179ca9dd2ae323d92379157c27dd76a632f16f8ff4c2955cf25d879752f1017b

Sharing

Copy URL Twitter E-mail

General

Target

179ca9dd2ae323d92379157c27dd76a632f16f8ff4c2955cf25d879752f1017b
Size

94KB
MD5

b18bd12e615dca9094aac74740f0d154
SHA1

b0d6351da9247f6d204a6aa455f38e24973bb807
SHA256

179ca9dd2ae323d92379157c27dd76a632f16f8ff4c2955cf25d879752f1017b
SHA512

5196f164da9ab296704bfbc9109292a94ba31f21f37cf9cf5460984e90236cf1006cc692fb2810de249fab17e1716ece4e1dff301ec06c23d934aaca0c4260a4
SSDEEP

1536:1n96rivoph2JdIocK+F/LdmStGALADM676MunBSGXt:N96Aoph27UTtLsvet

Score

1^/10

Malware Config

Signatures

Files

179ca9dd2ae323d92379157c27dd76a632f16f8ff4c2955cf25d879752f1017b
.exe windows:4 windows x86 arch:x86

3ce591975e0ea7c61e7535a3ffe86d12

Code Sign

01
Certificate

Issuer

O=VAVAVAV,L=GAFAF,ST=GFFA,C=TQ

Not Before

17/04/2014, 00:39

Not After

16/04/2016, 00:39

Subject

CN=SO LOVE,OU=IN MY HEART MY LOVE,O=FORVER YOURS,L=ILOVEYOU,ST=ASD,C=LL

cc:a8:76:38:cd:43:ba:3b:50:43:6c:3f:d5:b7:bb:5e:56:71:1f:8a
Signer

Actual PE Digest

cc:a8:76:38:cd:43:ba:3b:50:43:6c:3f:d5:b7:bb:5e:56:71:1f:8a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
free
fwrite
rand
signal
vfprintf

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ce591975e0ea7c61e7535a3ffe86d12

Code Sign

01Certificate

cc:a8:76:38:cd:43:ba:3b:50:43:6c:3f:d5:b7:bb:5e:56:71:1f:8aSigner

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 20KB - Virtual size: 19KB

.rdata Size: 512B - Virtual size: 292B

/4 Size: 512B - Virtual size: 228B

.bss Size: - Virtual size: 19KB

.idata Size: 1024B - Virtual size: 928B

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 63KB - Virtual size: 64KB

01
Certificate

cc:a8:76:38:cd:43:ba:3b:50:43:6c:3f:d5:b7:bb:5e:56:71:1f:8a
Signer

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 20KB - Virtual size: 19KB

.rdata
Size: 512B - Virtual size: 292B

/4
Size: 512B - Virtual size: 228B

.bss
Size: - Virtual size: 19KB

.idata
Size: 1024B - Virtual size: 928B

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 63KB - Virtual size: 64KB