cc6b83f066e4d8e61d855de191a785c7

Sharing

Copy URL

Twitter E-mail

General

Target

cc6b83f066e4d8e61d855de191a785c7
Size

437KB
MD5

cc6b83f066e4d8e61d855de191a785c7
SHA1

aba872ffc37c959ab0ade1c5dbc341cea98c0db2
SHA256

794fed30892a3ed8c12cf23e0b4dc0873b452e98c9667e57d2350f2113cf69a7
SHA512

ee2ff8366c17d46ee033501dab2606d64c8556e88a95d5f773e961c8e7a4014277e642b0fee21bbe2ebba8ea5296dd91a52768f712de670a5176968d86fc8646
SSDEEP

12288:T0JBqbCHhRZFkukMk1V1qZ6ORl0YWbbnyn7v:T0JBq2HzZFkukMOGZ6ORl0YMby7v

Score

1^/10

Malware Config

Signatures

Files

cc6b83f066e4d8e61d855de191a785c7
.exe windows:4 windows x86 arch:x86

c53857630c45329045e5eedbd5554ad8

Code Sign

7d:fd:a9:41:17:08:90:6d:bb:a9:35:24:8c:16:49:7c
Certificate

Issuer

CN=Root Agency

Not Before

20-12-2011 07:15

Not After

10-07-2016 22:00

Subject

CN=Benert

a9:dc:3e:2c:ea:e5:fc:de:e9:11:45:a4:a7:d0:90:77:1f:c4:b0:4f
Signer

Actual PE Digest

a9:dc:3e:2c:ea:e5:fc:de:e9:11:45:a4:a7:d0:90:77:1f:c4:b0:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgCtrlID
ShowWindowAsync

ole32

CoAddRefServerProcess
OleRegGetUserType

oleaut32

RegisterTypeLi
QueryPathOfRegTypeLi

advapi32

RegCreateKeyExA
RegNotifyChangeKeyValue

kernel32

GetStringTypeW
LCMapStringW
LCMapStringA
LoadLibraryA
GetStringTypeA
WideCharToMultiByte
GetACP
GlobalHandle
GetPrivateProfileStringA
GetModuleHandleA
GetProcAddress
ExitProcess
InterlockedDecrement
InterlockedIncrement
GetStartupInfoA
GetCommandLineA
GetVersion
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetOEMCP
VirtualAlloc
HeapReAlloc

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.slu
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fhpyv
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c53857630c45329045e5eedbd5554ad8

Code Sign

7d:fd:a9:41:17:08:90:6d:bb:a9:35:24:8c:16:49:7cCertificate

a9:dc:3e:2c:ea:e5:fc:de:e9:11:45:a4:a7:d0:90:77:1f:c4:b0:4fSigner

Headers

File Characteristics

Imports

user32

ole32

oleaut32

advapi32

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 6KB - Virtual size: 97KB

.slu Size: 279KB - Virtual size: 278KB

.fhpyv Size: 120KB - Virtual size: 120KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 4KB

7d:fd:a9:41:17:08:90:6d:bb:a9:35:24:8c:16:49:7c
Certificate

a9:dc:3e:2c:ea:e5:fc:de:e9:11:45:a4:a7:d0:90:77:1f:c4:b0:4f
Signer

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 6KB - Virtual size: 97KB

.slu
Size: 279KB - Virtual size: 278KB

.fhpyv
Size: 120KB - Virtual size: 120KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 4KB