caf901834cb348f18d696727ead9863d

Sharing

Copy URL Twitter E-mail

General

Target

caf901834cb348f18d696727ead9863d
Size

3.7MB
MD5

caf901834cb348f18d696727ead9863d
SHA1

71d7b442f1adbd96983ce8866a90c63f2094f2d2
SHA256

732c0410ab89f33d0fbe718d6b5843c5df519057a9e3fd887ddf0354537de326
SHA512

01b90a2061de30eada4f55498b0067840f0b891986f7faa0d9963bfc530b2bf2f859242838b1391799c745984d5aa9099c5e33b306d8da7ea55172bfafcb7511
SSDEEP

98304:pg/iiHoiFMojQbpdGxsJf4o+J9cOMwizoMW9QOkZs0lslEhL:m/VHPQbpdT4zYzqeOkFAk

Score

1^/10

Malware Config

Signatures

Files

caf901834cb348f18d696727ead9863d
.rar
jukebox.exe
.exe windows:4 windows x86 arch:x86

39cb7aad2d65cbfda824d62aa4bcc39f

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

dc:ac:c4:0c:22:09:ce:23:5b:c4:fe:58:85:28:37:bd
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

15/09/2008, 00:00

Not After

15/09/2009, 23:59

Subject

CN=Gammadyne Corporation,O=Gammadyne Corporation,POSTALCODE=66212,STREET=10025 Mastin,L=Overland Park,ST=KS,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

71:bc:98:65:ad:8c:74:b4:c7:58:f4:cc:3b:65:eb:87:6f:24:04:99
Signer

Actual PE Digest

71:bc:98:65:ad:8c:74:b4:c7:58:f4:cc:3b:65:eb:87:6f:24:04:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

GetTempFileNameA
GetShortPathNameA
FindNextFileA
CreateDirectoryA
CreateFileA
DeleteFileA
MoveFileA
WritePrivateProfileStringA
FreeEnvironmentStringsA
GetEnvironmentStrings
HeapCreate
HeapDestroy
GetProcessHeap
HeapSize
GetExitCodeProcess
GetLastError
SetLastError
GetVersionExA
GetTickCount
GetCurrentProcess
ExpandEnvironmentStringsA
WaitForSingleObject
LocalFree
FormatMessageA
GetWindowsDirectoryA
GetTempPathA
LocalAlloc
MultiByteToWideChar
GetSystemDirectoryA
InterlockedDecrement
GetCurrentThread
GetCurrentThreadId
InterlockedIncrement
GetDiskFreeSpaceA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
RtlUnwind
HeapReAlloc
HeapAlloc
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
TerminateProcess
IsDebuggerPresent
VirtualFree
VirtualAlloc
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RemoveDirectoryA
GetCurrentDirectoryA
WriteFile
ReadFile
FindFirstFileA
FileTimeToLocalFileTime
SetFileAttributesA
GetFileAttributesA
GetDriveTypeA
SetCurrentDirectoryA
FindClose
UnlockFile
UnmapViewOfFile
SetFilePointer
FlushFileBuffers
SetFileTime
SetEndOfFile
LocalFileTimeToFileTime
GetModuleFileNameA
SystemTimeToFileTime
FileTimeToSystemTime
GetTimeZoneInformation
GetLocalTime
GetCommandLineA
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLocaleInfoA
CreateProcessA
CloseHandle
Sleep
ExitProcess

user32

GetSystemMetrics
LoadCursorA
SetCursor
GetSysColor
GetWindowTextA
GetWindowTextLengthA
DestroyWindow
EnableWindow
InvalidateRect
GetWindowRect
MoveWindow
ExitWindowsEx
RegisterClassA
SystemParametersInfoA
SetForegroundWindow
SetActiveWindow
DefWindowProcA
GetClientRect
FillRect
BeginPaint
EndPaint
DialogBoxParamA
EndDialog
SendDlgItemMessageA
CreateDialogParamA
GetWindowPlacement
CreateWindowExA
SetWindowTextA
GetDlgItem
SetDlgItemTextA
UpdateWindow
SendMessageA
PostMessageA
MessageBoxA
ShowWindow
PeekMessageA
TranslateMessage
DispatchMessageA

gdi32

SelectObject
CreateSolidBrush
TextOutA
SetTextJustification
GetDeviceCaps
GetTextExtentPoint32A
CreateFontA
SetBkMode
SetTextColor
StretchDIBits
DeleteObject
RemoveFontResourceA
AddFontResourceA

advapi32

RegDeleteKeyA
OpenThreadToken
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationA
ShellExecuteA
SHBrowseForFolderA

ole32

OleInitialize
CoCreateInstance
OleUninitialize

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.seau
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

39cb7aad2d65cbfda824d62aa4bcc39f

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

dc:ac:c4:0c:22:09:ce:23:5b:c4:fe:58:85:28:37:bdCertificate

Extended Key Usages

Key Usages

71:bc:98:65:ad:8c:74:b4:c7:58:f4:cc:3b:65:eb:87:6f:24:04:99Signer

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 229KB - Virtual size: 228KB

.rdata Size: 77KB - Virtual size: 76KB

.data Size: 7KB - Virtual size: 15KB

.rsrc Size: 6KB - Virtual size: 5KB

.seau Size: 3.7MB - Virtual size: 3.7MB

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

dc:ac:c4:0c:22:09:ce:23:5b:c4:fe:58:85:28:37:bd
Certificate

71:bc:98:65:ad:8c:74:b4:c7:58:f4:cc:3b:65:eb:87:6f:24:04:99
Signer

.text
Size: 229KB - Virtual size: 228KB

.rdata
Size: 77KB - Virtual size: 76KB

.data
Size: 7KB - Virtual size: 15KB

.rsrc
Size: 6KB - Virtual size: 5KB

.seau
Size: 3.7MB - Virtual size: 3.7MB