bd551d89a85b1959775c3ed4401ef50de02e41159e450483dc18e9832af05042

Sharing

Copy URL

Twitter E-mail

General

Target

bd551d89a85b1959775c3ed4401ef50de02e41159e450483dc18e9832af05042
Size

116KB
MD5

ebf93931899c363f1a1f1a8040ec9057
SHA1

a410c284a30695f80166d8524a63699854918ea8
SHA256

bd551d89a85b1959775c3ed4401ef50de02e41159e450483dc18e9832af05042
SHA512

ce4f48d3552b8430fe2d62d90f0b5c54641798e7ca528958c28db7a79d7570cb4637d7aefd527b525f090dd972f8af31d0be3de153e0cff59a768f4c22f5762e
SSDEEP

1536:fHcLTJBa3Ff/KBilRGqO2QRgbQua72+OL96c6cjBugGNoq5FFF:vuTJ81XKBilRD3bQ3OL96cFBeNoq5Fz

Score

1^/10

Malware Config

Signatures

Files

bd551d89a85b1959775c3ed4401ef50de02e41159e450483dc18e9832af05042
.exe windows:5 windows x86 arch:x86

e87e6a9ec48efc3214e000a5b163934a

Code Sign

fc:59:4b:2e:2c:30:e2:b4:1f:4c:a2:4b:35:0b:ca:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01/10/2009, 00:00

Not After

01/10/2010, 23:59

Subject

CN=Bitsum Technologies,O=Bitsum Technologies,POSTALCODE=37877,STREET=1605 Allen Rd.,L=Talbott,ST=TN,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:8c:b3:3a:3f:b3:ef:81:8e:48:c0:13:49:1c:0a:7c:02:73:2c:a5
Signer

Actual PE Digest

0c:8c:b3:3a:3f:b3:ef:81:8e:48:c0:13:49:1c:0a:7c:02:73:2c:a5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\dev\projs\VistaMMSC\release\vistammsc.pdb

Imports

comctl32

InitCommonControlsEx

shell32

ShellExecuteW

kernel32

LocalUnlock
GlobalLock
GlobalAlloc
MulDiv
GlobalUnlock
LocalLock
LocalAlloc
LocalFree
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
RtlUnwind
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
WriteFile
Sleep
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetLastError
IsDebuggerPresent
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetStartupInfoW
GetWindowsDirectoryW
GetSystemInfo
GetVersionExW
MultiByteToWideChar
ExitProcess
FindClose
FindFirstFileW
GetModuleFileNameW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryW
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection

user32

EndPaint
DestroyWindow
CloseClipboard
GetSystemMenu
SetTimer
GetWindowRect
PostQuitMessage
FillRect
DrawTextW
KillTimer
GetLastActivePopup
SetForegroundWindow
GetParent
MessageBeep
SetFocus
BeginPaint
WaitMessage
TranslateMessage
IsDialogMessageW
LoadIconW
CreateDialogIndirectParamW
GetAsyncKeyState
SetRect
GetWindowLongW
GetWindowTextW
SystemParametersInfoW
PeekMessageW
GetClassNameW
EnableMenuItem
DrawIcon
SetWindowLongW
RedrawWindow
GetSysColor
SetWindowPos
GetActiveWindow
IsWindow
OpenClipboard
GetSystemMetrics
SetClipboardData
SetWindowTextW
DestroyIcon
WinHelpW
GetDialogBaseUnits
GetWindow
MoveWindow
DispatchMessageW
ShowWindow
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
CheckDlgButton
EnableWindow
GetClientRect
CreateWindowExW
MessageBoxW
LoadStringW
DialogBoxParamW
EndDialog
PostMessageW
SendMessageW
GetDlgItem
EmptyClipboard

gdi32

GetTextExtentPoint32W
SetTextColor
DeleteDC
CreateFontIndirectW
SetBkColor
CreateDCW
DeleteObject
SelectObject
CreateSolidBrush

comdlg32

GetSaveFileNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e87e6a9ec48efc3214e000a5b163934a

Code Sign

fc:59:4b:2e:2c:30:e2:b4:1f:4c:a2:4b:35:0b:ca:89Certificate

Extended Key Usages

Key Usages

0c:8c:b3:3a:3f:b3:ef:81:8e:48:c0:13:49:1c:0a:7c:02:73:2c:a5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

shell32

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 5KB - Virtual size: 25KB

.rsrc Size: 512B - Virtual size: 448B

.reloc Size: 8KB - Virtual size: 7KB

fc:59:4b:2e:2c:30:e2:b4:1f:4c:a2:4b:35:0b:ca:89
Certificate

0c:8c:b3:3a:3f:b3:ef:81:8e:48:c0:13:49:1c:0a:7c:02:73:2c:a5
Signer

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 5KB - Virtual size: 25KB

.rsrc
Size: 512B - Virtual size: 448B

.reloc
Size: 8KB - Virtual size: 7KB