PrivateFolder[.]1[.]1[.]70[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

PrivateFolder.1.1.70.zip
Size

758KB
MD5

e80222298d5c5ab1b3cf8272719a6249
SHA1

07d50de4563f84966f0ddea750af78d65fc1f35d
SHA256

0bab979381b9f716738cff2a4247774c5b5cd7f99c9d46479d9e6c790e0fc173
SHA512

e8ef8df279035dc812d8fae8d3bdea152e57f3c5a1972c38f6b112f81de588f1439a529a080ac69f51b26cb133c7cabb60448f95cd5b274f0ce85dc8f3e58ddb
SSDEEP

12288:gaijDEiJeqWGIRpzkzt+XdLxswYx8cr5nPrCI5LZMT+FWS9v8/fa6qE4Ucx4xP2t:F+neGsTtLFEPeYLaT8WS9v8X3J4UmZLz

Score

1^/10

Malware Config

Signatures

Files

PrivateFolder.1.1.70.zip
.zip
PrivateFolder.1.1.70.exe
.exe windows:4 windows x86 arch:x86

d6a2d3ddf01845d47a71d4049996ede9

Code Sign

04:00:00:00:00:01:1e:44:a5:e2:4e
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28-01-1999 13:00

Not After

27-01-2017 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:28:55:f7:25:cb
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

01-05-2010 21:23

Not After

01-05-2013 21:23

Subject

CN=eMing Software Inc.,O=eMing Software Inc.,L=Irvine,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

02:3a:64
Certificate

Issuer

CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US

Not Before

18-10-2012 14:38

Not After

20-05-2022 14:38

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

19-05-2022 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22-01-2004 10:00

Not After

27-01-2017 11:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

79:31:dd:b6:8f:3d:d8:0b:9a:9d:f6:75:2e:e0:a2:41:c6:a2:5a:f3
Signer

Actual PE Digest

79:31:dd:b6:8f:3d:d8:0b:9a:9d:f6:75:2e:e0:a2:41:c6:a2:5a:f3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
CreateProcessA
GlobalFree
GlobalUnlock
_lcreat
GetTempFileNameA
GetTempPathA
lstrlenA
lstrcatA
GetModuleFileNameA
GetVersion
GlobalLock
GlobalAlloc
_lwrite
SetFileTime
SetFileAttributesA
WriteFile
GetWindowsDirectoryA
GetCurrentProcessId
Sleep
SetEndOfFile
LoadLibraryA
GetProcAddress
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetFilePointer
ReadFile
LCMapStringW
ExitProcess
lstrcpyA
GetLocaleInfoA
GetFileAttributesA
_lopen
_llseek
_lread
_lclose
CloseHandle
CreateFileA
GetLastError
GetFileTime
FileTimeToDosDateTime
CompareStringA
LCMapStringA
MultiByteToWideChar
HeapFree
HeapAlloc
CreateDirectoryA
DeleteFileA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
CompareStringW

user32

InvalidateRect
UpdateWindow
GetSystemMetrics
SetWindowPos
BeginPaint
SetRect
EndPaint
GetDlgItem
GetWindowRect
MoveWindow
ScreenToClient
SetWindowTextA
CreateDialogParamA
LoadStringA
MessageBoxA
DestroyWindow
LoadIconA
LoadCursorA
RegisterClassA
ShowWindow

gdi32

CreateCompatibleDC
CreatePen
SelectObject
MoveToEx
LineTo
CreateCompatibleBitmap
SetBkColor
ExtTextOutA
BitBlt
DeleteObject
DeleteDC
CreateSolidBrush
GetStockObject

mpr

WNetGetConnectionA

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6a2d3ddf01845d47a71d4049996ede9

Code Sign

04:00:00:00:00:01:1e:44:a5:e2:4eCertificate

Key Usages

01:00:00:00:00:01:28:55:f7:25:cbCertificate

Extended Key Usages

Key Usages

02:3a:64Certificate

Extended Key Usages

Key Usages

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:baCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:1e:44:a5:ec:beCertificate

Key Usages

79:31:dd:b6:8f:3d:d8:0b:9a:9d:f6:75:2e:e0:a2:41:c6:a2:5a:f3Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

mpr

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 21KB

.rsrc Size: 140KB - Virtual size: 137KB

04:00:00:00:00:01:1e:44:a5:e2:4e
Certificate

01:00:00:00:00:01:28:55:f7:25:cb
Certificate

02:3a:64
Certificate

7e:1f:df:72:99:e8:d2:45:a1:5d:0b:a8:e5:b1:59:ba
Certificate

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

79:31:dd:b6:8f:3d:d8:0b:9a:9d:f6:75:2e:e0:a2:41:c6:a2:5a:f3
Signer

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 21KB

.rsrc
Size: 140KB - Virtual size: 137KB