1d8f0b90c0e331426b49b70bf6aa9419[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

1d8f0b90c0e331426b49b70bf6aa9419.bin
Size

437KB
MD5

1d8f0b90c0e331426b49b70bf6aa9419
SHA1

07faa957ee4b38c0d451bba8e5de0d873e988030
SHA256

9c6008d77f2486a143405d295cb57729d8c8759bf4515aaa2f6b6fea149ce3f5
SHA512

f06271bb69592853206e56cf76452a8419b9215a2003f43f71a0ce807c9b7e52275bb72d360f15c23f65d70bdd8d9ca70aa7e6437db7dc358eef8fa4291c109e
SSDEEP

6144:fSsMmwQpVWpmZpIcvHezxK5RtK5NPx98U7ExHyNWFtMXzeYqeFyr1noRGRxvGh8:mWOrcvg45zYNPUOhNWFOqeFyNqGRgh8

Score

1^/10

Malware Config

Signatures

Files

1d8f0b90c0e331426b49b70bf6aa9419.bin
.exe windows:4 windows x86 arch:x86

7b3e2366294a062fee9a0ab05b117ad7

Code Sign

41:f2:05:86:62:9c:45:af:41:67:65:3b:48:85:55:d7
Certificate

Issuer

CN=Root Agency

Not Before

19/12/2011, 13:25

Not After

21/08/2015, 22:00

Subject

CN=Benert

31:dc:3d:9e:47:0a:ea:8b:4c:18:66:83:26:36:d8:ec:35:6b:c0:d7
Signer

Actual PE Digest

31:dc:3d:9e:47:0a:ea:8b:4c:18:66:83:26:36:d8:ec:35:6b:c0:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindowVisible
SendDlgItemMessageA
ArrangeIconicWindows

ole32

CoReleaseServerProcess
CoGetMalloc
CreateFileMoniker
CoFreeUnusedLibraries

oleaut32

RegisterTypeLi
QueryPathOfRegTypeLi

advapi32

RegOpenKeyExA
RegSaveKeyA

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
LoadLibraryA
VirtualAlloc
GetOEMCP
LCMapStringA
FreeEnvironmentStringsA
HeapReAlloc
LocalFree
WaitForSingleObject
GetPrivateProfileIntA
WriteProfileStringA
GetModuleHandleA
GetProcAddress
ExitProcess
InterlockedDecrement
InterlockedIncrement
GetStartupInfoA
GetCommandLineA
GetVersion
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetACP

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pij
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ynci
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b3e2366294a062fee9a0ab05b117ad7

Code Sign

41:f2:05:86:62:9c:45:af:41:67:65:3b:48:85:55:d7Certificate

31:dc:3d:9e:47:0a:ea:8b:4c:18:66:83:26:36:d8:ec:35:6b:c0:d7Signer

Headers

File Characteristics

Imports

user32

ole32

oleaut32

advapi32

kernel32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 6KB - Virtual size: 97KB

.pij Size: 299KB - Virtual size: 298KB

.ynci Size: 100KB - Virtual size: 100KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 4KB

41:f2:05:86:62:9c:45:af:41:67:65:3b:48:85:55:d7
Certificate

31:dc:3d:9e:47:0a:ea:8b:4c:18:66:83:26:36:d8:ec:35:6b:c0:d7
Signer

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 6KB - Virtual size: 97KB

.pij
Size: 299KB - Virtual size: 298KB

.ynci
Size: 100KB - Virtual size: 100KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 4KB