5867a92c7deb7cc9cac152e545b7ca6609ba4f02f54d97d7abb0d8a632bc8174

Sharing

Copy URL Twitter E-mail

General

Target

5867a92c7deb7cc9cac152e545b7ca6609ba4f02f54d97d7abb0d8a632bc8174
Size

8.2MB
MD5

791c42e185931c4efbd31a375b1f6e4e
SHA1

f84f6fe077c3d88363ae25f7a9656b2430ba9cbd
SHA256

5867a92c7deb7cc9cac152e545b7ca6609ba4f02f54d97d7abb0d8a632bc8174
SHA512

e22fba7a83fa6bfc9cf3330c6c5d726a92ebb659581594995ecea14e6a0bc1a728ae7fedffdeae1e7374f74df9d5809fb5dc33b281c9c75fde160a63437e19a7
SSDEEP

196608:ObIhs60p8tcrNthgXcYJAkEJHjMgiinpojDIg9CbFbVq/V8ggI:E6Cr1YuqiwDCbcgI

Score

1^/10

Malware Config

Signatures

Files

5867a92c7deb7cc9cac152e545b7ca6609ba4f02f54d97d7abb0d8a632bc8174
.exe windows:5 windows x86 arch:x86

a804fb9d6d028479c686042c79af8a39

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

2d:af:fb:7a:20:58:8a:40:87:11:b7:98:fd:3d:fc:f8
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

07/01/2013, 00:00

Not After

07/01/2015, 23:59

Subject

CN=福州创意嘉和软件有限公司,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=技术中心,O=福州创意嘉和软件有限公司,L=FuZhou,ST=FuJian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:02:fb:51:99:2c:19:b9:ed:65:e6:aa:10:71:12:cc:20:d2:20:83
Signer

Actual PE Digest

23:02:fb:51:99:2c:19:b9:ed:65:e6:aa:10:71:12:cc:20:d2:20:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EncodePointer
DecodePointer
VirtualQuery
ExitThread
GetDriveTypeA
FindFirstFileExA
ExitProcess
GetTimeFormatA
GetDateFormatA
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
HeapCreate
GetStdHandle
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetFileInformationByHandle
GetCurrentDirectoryW
GetCurrentDirectoryA
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
CompareStringW
GetDriveTypeW
FindResourceExW
WriteConsoleW
SetEnvironmentVariableA
CreateFileW
SetErrorMode
GetACP
GetOEMCP
GetCPInfo
GlobalFlags
GetDiskFreeSpaceA
GetTempFileNameA
ReplaceFileA
GetUserDefaultLCID
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
TlsFree
LocalReAlloc
GetThreadContext
SetThreadContext
FlushInstructionCache
TerminateThread
SleepEx
GetLocalTime
CreateToolhelp32Snapshot
Module32First
Module32Next
QueryPerformanceFrequency
CreateMutexA
ReleaseMutex
ReadProcessMemory
Beep
PulseEvent
WritePrivateProfileSectionA
LCMapStringA
CreateWaitableTimerA
SetWaitableTimer
OpenEventA
EnumSystemLocalesA
TlsSetValue
TlsAlloc
GetNumberFormatA
VirtualProtect
IsValidLocale
SearchPathA
GlobalHandle
TlsGetValue
SuspendThread
SetThreadPriority
LocalAlloc
GetSystemDirectoryW
GetFileTime
SetFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetFileAttributesA
GetFileAttributesExA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
UnlockFile
LockFile
SetFilePointer
GetThreadLocale
GetStringTypeExA
lstrcmpA
GetProfileIntA
FileTimeToSystemTime
GlobalReAlloc
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
InitializeCriticalSectionAndSpinCount
lstrcmpW
GlobalSize
MoveFileExA
SetEndOfFile
GetFileSizeEx
SystemTimeToFileTime
WaitForSingleObjectEx
QueueUserAPC
WaitForMultipleObjectsEx
OpenFileMappingA
_lclose
_lread
GetFileSize
OpenFile
FreeResource
FindResourceA
MoveFileA
ExpandEnvironmentStringsA
FindNextFileA
FindFirstFileA
GetPrivateProfileSectionA
lstrcatW
WritePrivateProfileStringW
lstrcpynW
CreateProcessA
ResumeThread
GetFileAttributesA
OpenThread
GetPrivateProfileIntA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
GetExitCodeThread
QueryPerformanceCounter
WaitNamedPipeA
PeekNamedPipe
ReadFile
FlushFileBuffers
ConnectNamedPipe
CreateNamedPipeA
GetSystemDirectoryA
IsDBCSLeadByte
CreateSemaphoreA
ReleaseSemaphore
CancelIo
CreateThread
GetOverlappedResult
ResetEvent
UnmapViewOfFile
DuplicateHandle
OpenProcess
GetCurrentThreadId
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
VirtualFree
VirtualAlloc
InterlockedExchange
InterlockedCompareExchange
InterlockedExchangeAdd
InterlockedDecrement
InterlockedIncrement
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTempPathA
DeviceIoControl
CopyFileA
GetModuleFileNameA
CreateDirectoryA
OutputDebugStringA
DeleteFileA
DeleteCriticalSection
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
CreateEventA
InitializeCriticalSection
GetTickCount
SetEvent
WaitForSingleObject
GetSystemTimeAsFileTime
LocalFree
GetSystemInfo
FormatMessageA
GetCurrentThread
LoadLibraryW
GetCurrentProcess
GetLongPathNameW
GetTempPathW
CreateDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
lstrcpyW
GetFileAttributesW
lstrlenW
GetModuleHandleW
lstrcmpiA
GetWindowsDirectoryA
MulDiv
lstrcpyA
WideCharToMultiByte
WinExec
lstrcatA
LoadLibraryExA
CloseHandle
WriteFile
CreateFileA
Sleep
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynA
GetVersionExA
ActivateActCtx
GetModuleHandleA
GetLastError
DeactivateActCtx
SetLastError
lstrlenA
MultiByteToWideChar
RaiseException
DebugBreak
GetProcAddress
FreeLibrary
LoadLibraryA
FindResourceW
LoadResource
LockResource
SizeofResource
SetHandleCount

user32

CallNextHookEx
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ValidateRect
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
GetMenuStringA
RemoveMenu
PostQuitMessage
ShowCursor
MapWindowPoints
SendMessageTimeoutA
GrayStringA
DrawTextExA
TabbedTextOutA
MapVirtualKeyA
GetActiveWindow
GetForegroundWindow
IsZoomed
SetLayeredWindowAttributes
GetClassLongA
RegisterClassExA
ShowWindow
CopyImage
InsertMenuA
BringWindowToTop
DeleteMenu
SetMenuDefaultItem
GetSystemMenu
GetCapture
DrawIconEx
EnumChildWindows
SendMessageTimeoutW
FindWindowExA
LoadBitmapW
LoadBitmapA
EnableMenuItem
SetForegroundWindow
SetWindowPos
TrackPopupMenu
GetWindowDC
LoadIconW
IsWindowVisible
LoadIconA
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
RegisterWindowMessageA
MoveWindow
SetFocus
SetParent
MessageBoxA
SetClassLongA
CharNextA
TranslateAcceleratorA
DestroyWindow
CreateWindowExA
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
InvalidateRect
GetSubMenu
LoadMenuW
GetWindowThreadProcessId
DrawStateA
SetWindowLongA
SetCapture
RedrawWindow
ReleaseCapture
MsgWaitForMultipleObjects
TranslateMessage
PeekMessageA
DispatchMessageA
wsprintfW
EnumWindows
GetMenuState
GetMenuItemID
IsRectEmpty
GetWindowTextA
IsWindowEnabled
ChildWindowFromPoint
WindowFromPoint
SetWindowRgn
SetRectEmpty
SetWindowsHookExA
IsChild
WinHelpA
SendDlgItemMessageA
BeginPaint
EndPaint
CheckDlgButton
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
LoadImageW
CheckMenuItem
ModifyMenuA
GetClassNameA
IntersectRect
GetWindowPlacement
IsIconic
LoadStringA
LoadImageA
DestroyCursor
CopyIcon
CreateIconIndirect
GetIconInfo
DrawFocusRect
EqualRect
DrawTextA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetKeyNameTextA
GetMenuItemInfoA
DestroyMenu
DrawIcon
LoadCursorW
CharUpperA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetNextDlgGroupItem
GetClassInfoA
DefWindowProcA
LoadCursorA
CopyRect
GetWindowLongA
SendMessageA
GetParent
GetClientRect
GetSystemMetrics
InflateRect
GetSysColor
DrawFrameControl
GetFocus
PtInRect
GetWindowRect
EnumDisplaySettingsA
SendInput
UnregisterHotKey
RegisterHotKey
ClipCursor
GetGUIThreadInfo
SystemParametersInfoA
GetDesktopWindow
IsWindow
GetAsyncKeyState
GetCaretPos
SetTimer
GetCursorPos
ScreenToClient
KillTimer
EnableWindow
PostMessageA
SetRect
SetCursor
ClientToScreen
ShowScrollBar
UpdateWindow
GetWindow
GetDC
ReleaseDC
OffsetRect
DestroyIcon
GetKeyState
GetMessagePos
AppendMenuA
CreatePopupMenu
EnumDisplayMonitors
GetSysColorBrush
UnionRect
GetUpdateRect
CharUpperBuffA
GetMenuItemCount
OpenClipboard
EmptyClipboard
CloseClipboard
ReuseDDElParam
UnpackDDElParam
NotifyWinEvent
DestroyAcceleratorTable
DefFrameProcA
SetClipboardData
FillRect
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
MonitorFromPoint
IsMenu
GetMessageA
GetMenuDefaultItem
DrawEdge
MessageBeep
RegisterClipboardFormatA
CopyAcceleratorTableA
InvalidateRgn
MapDialogRect
SetWindowContextHelpId
LoadAcceleratorsW
PostThreadMessageA
WaitMessage
ShowOwnedPopups
GetWindowRgn
MapVirtualKeyExA
IsCharLowerA
CreateMenu
HideCaret
InvertRect
GetDoubleClickTime
SubtractRect
FrameRect
SetCursorPos
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
UpdateLayeredWindow
EnableScrollBar
IsClipboardFormatAvailable
UnregisterClassA
RealChildWindowFromPoint
LockWindowUpdate

gdi32

SetMapMode
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetLayout
SetLayout
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
SetRectRgn
GetMapMode
DPtoLP
SetDIBColorTable
CreateFontA
RealizePalette
SetPixel
LPtoDP
Ellipse
EnumFontFamiliesA
GetTextCharsetInfo
GetTextColor
Polyline
SetStretchBltMode
Polygon
GetRgnBox
CreatePalette
GetPaletteEntries
ExtFloodFill
SetPaletteEntries
GetSystemPaletteEntries
PtInRegion
GetBoundsRect
GetWindowOrgEx
GetViewportOrgEx
EnumFontFamiliesExA
SetPixelV
SetPolyFillMode
RestoreDC
PatBlt
CreatePolygonRgn
CreateRoundRectRgn
OffsetRgn
CombineRgn
CreateRectRgn
FillRgn
FrameRgn
GetClipBox
GetDeviceCaps
TextOutA
SetTextJustification
GetTextMetricsA
SetBkColor
SetBkMode
LineTo
MoveToEx
SetTextColor
StretchBlt
CreateBitmap
BitBlt
CreateDIBSection
DeleteDC
SaveDC
CreateDCA
CopyMetaFileA
CreateRectRgnIndirect
GetTextFaceA
GetPixel
Escape
ExtTextOutA
RectVisible
PtVisible
CreateDIBitmap
GetBkColor
CreateEllipticRgn
GetNearestPaletteIndex
RoundRect
SetROP2
SetDIBits
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
CreatePen
GetTextExtentPoint32A
SelectObject
Rectangle
GetStockObject
CreateFontIndirectA
GetDIBits
SelectClipRgn
GetObjectA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

CryptGetHashParam
CryptReleaseContext
CryptHashData
CryptAcquireContextA
CryptCreateHash
OpenSCManagerA
ControlService
StartServiceA
OpenServiceA
DeleteService
CreateServiceA
CloseServiceHandle
RegEnumValueA
RegEnumKeyExA
GetFileSecurityA
SetFileSecurityA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExW
RegSetValueA
RegDeleteValueA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
IsTextUnicode
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueA
RegOpenKeyExA
CryptDestroyHash

shell32

SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
ExtractIconA
SHCreateDirectoryExA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHFileOperationA
Shell_NotifyIconA
DragFinish
DragQueryFileA
SHAppBarMessage
SHGetDesktopFolder
SHGetMalloc
SHAddToRecentDocs
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

comctl32

ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx
ImageList_GetImageCount
ImageList_GetIcon
ord17

shlwapi

PathIsDirectoryA
StrStrA
StrRChrA
PathStripToRootA
PathIsUNCA
UrlUnescapeA
PathRemoveFileSpecW
PathFindExtensionA
SHDeleteKeyA
PathFindFileNameA
PathFileExistsW

ole32

ProgIDFromCLSID
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
StgCreateDocfile
OleLockRunning
OleGetClipboard
OleRun
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
CoDisconnectObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoUninitialize
CoInitialize
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoInitializeEx
CoGetClassObject
CLSIDFromString
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
IsAccelerator

oleaut32

SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
OleCreateFontIndirect
SysStringLen
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
OleLoadPicture
SysAllocString
VariantClear
VarUdateFromDate
VariantInit
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VarBstrFromDate
LoadTypeLi
SysAllocStringLen
GetErrorInfo
SafeArrayPutElement
SysFreeString
SafeArrayCreateVector

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDrawImageRectRect
GdipDrawImageI
GdipLoadImageFromStream
GdipGetImageBounds
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesWrapMode
GdiplusStartup
GdiplusShutdown
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFillRectangleI
GdipCreatePen1
GdipDeletePen
GdipDrawLineI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipSetSolidFillColor
GdipDrawString
GdipDrawImageRectRectI
GdipGetImageHeight

winmm

waveOutWrite
timeGetTime
PlaySoundA
midiStreamOut

wininet

HttpAddRequestHeadersA
HttpEndRequestA
HttpQueryInfoA
InternetCloseHandle
InternetGetConnectedState
InternetQueryOptionA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetSetOptionExA
InternetQueryDataAvailable
HttpOpenRequestA
InternetOpenUrlA
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA

wldap32

ord200
ord33
ord301
ord27
ord79
ord41
ord32
ord30
ord26
ord50
ord143
ord211
ord22
ord35
ord46
ord60

dsound

ord1

ws2_32

gethostname
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
__WSAFDIsSet
WSASetLastError
getpeername
getsockopt
getsockname
ntohl
ntohs
recv
connect
socket
send
ioctlsocket
listen
bind
htons
inet_ntoa
inet_addr
gethostbyname
WSAConnect
WSASend
WSAEnumNetworkEvents
WSARecv
closesocket
WSAWaitForMultipleEvents
WSAEventSelect
WSASocketA
setsockopt
WSACleanup
WSAStartup
htonl
select
WSAGetLastError

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
ObjectFromLresult
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

rpcrt4

UuidCreate
UuidToStringA
RpcStringFreeA

imagehlp

MakeSureDirectoryPathExists

uxtheme

SetThemeAppProperties

dinput8

DirectInput8Create

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a804fb9d6d028479c686042c79af8a39

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

2d:af:fb:7a:20:58:8a:40:87:11:b7:98:fd:3d:fc:f8Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

23:02:fb:51:99:2c:19:b9:ed:65:e6:aa:10:71:12:cc:20:d2:20:83Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

urlmon

gdiplus

winmm

wininet

wldap32

dsound

ws2_32

oleacc

imm32

rpcrt4

imagehlp

uxtheme

dinput8

iphlpapi

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 98KB - Virtual size: 2.2MB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 2.3MB - Virtual size: 2.3MB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

2d:af:fb:7a:20:58:8a:40:87:11:b7:98:fd:3d:fc:f8
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

23:02:fb:51:99:2c:19:b9:ed:65:e6:aa:10:71:12:cc:20:d2:20:83
Signer

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 98KB - Virtual size: 2.2MB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 2.3MB - Virtual size: 2.3MB