27f22fdbb8710f54f9a70c66811fd39bd9e50bb728f889a08542b4bec863a9ccN

Sharing

Copy URL Twitter E-mail

General

Target

27f22fdbb8710f54f9a70c66811fd39bd9e50bb728f889a08542b4bec863a9ccN
Size

1.7MB
MD5

31008f9526ea8b7455da8390f00b3630
SHA1

39fdb5623e03c687918cdeaa42ea13a0b560aa4e
SHA256

27f22fdbb8710f54f9a70c66811fd39bd9e50bb728f889a08542b4bec863a9cc
SHA512

5357c2ed770f170f3d022b5e8a765cce94817b242e1283930bc836d08cb1ee03f99d8fdabb88108580e26fc4743b3e017691c4f8ea9ab242ae4d36b9017d32f6
SSDEEP

12288:+apYabpwdW4/Z0REOP5dF41fCxrZtB7SITdToonwn+DtUaaeBYIAB2MmzfCIkjOS:+zmB80tF41fcZr7LwvyBe+fgINyXLcNO

Score

1^/10

Malware Config

Signatures

Files

27f22fdbb8710f54f9a70c66811fd39bd9e50bb728f889a08542b4bec863a9ccN
.exe windows:5 windows x86 arch:x86

ccb21703a6e9f00da4704441f6d217bd

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:a2:a2:03:20:af:27:b7:db:8e:85:bc:a6:7c:be:9a
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

31/10/2013, 00:00

Not After

30/10/2016, 23:59

Subject

CN=Xportsoft Technologies,O=Xportsoft Technologies,POSTALCODE=133001,STREET=Near Gugga Maadi\, Kardhan Road+STREET=Khojkipur,L=Ambala Cantt,ST=Haryana,C=IN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b5:1b:bc:63:68:2a:c5:e3:69:92:17:be:c2:e0:a9:56:57:76:0b:d8
Signer

Actual PE Digest

b5:1b:bc:63:68:2a:c5:e3:69:92:17:be:c2:e0:a9:56:57:76:0b:d8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\DEV_VC\PC Optimizer Pro\Release\PCOptProTrays.pdb

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

InternetOpenUrlW
InternetOpenW
InternetReadFile
InternetCloseHandle

xmllite

CreateXmlReader

kernel32

GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
RtlUnwind
HeapReAlloc
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
CreateThread
ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
LCMapStringW
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
CreateFileA
SetEnvironmentVariableA
WritePrivateProfileStringW
SetErrorMode
GetFileTime
GetFileSizeEx
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
lstrlenA
lstrcmpA
RaiseException
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
InterlockedDecrement
GetModuleHandleW
GetCurrentProcessId
MulDiv
GetModuleHandleA
SetLastError
FreeResource
WideCharToMultiByte
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
CreateMutexW
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleFileNameW
LocalFree
FormatMessageW
MultiByteToWideChar
GetFileSize
lstrlenW
WaitForSingleObject
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
FindFirstFileW
GetFileAttributesW
OutputDebugStringW
GetVersionExW
CloseHandle
CreateFileW
GetLastError
GetCurrentProcess
LockResource
SizeofResource
LoadResource
FindResourceW
GetCommandLineW

user32

GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
EqualRect
DefWindowProcW
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
CharUpperW
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
ReleaseDC
GetDC
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetWindowLongW
IsWindowVisible
SetWindowPos
GetDlgCtrlID
GetWindow
MoveWindow
AdjustWindowRectEx
ClientToScreen
EndPaint
BeginPaint
GetSystemMetrics
IsIconic
LoadIconW
GetKeyState
GetAsyncKeyState
SetCapture
IsWindow
SendMessageW
ReleaseCapture
OffsetRect
UpdateWindow
InvalidateRect
GetParent
RedrawWindow
GetSysColor
AnimateWindow
DispatchMessageW
SetWindowContextHelpId
TranslateMessage
IsDialogMessageW
MapDialogRect
CharNextW
InvalidateRgn
SetRect
PeekMessageW
PtInRect
GetCursorPos
KillTimer
SetTimer
LoadCursorW
SetCursor
FillRect
GetClientRect
EnableMenuItem
GetWindowRect
SystemParametersInfoW
EnableWindow
LoadBitmapW
IsRectEmpty
CopyAcceleratorTableW
UnregisterClassW
GetSysColorBrush
PostQuitMessage
PostThreadMessageW
MessageBeep
GetMessageW
ValidateRect
GetNextDlgGroupItem
RegisterClipboardFormatW
CopyRect
DestroyMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
CheckMenuItem
ShowWindow
SetWindowTextW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
GetWindowTextW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowDC
GetWindowTextLengthW
SetPropW

gdi32

DeleteDC
SetTextColor
SetBkMode
SetBkColor
TextOutW
SaveDC
RestoreDC
SetMapMode
GetClipBox
SetTextAlign
GetViewportExtEx
SelectObject
PtVisible
RectVisible
Escape
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetTextExtentPointA
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateBitmap
GetDeviceCaps
CreateRectRgnIndirect
GetMapMode
DPtoLP
GetRgnBox
GetBkColor
GetTextColor
ExtTextOutW
CreateFontW
GetStockObject
SetViewportOrgEx
GetViewportOrgEx
DeleteObject
CreateFontIndirectW
CreateSolidBrush
GetTextMetricsA
GetObjectW
GetWindowExtEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueW
RegSetValueExW
RegEnumKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteW

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
SHCreateStreamOnFileW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject

oleaut32

VariantChangeType
VariantCopy
SysAllocString
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysStringLen
VariantClear
SysFreeString
VariantInit

Sections

.text
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccb21703a6e9f00da4704441f6d217bd

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

1a:a2:a2:03:20:af:27:b7:db:8e:85:bc:a6:7c:be:9aCertificate

Extended Key Usages

Key Usages

b5:1b:bc:63:68:2a:c5:e3:69:92:17:be:c2:e0:a9:56:57:76:0b:d8Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

wininet

xmllite

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 340KB - Virtual size: 340KB

.rdata Size: 96KB - Virtual size: 96KB

.data Size: 18KB - Virtual size: 34KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 55KB - Virtual size: 55KB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

1a:a2:a2:03:20:af:27:b7:db:8e:85:bc:a6:7c:be:9a
Certificate

b5:1b:bc:63:68:2a:c5:e3:69:92:17:be:c2:e0:a9:56:57:76:0b:d8
Signer

.text
Size: 340KB - Virtual size: 340KB

.rdata
Size: 96KB - Virtual size: 96KB

.data
Size: 18KB - Virtual size: 34KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 55KB - Virtual size: 55KB