5891f867f0514cc64647c655c0cb257f93d67de53fc93b1bd80222a88526c410

Sharing

Copy URL

Twitter E-mail

General

Target

5891f867f0514cc64647c655c0cb257f93d67de53fc93b1bd80222a88526c410
Size

482KB
MD5

1221f62256f5e34326a38b4c626dcf84
SHA1

74099e6f8ee16bbe00d36844862eb2adaa35849b
SHA256

5891f867f0514cc64647c655c0cb257f93d67de53fc93b1bd80222a88526c410
SHA512

999c452beae910511e4fb74ca386629714ac5853cc8304ca7441b427dd485fb6102019e2bfb839e57b156bfa600f48b79998251217c5299df01d0b0fe3e0e1f9
SSDEEP

12288:xSbftHxkXbCNDZJsb1+Eu02FWBjB3LjyySgfEa85zcEdPhUTzyid5hpgbfMT:xSLtH2XbCNDZJsbJaWtNjiO

Score

1^/10

Malware Config

Signatures

Files

5891f867f0514cc64647c655c0cb257f93d67de53fc93b1bd80222a88526c410
.exe windows:4 windows x86 arch:x86

b362c87960841d366265af4afcb63fe4

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:e1:ac:7e:7b:92:97:a2:48:d2:47:13:9a:1f:fa:49:c6
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

10-01-2012 06:55

Not After

27-04-2014 20:36

Subject

CN=Kenichi Onodera,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

73:d6:70:ef:0d:3e:48:db:4d:db:40:99:46:ef:c4:f1:ed:af:e2:35
Signer

Actual PE Digest

73:d6:70:ef:0d:3e:48:db:4d:db:40:99:46:ef:c4:f1:ed:af:e2:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

kernel32

VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
ExitProcess
SetStdHandle
GetFileType
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetSystemInfo
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
VirtualAlloc
VirtualProtect
HeapReAlloc
HeapFree
HeapAlloc
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GlobalFlags
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetErrorMode
SystemTimeToFileTime
FileTimeToSystemTime
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
lstrcmpA
InterlockedIncrement
GetProfileIntA
GetTickCount
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
GetCurrentProcessId
GetProcAddress
CreateFileA
GetModuleFileNameA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
CloseHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LoadLibraryA
DeleteFileA
MoveFileA
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetLastError
GetUserDefaultLCID
GetComputerNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
FindFirstFileA
FindClose
GetStringTypeExA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
Sleep

user32

SetTimer
KillTimer
GetDCEx
DeleteMenu
DestroyIcon
GetTabbedTextExtentA
LockWindowUpdate
GetSysColorBrush
SetRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
ShowOwnedPopups
GetMessageA
TranslateMessage
ValidateRect
RegisterClipboardFormatA
PostQuitMessage
IsRectEmpty
SetParent
WindowFromDC
InSendMessage
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuA
SetCursor
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
SetMenu
TranslateAcceleratorA
ClipCursor
GetCursorPos
InflateRect
GetDC
ReleaseDC
PostThreadMessageA
SetRectEmpty
CreateMenu
CopyAcceleratorTableA
DestroyMenu
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ShowWindow
SetWindowTextA
IsDialogMessageA
WindowFromPoint
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
SetScrollRange
SetForegroundWindow
CharUpperA
EnableWindow
SendMessageA
GetSystemMetrics
IsWindowVisible
UpdateWindow
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
SetCapture
GetMenuItemInfoA
UnregisterClassA
LoadCursorA
wsprintfA
GetClientRect
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
InvalidateRect
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuA
GetMenuItemID
AppendMenuA
GetMenuStringA
GetMenuState
MessageBoxA
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
GetWindowThreadProcessId
UnhookWindowsHookEx
GetWindow
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
CallWindowProcA
CreatePopupMenu

gdi32

ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
CreatePatternBrush
GetStockObject
CreateSolidBrush
SetViewportExtEx
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
CreateFontIndirectA
GetBkColor
Rectangle
PatBlt
UnrealizeObject
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
GetTextAlign
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateFontA
CreatePen
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32A
GetTextMetricsA
SetBrushOrgEx
StretchDIBits
DeleteDC
SelectObject
GetCharWidthA
DeleteObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDCA
CopyMetaFileA
GetDeviceCaps
StretchBlt
Ellipse
CreateCompatibleDC
CreateCompatibleBitmap
CreateRectRgn

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueA
RegCloseKey
GetUserNameA
RegCreateKeyA

shell32

ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA

shlwapi

PathFindExtensionA
PathIsUNCA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
WriteClassStm
OleSaveToStream
CreateStreamOnHGlobal
CreateGenericComposite
OleLockRunning
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateDataAdviseHolder
StgOpenStorage
StgCreateDocfile
CreateItemMoniker
CreateFileMoniker
OleRun
GetRunningObjectTable
OleIsRunning
CoDisconnectObject
OleRegGetMiscStatus
OleRegEnumVerbs
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
StringFromCLSID
OleRegGetUserType
WriteClassStg
CoTaskMemFree
OleInitialize
CreateOleAdviseHolder
CoFreeUnusedLibraries
OleUninitialize
CoRevokeClassObject
CoRegisterClassObject
StgIsStorageFile

oleaut32

SysStringLen
SysFreeString
SysStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

Sections

.text
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b362c87960841d366265af4afcb63fe4

Code Sign

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

11:21:e1:ac:7e:7b:92:97:a2:48:d2:47:13:9a:1f:fa:49:c6Certificate

Extended Key Usages

Key Usages

73:d6:70:ef:0d:3e:48:db:4d:db:40:99:46:ef:c4:f1:ed:af:e2:35Signer

Headers

File Characteristics

Imports

shfolder

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 328KB - Virtual size: 327KB

.rdata Size: 100KB - Virtual size: 96KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 36KB - Virtual size: 33KB

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

11:21:e1:ac:7e:7b:92:97:a2:48:d2:47:13:9a:1f:fa:49:c6
Certificate

73:d6:70:ef:0d:3e:48:db:4d:db:40:99:46:ef:c4:f1:ed:af:e2:35
Signer

.text
Size: 328KB - Virtual size: 327KB

.rdata
Size: 100KB - Virtual size: 96KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 36KB - Virtual size: 33KB