e0590a93b9c6ae17b7922556a9d40c16

Sharing

Copy URL Twitter E-mail

General

Target

e0590a93b9c6ae17b7922556a9d40c16
Size

305KB
MD5

e0590a93b9c6ae17b7922556a9d40c16
SHA1

ec426c651727ef6864a48ef9a03470267e7eb654
SHA256

06c193579679ed28a253303b8e155965cf3b95e09cc89330fce7797b92785f4a
SHA512

a1cc42bda8976203b87b235ed211d2f4deedf38afeb9d94afa1166fb3933ebe7c9abc2ef1143ae68c0445ab09b48ca641c48f7d1f8b68935ccbbc11a15116553
SSDEEP

6144:McOuatq9nLtnGR9XACo5TdW+UKaG4JFW/gRVzgUEjRDrviICU:McO9t6ZnGLX/yZaKP4J02FartJ

Score

1^/10

Malware Config

Signatures

Files

e0590a93b9c6ae17b7922556a9d40c16
.exe windows:4 windows x86 arch:x86

90c5e8b803f6840f6b45ca4657761447

Code Sign

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1
Certificate

Issuer

CN=drVoA01yoqkQ

Not Before

14/03/2012, 05:55

Not After

31/12/2039, 23:59

Subject

CN=drVoA01yoqkQ

Extended Key Usages

ExtKeyUsageCodeSigning

2d:c8:a3:8a:9b:4e:da:82:60:35:b4:71:51:82:ba:bf:b3:b9:38:56
Signer

Actual PE Digest

2d:c8:a3:8a:9b:4e:da:82:60:35:b4:71:51:82:ba:bf:b3:b9:38:56

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetLogicalDriveStringsA
LoadLibraryA
GetProcAddress
lstrcpyW
LoadLibraryW
VirtualAlloc
ReadConsoleA
FreeLibrary
WaitForMultipleObjects
GetCurrentDirectoryA
GetCompressedFileSizeA
FileTimeToDosDateTime
SetNamedPipeHandleState
GetCPInfo
GetBinaryTypeW
RequestWakeupLatency
AddConsoleAliasA
GetProfileStringA
CancelWaitableTimer
DebugBreak
DefineDosDeviceA
GetThreadContext
InitAtomTable
FoldStringA
GetFileTime
GetCPInfoExW
GetConsoleAliasExesLengthA
CancelTimerQueueTimer
EnumTimeFormatsA
GetUserDefaultLangID
GetFileSizeEx
GlobalAlloc
GetPrivateProfileStringW
GetACP
SetFileAttributesA
GetVolumePathNameA
EnterCriticalSection
FindFirstFileExW
CreateEventW
GetEnvironmentVariableW
Process32FirstW
CreateRemoteThread
WaitNamedPipeW
GetTimeZoneInformation
GetCPInfoExA
CreateDirectoryA
GetConsoleOutputCP
FlushConsoleInputBuffer
GetNumberOfConsoleInputEvents
GetConsoleAliasExesLengthW
GetConsoleAliasesA
WaitForSingleObjectEx
GetTimeFormatW
SetThreadLocale
_lwrite
InterlockedExchange
Module32FirstW
SetFileApisToOEM
lstrlen
LoadLibraryExW
WritePrivateProfileSectionW
GlobalDeleteAtom
GlobalHandle
GetConsoleAliasesW
EnumResourceTypesA
SetLocaleInfoA
GetTimeFormatA
DuplicateHandle
VerifyVersionInfoW
SetConsoleMode
GetCompressedFileSizeW
lstrcatW
WriteProfileSectionW
WriteConsoleInputA
EnumUILanguagesA
LockFile
GetCommState
FreeEnvironmentStringsW
WriteConsoleOutputW
_lopen
GetShortPathNameA
EnumLanguageGroupLocalesW
ResetWriteWatch
SetCommTimeouts
ReadConsoleOutputAttribute
EnumSystemCodePagesA
GetConsoleWindow
GetSystemInfo
FindFirstVolumeA
VerifyVersionInfoA
CompareFileTime
GetLongPathNameW
GetDiskFreeSpaceW
FindFirstFileA
VerLanguageNameA
lstrcmpA
PeekConsoleInputA

user32

mouse_event
InsertMenuA
GetClipboardOwner
RegisterDeviceNotificationW
GetQueueStatus
GetClipboardViewer
SetWindowPos
WINNLSGetIMEHotkey
SendNotifyMessageA
OemToCharA
GetPropA
GetThreadDesktop
GetAltTabInfoW
InsertMenuW
MonitorFromWindow
EndPaint
CloseWindowStation
CharNextW
SetWindowPlacement
BringWindowToTop
CallMsgFilter
GrayStringW
GetUserObjectInformationA
CharPrevW
GetScrollRange
DestroyWindow
SendMessageA
NotifyWinEvent
DrawEdge
DlgDirSelectExW
GetSysColor
UnloadKeyboardLayout
RealGetWindowClass
CharLowerW
DdeInitializeW
SendMessageCallbackA
ShowWindowAsync
GetWindowTextLengthA
IMPQueryIMEA
MessageBeep
LoadStringW
OpenWindowStationA
ChangeMenuA
GetKeyboardLayoutNameA
SetProcessWindowStation
GetCursor
GetClipboardSequenceNumber
ArrangeIconicWindows
LoadCursorFromFileA
ImpersonateDdeClientWindow
SetParent
ShowScrollBar
UnpackDDElParam
RegisterWindowMessageA
DestroyIcon
InvalidateRect
OemToCharW
GetLastActivePopup
GetDCEx
MoveWindow
GetMenuItemRect
CharLowerBuffW
GetMenuDefaultItem
MapDialogRect
GetKeyboardState
LoadImageW
LoadBitmapW
SetMenuItemInfoA
VkKeyScanA
SetClipboardData
GetMessageA
ChangeClipboardChain
DdeFreeDataHandle
GetClipboardFormatNameW
SetWindowLongA
SetClassLongA
IsIconic
DefWindowProcW
PostThreadMessageA
ReleaseCapture
LoadImageA
DialogBoxParamW
TrackPopupMenu
GetWindowPlacement
IsDialogMessageA
DefDlgProcW
GetDesktopWindow
CharUpperBuffA
ScrollWindowEx
DlgDirSelectComboBoxExA
CloseWindow
GetMenuItemInfoW
DdeUninitialize
FindWindowA
wvsprintfA
SendIMEMessageExA

shell32

SHEmptyRecycleBinA
ShellExecuteW
SHGetFolderPathA
DragQueryFile
DragQueryFileA
SHLoadNonloadedIconOverlayIdentifiers
ExtractAssociatedIconA
SHBrowseForFolderA
ExtractIconExA
SHGetSpecialFolderPathW
SHGetDiskFreeSpaceA
SHCreateDirectoryExW
FindExecutableA
SHCreateDirectoryExA
SHGetIconOverlayIndexW
SHCreateProcessAsUserW
SHPathPrepareForWriteA
SHInvokePrinterCommandW
SHBrowseForFolderW
SHGetDesktopFolder
SHBrowseForFolder
SHGetPathFromIDListW
SHGetSettings
SHGetFolderPathW
SHGetDiskFreeSpaceExW
SHAppBarMessage
SHGetDataFromIDListW
ShellExecuteExW
ExtractIconW
SHPathPrepareForWriteW
DuplicateIcon
SHGetPathFromIDListA
DragFinish

shlwapi

StrStrIW
StrRChrA
StrStrW

Sections

.text
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90c5e8b803f6840f6b45ca4657761447

Code Sign

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1Certificate

Extended Key Usages

2d:c8:a3:8a:9b:4e:da:82:60:35:b4:71:51:82:ba:bf:b3:b9:38:56Signer

Headers

File Characteristics

Imports

kernel32

user32

shell32

shlwapi

Sections

.text Size: 290KB - Virtual size: 289KB

.text3 Size: 1024B - Virtual size: 1000B

.text2 Size: 1024B - Virtual size: 968B

.data Size: 7KB - Virtual size: 6KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1
Certificate

2d:c8:a3:8a:9b:4e:da:82:60:35:b4:71:51:82:ba:bf:b3:b9:38:56
Signer

.text
Size: 290KB - Virtual size: 289KB

.text3
Size: 1024B - Virtual size: 1000B

.text2
Size: 1024B - Virtual size: 968B

.data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB