General

Malware Config

Signatures

Files

• dfa3325a73eefbcd94b66c1368fa216c

  .exe windows:4 windows x86 arch:x86

  2b600198d1b9976888651e77020ca5fa

  
  

  Code Sign

  3a:e0:47:fe:97:62:16:93:4c:26:7e:e9:25:84:38:28

  Certificate

  Issuer

  CN=v19j

  Not Before

  30-05-2012 07:48

  Not After

  31-12-2039 23:59

  Subject

  CN=v19j

  Extended Key Usages

  ExtKeyUsageCodeSigning

  75:12:30:aa:f4:d4:5d:e3:9b:ef:16:c6:c5:b3:81:c2:19:6c:d3:7d

  Signer

  Actual PE Digest

  75:12:30:aa:f4:d4:5d:e3:9b:ef:16:c6:c5:b3:81:c2:19:6c:d3:7d

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetWindowsDirectoryW

  lstrcatW

  CreateFileW

  VirtualAllocEx

  CloseHandle

  WriteFile

  GetModuleHandleW

  GetProcAddress

  user32

  GetDC

  ReleaseDC

  InvalidateRect

  BeginPaint

  ScrollWindow

  EndPaint

  PostQuitMessage

  DefWindowProcA

  gdi32

  GetStockObject

  SelectObject

  GetTextMetricsA

  SetBkMode

  TextOutA

  advapi32

  RegCloseKey

  Sections

  .text

  Size: 53KB - Virtual size: 53KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data4

  Size: 1024B - Virtual size: 1000B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data3

  Size: 1024B - Virtual size: 1000B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data2

  Size: 1024B - Virtual size: 1000B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 280B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ