cb19dc931aaeb19d89cd0e754e24094f

Sharing

Copy URL

Twitter E-mail

General

Target

cb19dc931aaeb19d89cd0e754e24094f
Size

219KB
MD5

cb19dc931aaeb19d89cd0e754e24094f
SHA1

20c194389442633135e962d0f0ad17c3a3fdaddf
SHA256

b8774eb7f84e745d2fd1fb0bca66eb0ef9a9b77fd72128c58209dca90f18b9fb
SHA512

44f3436cc6e4ba5df77fdd26e7a28170a9cab40623309a5c4ddde6375151615d68c40a262c78110aef6b485ed19ad329cba752b2a56a4c5656460782f2616f39
SSDEEP

3072:eO1gx2h4gjRcoZ+LZG+AJ6DfscHeVmsOqFfPE6D3fVTa:51fNeHZGF6DUcHU6qxhD3fVTa

Score

1^/10

Malware Config

Signatures

Files

cb19dc931aaeb19d89cd0e754e24094f
.dll windows:5 windows x86 arch:x86

a12eaafd4b27cf1f6a98d2322c9f425a

Code Sign

70:42:24:38:dc:0c:b5:bb:48:b4:2b:60:09:8a:af:4c
Certificate

Issuer

CN=Djrb

Not Before

25/06/2012, 18:04

Not After

31/12/2039, 23:59

Subject

CN=Djrb

Extended Key Usages

ExtKeyUsageCodeSigning

95:2c:9c:23:be:2b:20:9a:81:94:9a:eb:d7:4b:ba:44:40:bb:a4:6e
Signer

Actual PE Digest

95:2c:9c:23:be:2b:20:9a:81:94:9a:eb:d7:4b:ba:44:40:bb:a4:6e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumResourceNamesW
EnumSystemLanguageGroupsA
FindNextVolumeMountPointA
FormatMessageA
GetCurrentThreadId
GetModuleHandleA
GetPrivateProfileStringA
GetShortPathNameA
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetTickCount
GetVersionExA
DeleteFileA
LCMapStringW
MoveFileA
MultiByteToWideChar
OpenFileMappingW
OpenMutexW
PrepareTape
SetLastError
SetThreadAffinityMask
SetThreadPriorityBoost
Thread32Next
WriteFileEx
WriteProfileSectionW
VirtualAllocEx
CreateFileW
lstrcatW
GlobalFindAtomW
GetWindowsDirectoryW

user32

EndPaint
BeginPaint
UpdateWindow
ScrollWindow
SetScrollPos
SetScrollRange
ReleaseDC
GetDC
AppendMenuA
CallMsgFilterW
CallWindowProcW
CascadeWindows
ChangeDisplaySettingsW
CharToOemA
CharUpperW
CheckMenuItem
ChildWindowFromPoint
CloseDesktop
CopyAcceleratorTableA
CopyImage
CopyRect
CreateIconFromResourceEx
CreateMDIWindowA
CreatePopupMenu
DdeClientTransaction
DdeCreateStringHandleW
DdeFreeStringHandle
DdePostAdvise
DdeQueryStringW
DdeSetQualityOfService
DeregisterShellHookWindow
DrawStateA
DrawStateW
EndDialog
PostQuitMessage
EnumChildWindows
GetAltTabInfo
GetAsyncKeyState
GetClassLongW
GetClassNameW
GetClipboardOwner
GetClipboardSequenceNumber
GetComboBoxInfo
GetInputState
GetKeyboardLayout
GetLastActivePopup
GetMenuItemID
GetMessageA
GetProcessWindowStation
GetScrollPos
GetScrollRange
GetSubMenu
GetUpdateRect
GetWindowDC
GetWindowLongW
GetWindowRgn
GetWindowThreadProcessId
GetWindowWord
IMPGetIMEA
IMPQueryIMEA
IMPSetIMEW
InSendMessageEx
InsertMenuItemA
IsCharAlphaNumericW
IsCharUpperW
IsDialogMessageA
LoadKeyboardLayoutW
LockWorkStation
MoveWindow
OemToCharBuffW
OemToCharW
OpenWindowStationA
RealChildWindowFromPoint
RegisterDeviceNotificationW
RemoveMenu
ScrollDC
SendDlgItemMessageA
SendMessageCallbackW
SendMessageW
SendNotifyMessageW
SetClassLongW
SetDlgItemTextW
SetForegroundWindow
SetScrollInfo
SetSysColors
SetWindowWord
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutA
TileWindows
ToAscii
TrackPopupMenuEx
TranslateMessage
UnhookWinEvent
UnhookWindowsHookEx
VkKeyScanA
VkKeyScanExA
WaitForInputIdle
WindowFromDC
DefWindowProcA
LoadIconA
CreateWindowExA
RegisterClassExA
EndMenu

gdi32

GetTextMetricsA
TextOutA

advapi32

RegOpenKeyExA

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data8
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a12eaafd4b27cf1f6a98d2322c9f425a

Code Sign

70:42:24:38:dc:0c:b5:bb:48:b4:2b:60:09:8a:af:4cCertificate

Extended Key Usages

95:2c:9c:23:be:2b:20:9a:81:94:9a:eb:d7:4b:ba:44:40:bb:a4:6eSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 193KB - Virtual size: 192KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 4KB

.data8 Size: 2KB - Virtual size: 1KB

.data7 Size: 2KB - Virtual size: 1KB

.data6 Size: 2KB - Virtual size: 1KB

.data5 Size: 2KB - Virtual size: 1KB

.data4 Size: 2KB - Virtual size: 1KB

.data3 Size: 2KB - Virtual size: 1KB

.data2 Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

70:42:24:38:dc:0c:b5:bb:48:b4:2b:60:09:8a:af:4c
Certificate

95:2c:9c:23:be:2b:20:9a:81:94:9a:eb:d7:4b:ba:44:40:bb:a4:6e
Signer

.text
Size: 193KB - Virtual size: 192KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 4KB

.data8
Size: 2KB - Virtual size: 1KB

.data7
Size: 2KB - Virtual size: 1KB

.data6
Size: 2KB - Virtual size: 1KB

.data5
Size: 2KB - Virtual size: 1KB

.data4
Size: 2KB - Virtual size: 1KB

.data3
Size: 2KB - Virtual size: 1KB

.data2
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB