompositionFontA
ImmGetCompositionFontW
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmGetCompositionWindow
ImmGetContext
ImmGetConversionListA
ImmGetConversionListW
ImmGetConversionStatus
ImmGetDefaultIMEWnd
ImmGetDescriptionA
ImmGetDescriptionW
ImmGetGuideLineW
ImmGetHotKey
ImmGetIMCLockCount
ImmGetIMEFileNameA
ImmConfigureIMEW
ImmGetImeMenuItemsA
ImmGetImeMenuItemsW
ImmGetOpenStatus
ImmGetProperty
ImmGetRegisterWordStyleA
ImmGetRegisterWordStyleW
ImmGetStatusWindowPos
ImmInstallIMEA
ImmInstallIMEW
ImmIsIME
ImmIsUIMessageW
ImmLockIMC
ImmLockIMCC
ImmNotifyIME
ImmRegisterWordA
ImmRegisterWordW
ImmReleaseContext
ImmRequestMessageA
ImmRequestMessageW
ImmSetCandidateWindow
ImmSetCompositionFontA
ImmSetCompositionFontW
ImmSetCompositionStringA
ImmSetCompositionWindow
ImmSetConversionStatus
ImmSetHotKey
ImmSetOpenStatus
ImmSetStatusWindowPos
ImmShowSoftKeyboard
ImmSimulateHotKey
ImmConfigureIMEA
ImmGetIMEFileNameW
ImmUnlockIMC
ImmUnlockIMCC
ImmUnregisterWordA
ImmUnregisterWordW
ImmAssociateContext

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cec985af4cc513849a70383d8c855a7

Code Sign

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:caCertificate

Extended Key Usages

b1:9a:73:a4:6f:c6:17:25:d3:24:63:51:e4:b3:f5:86:f2:11:7a:c7Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

oleaut32

imm32

Sections

.text Size: 8KB - Virtual size: 8KB

.text1 Size: 2KB - Virtual size: 1KB

.text2 Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 88B

.rsrc Size: 2KB - Virtual size: 1KB

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:ca
Certificate

b1:9a:73:a4:6f:c6:17:25:d3:24:63:51:e4:b3:f5:86:f2:11:7a:c7
Signer

.text
Size: 8KB - Virtual size: 8KB

.text1
Size: 2KB - Virtual size: 1KB

.text2
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 88B

.rsrc
Size: 2KB - Virtual size: 1KB