cd1275ad6ab6261dcf5c98da5233f1b1ca683eec4ca3ee685f52f323ef7e9b18N

Sharing

Copy URL Twitter E-mail

General

Target

cd1275ad6ab6261dcf5c98da5233f1b1ca683eec4ca3ee685f52f323ef7e9b18N
Size

353KB
MD5

f1b328aa203aa5b812a219ee87c959f0
SHA1

06fdead66f27797a3b4bb359ce4f731bef0efd7f
SHA256

cd1275ad6ab6261dcf5c98da5233f1b1ca683eec4ca3ee685f52f323ef7e9b18
SHA512

f4409d7cb88ff81dc0a6a705f0f805e69eb71fdebc0bdbcfd5e7fcbef8b23fdcd9dac9fd943746dc44ee5ef95e6e7d0cda4f3dadb146928fbf7d93cb2dda689b
SSDEEP

6144:1qzQ9SCr2I6jOZNp0H8vIz3YX5Sze2wpchpkUJ1HBBh4kHIgd:5S66j6QTKk9h1HBAgd

Score

1^/10

Malware Config

Signatures

Files

cd1275ad6ab6261dcf5c98da5233f1b1ca683eec4ca3ee685f52f323ef7e9b18N
.exe windows:4 windows x86 arch:x86

4c03290f09e49ab4595996c19e1c6c08

Code Sign

53:a8:13:b0:88:80:82:ab:46:63:12:3b:1e:73:8b:38
Certificate

Issuer

CN=fbDs

Not Before

19/06/2012, 05:12

Not After

31/12/2039, 23:59

Subject

CN=fbDs

Extended Key Usages

ExtKeyUsageCodeSigning

8f:09:14:fd:9d:84:50:6d:60:aa:2e:62:17:d7:e1:c2:ee:55:56:7a
Signer

Actual PE Digest

8f:09:14:fd:9d:84:50:6d:60:aa:2e:62:17:d7:e1:c2:ee:55:56:7a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
LoadLibraryA
GetCommandLineA
CloseHandle
GetWindowsDirectoryW
GetModuleHandleA
GetProcAddress
lstrcatW
CreateFileW
VirtualAllocEx

user32

LoadIconA
LoadCursorA

advapi32

RegCloseKey
RegOpenKeyW

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data13
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data12
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data11
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data10
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data9
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data8
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c03290f09e49ab4595996c19e1c6c08

Code Sign

53:a8:13:b0:88:80:82:ab:46:63:12:3b:1e:73:8b:38Certificate

Extended Key Usages

8f:09:14:fd:9d:84:50:6d:60:aa:2e:62:17:d7:e1:c2:ee:55:56:7aSigner

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 42KB - Virtual size: 41KB

.data Size: 303KB - Virtual size: 302KB

.data13 Size: 512B - Virtual size: 100B

.data12 Size: 512B - Virtual size: 100B

.data11 Size: 512B - Virtual size: 100B

.data10 Size: 512B - Virtual size: 100B

.data9 Size: 512B - Virtual size: 100B

.data8 Size: 512B - Virtual size: 100B

.data7 Size: 512B - Virtual size: 100B

.data6 Size: 512B - Virtual size: 100B

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 212B

53:a8:13:b0:88:80:82:ab:46:63:12:3b:1e:73:8b:38
Certificate

8f:09:14:fd:9d:84:50:6d:60:aa:2e:62:17:d7:e1:c2:ee:55:56:7a
Signer

.text
Size: 42KB - Virtual size: 41KB

.data
Size: 303KB - Virtual size: 302KB

.data13
Size: 512B - Virtual size: 100B

.data12
Size: 512B - Virtual size: 100B

.data11
Size: 512B - Virtual size: 100B

.data10
Size: 512B - Virtual size: 100B

.data9
Size: 512B - Virtual size: 100B

.data8
Size: 512B - Virtual size: 100B

.data7
Size: 512B - Virtual size: 100B

.data6
Size: 512B - Virtual size: 100B

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 212B