VirusShare_e63590eebd4e2d869181b6b04876c046

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare_e63590eebd4e2d869181b6b04876c046
Size

182KB
MD5

e63590eebd4e2d869181b6b04876c046
SHA1

50baae41628ab8c00c3bad232003a11201e68378
SHA256

86c6c4787c97da40fa0faf0cccf8e4d7f4e67a246c0b0536043e79ea4e46a21f
SHA512

92e78b0ee23f41bc37ebf85be7f360d68d076b29fb5478b861684e7b2630f71e60e2f4ce0f38143037653deb2d9b51f01dd3581a86cd00c1339305f3cf4f2eb8
SSDEEP

3072:6QyeAYW4RqElOsenPG6PlSe2Wh8tZERpBp7NC6aG9fRq8/M1zKrevsEtCMuzsAaI:6DeHWSasenu6N7hMiBp7b08czkNd

Score

1^/10

Malware Config

Signatures

Files

VirusShare_e63590eebd4e2d869181b6b04876c046
.dll windows:5 windows x86 arch:x86

fb87e74767c85c2aa93187aee333079a

Code Sign

13:b3:4e:1d:69:91:2c:6a:b8:e2:12:62:4e:d2:90:78
Certificate

Issuer

CN=jjjjjjjjjjjjjjjjjjjjjjjjjjjjj fn8AwyxcI5Hv7wdylBExwms6gFe8oJmgE6e 6yhbLAsHHy4pbrmpiiBdFEuh5dnmn2DLu4aeGDvfjJeiIbzw15ebp98MwLgwFLhBjAswrHnAMEt idMgejJG6p4mDGwdB2zm8ei7K4gpJxKbJvav 2wrBhJJLetFa2m3IHD8LopnIq61cAav13s9ttwJ1j6LsJC8f3lKyLdKjaLflntdKnHyMFMbqDwMto3yF KkulB4mlIaGL6j7CA EKsK1D3HtHeDKfL8suBrGJLJjsm26vmCKFzn1gpby5Gq25FLCvwqgglJkBAFhAjyhqo1dLvk3du9co5eHImwrfnz b94 oJddD8ie4r5qwrufsLw7f64ijk4o99pjIqfet5yGwJGl7mJ9kLHHKe3xJ vlars71D8rEh Kj3JxlB1dqq5gagcxbJB DpdymojFznbi2lmeq21 umo zp56p4956o3rrnxmzev6wt5HGqbwpxKCskC9DKA77MbjlADg17IAadmwnDftamclfwL96AFn9htlxkDAMiohuCEhBB9G7tu9K8wKippAn15aDC2iF sEe4qeha812kq 2xbEyIfzazmeazmF1EL2hkmHqFrj3xyKDiEl6AhlrDetc16oFjg22qof4GxhHJcDi2yk7tyGwgFI2JBjIaeJyL 5 pvmdgkfu2w8MEz1magM9rDkL5K9g DG49as2M2rqcw 2tsc6IIhkJA7srbbk94Jitk6rDx8BBx5IFaD4jqbrfrzytMnasJ2wAuoLneH3rCAbsgGgeIxHEhs8GAHo5tkvJkAvyru7tL9y3lbmBrxhsyzqCy1t9uIidzzsaMrLqGjsv66cpAhLywIJcAahqhs jzqF8wzu34dpptB38tC nKfJzlnL53bjl6d1Hcnat2uvcqgLCHEpm5sEIbuBctHAa7B4qF CKvtvFfettfHjsI6iFwAK1h61o33Ah64Bslqzof7bjlAqLeuzJe61tg6B 9HjHfod6hCuu1zeE9nkCgLx2G9brvH6F5g9y5FC7Arv8raEAl3HMEg8fJ8w1IcxgkM5rrKdnEHsGpgyuFHJfCwBGAwuxjwzJ4n joMehxq1lLywfE3tgpgwMbdLg dg1lJuiiJdKeFEv5wMe iKu4Mw1D CE916gEe1Iyylkp86zsJzyut Bzz1zsDaqffwBqb2r5MGqdpHJe1uqafuqCHxEpDqDABMxdiuH4sm94pc1v3f2Knm HIemyuaDge8g2f4pppA1suf4GKfcIfLKdblybwCp4ra274gFuf8ak34E4mGzGIGssuChqJJ9mwzwxz1dq9xjgE2n5 J8eiAF6D6BhKoCaK vuKIan83bzt4v mGdeyK1w6AAvFl91ekcheGemqtuK7Fkxtli sflbfuwc4eoA385p1fc3wgshIIls9scBt3f98aBiFJzwx9fg4pjMnFL2MkfcHLy Msce28jaH7kt3rfmmqbDtiiADlaJyg8H3qBlBxExldjw2Bvyml9Ht4C84z6klM46k DFtqd5FtbejahFFveDH1C1gMx9G1u3uhup5g4 pnfyjb7xEDIB1oz7 LAJg99vk 9725sh8 1ys9391534bf2xkjzaHnjdlGy2vw4w2jn23DGKF1rGbeD6KD3AJaM14yxswnErezMD6b9Gg5o8pnsJGr15i1vbLFaeHyE9JLkawK4lpriI63AmrEBAxthIz5psM17ymkj6KbpKF53aEH5Bt1vGEbd8MIs1f AKEoLDc Ig AJg7JL7yoxuhBsa4kKz4k7rH tlCo axtpdcqft7n4zwI1Aiv3LDhrllqcrfLrMf89oH 4ywbqGB3pDMG3hizbjjuslfFA5mgCGezn L3LHhHBsIldbgnid49y4FMa6M6e44fmIDo159BjAo7KhhkzCFmuDvo7IK1GHvBKggMIB1giqd7FDAe llllllllllllllllllllllll

Not Before

31/12/2012, 07:09

Not After

31/12/2039, 23:59

Subject

CN=jjjjjjjjjjjjjjjjjjjjjjjjjjjjj fn8AwyxcI5Hv7wdylBExwms6gFe8oJmgE6e 6yhbLAsHHy4pbrmpiiBdFEuh5dnmn2DLu4aeGDvfjJeiIbzw15ebp98MwLgwFLhBjAswrHnAMEt idMgejJG6p4mDGwdB2zm8ei7K4gpJxKbJvav 2wrBhJJLetFa2m3IHD8LopnIq61cAav13s9ttwJ1j6LsJC8f3lKyLdKjaLflntdKnHyMFMbqDwMto3yF KkulB4mlIaGL6j7CA EKsK1D3HtHeDKfL8suBrGJLJjsm26vmCKFzn1gpby5Gq25FLCvwqgglJkBAFhAjyhqo1dLvk3du9co5eHImwrfnz b94 oJddD8ie4r5qwrufsLw7f64ijk4o99pjIqfet5yGwJGl7mJ9kLHHKe3xJ vlars71D8rEh Kj3JxlB1dqq5gagcxbJB DpdymojFznbi2lmeq21 umo zp56p4956o3rrnxmzev6wt5HGqbwpxKCskC9DKA77MbjlADg17IAadmwnDftamclfwL96AFn9htlxkDAMiohuCEhBB9G7tu9K8wKippAn15aDC2iF sEe4qeha812kq 2xbEyIfzazmeazmF1EL2hkmHqFrj3xyKDiEl6AhlrDetc16oFjg22qof4GxhHJcDi2yk7tyGwgFI2JBjIaeJyL 5 pvmdgkfu2w8MEz1magM9rDkL5K9g DG49as2M2rqcw 2tsc6IIhkJA7srbbk94Jitk6rDx8BBx5IFaD4jqbrfrzytMnasJ2wAuoLneH3rCAbsgGgeIxHEhs8GAHo5tkvJkAvyru7tL9y3lbmBrxhsyzqCy1t9uIidzzsaMrLqGjsv66cpAhLywIJcAahqhs jzqF8wzu34dpptB38tC nKfJzlnL53bjl6d1Hcnat2uvcqgLCHEpm5sEIbuBctHAa7B4qF CKvtvFfettfHjsI6iFwAK1h61o33Ah64Bslqzof7bjlAqLeuzJe61tg6B 9HjHfod6hCuu1zeE9nkCgLx2G9brvH6F5g9y5FC7Arv8raEAl3HMEg8fJ8w1IcxgkM5rrKdnEHsGpgyuFHJfCwBGAwuxjwzJ4n joMehxq1lLywfE3tgpgwMbdLg dg1lJuiiJdKeFEv5wMe iKu4Mw1D CE916gEe1Iyylkp86zsJzyut Bzz1zsDaqffwBqb2r5MGqdpHJe1uqafuqCHxEpDqDABMxdiuH4sm94pc1v3f2Knm HIemyuaDge8g2f4pppA1suf4GKfcIfLKdblybwCp4ra274gFuf8ak34E4mGzGIGssuChqJJ9mwzwxz1dq9xjgE2n5 J8eiAF6D6BhKoCaK vuKIan83bzt4v mGdeyK1w6AAvFl91ekcheGemqtuK7Fkxtli sflbfuwc4eoA385p1fc3wgshIIls9scBt3f98aBiFJzwx9fg4pjMnFL2MkfcHLy Msce28jaH7kt3rfmmqbDtiiADlaJyg8H3qBlBxExldjw2Bvyml9Ht4C84z6klM46k DFtqd5FtbejahFFveDH1C1gMx9G1u3uhup5g4 pnfyjb7xEDIB1oz7 LAJg99vk 9725sh8 1ys9391534bf2xkjzaHnjdlGy2vw4w2jn23DGKF1rGbeD6KD3AJaM14yxswnErezMD6b9Gg5o8pnsJGr15i1vbLFaeHyE9JLkawK4lpriI63AmrEBAxthIz5psM17ymkj6KbpKF53aEH5Bt1vGEbd8MIs1f AKEoLDc Ig AJg7JL7yoxuhBsa4kKz4k7rH tlCo axtpdcqft7n4zwI1Aiv3LDhrllqcrfLrMf89oH 4ywbqGB3pDMG3hizbjjuslfFA5mgCGezn L3LHhHBsIldbgnid49y4FMa6M6e44fmIDo159BjAo7KhhkzCFmuDvo7IK1GHvBKggMIB1giqd7FDAe llllllllllllllllllllllll

Extended Key Usages

ExtKeyUsageCodeSigning

68:0e:96:21:d6:88:cc:e9:0e:27:2f:da:c6:8d:53:03:d5:e9:ec:31
Signer

Actual PE Digest

68:0e:96:21:d6:88:cc:e9:0e:27:2f:da:c6:8d:53:03:d5:e9:ec:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
VirtualAlloc
GetStartupInfoA
ReadFile
GetModuleHandleW
GetModuleFileNameW
CloseHandle
GetCurrentThreadId
GetCurrentProcess
GetCommandLineW
ExitProcess
CreateProcessW

user32

GetScrollRange
DrawTextA

gdi32

SetLayout
TranslateCharsetInfo
TextOutA
CloseMetaFile
CopyMetaFileA
CreateFontIndirectA
CreateMetaFileA
DeleteObject
GetDeviceCaps
GetLayout
SetWindowOrgEx
GetTextExtentPoint32A
PatBlt
SelectObject
SetBkColor
SetBkMode
GetStockObject
SetTextAlign
SetTextColor
SetWindowExtEx

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegOpenKeyW
RegSetValueA

shell32

DragFinish
DragAcceptFiles
DragQueryFileA
ShellExecuteExA
ShellAboutA
ExtractAssociatedIconA

wininet

CreateUrlCacheEntryA
DeleteUrlCacheEntry
CommitUrlCacheEntryA

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_vsnprintf
exit
memmove
strchr

Sections

.text4
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb87e74767c85c2aa93187aee333079a

Code Sign

13:b3:4e:1d:69:91:2c:6a:b8:e2:12:62:4e:d2:90:78Certificate

Extended Key Usages

68:0e:96:21:d6:88:cc:e9:0e:27:2f:da:c6:8d:53:03:d5:e9:ec:31Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

wininet

msvcrt

Sections

.text4 Size: 512B - Virtual size: 500B

.text3 Size: 512B - Virtual size: 500B

.text2 Size: 512B - Virtual size: 500B

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 168B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 136KB - Virtual size: 135KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 1024B - Virtual size: 858B

13:b3:4e:1d:69:91:2c:6a:b8:e2:12:62:4e:d2:90:78
Certificate

68:0e:96:21:d6:88:cc:e9:0e:27:2f:da:c6:8d:53:03:d5:e9:ec:31
Signer

.text4
Size: 512B - Virtual size: 500B

.text3
Size: 512B - Virtual size: 500B

.text2
Size: 512B - Virtual size: 500B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 168B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 136KB - Virtual size: 135KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 1024B - Virtual size: 858B