f7e02996156bae39ea4c1000c485731928f2d22800f7bcfb50e300ae733abb2b

Sharing

Copy URL Twitter E-mail

General

Target

f7e02996156bae39ea4c1000c485731928f2d22800f7bcfb50e300ae733abb2b
Size

547KB
MD5

bf09c7541291c20f49259fb9d9183c1f
SHA1

965f6911872994363444a96a1fc0d0dca33988ac
SHA256

f7e02996156bae39ea4c1000c485731928f2d22800f7bcfb50e300ae733abb2b
SHA512

9bf80ecb3ac4a40fe24515a0b22eb93acf88d93aa108f596c6f3772111471cb64631e0a96ef28b1e604f9918458006c93d7bae2ea82045abed962e8bbfd53b4b
SSDEEP

12288:NJB4qJEJsEx9rHk5dbHlr98uqU4Vg9+f4QTIQAgVaYNP:3B4qJOsMHk5JHlZ8uq4+f3Am/

Score

1^/10

Malware Config

Signatures

Files

f7e02996156bae39ea4c1000c485731928f2d22800f7bcfb50e300ae733abb2b
.exe windows:4 windows x86 arch:x86

b8f21daf36b57b444036e044d350b180

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

af:14:5e:46:98:15:c7:59:8e:01:51:29:2c:a3:c0:cd
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

08/03/2011, 00:00

Not After

07/03/2014, 23:59

Subject

CN=KSW INFOTECH d.o.o.,O=KSW INFOTECH d.o.o.,POSTALCODE=51512,STREET=Stube put Kijca 1,L=Njivice,ST=N/A,C=HR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

51:3c:70:b9:f3:27:04:09:b9:2a:27:f2:9e:ff:42:43:d3:a4:b9:e4
Signer

Actual PE Digest

51:3c:70:b9:f3:27:04:09:b9:2a:27:f2:9e:ff:42:43:d3:a4:b9:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegDeleteKeyW
RegQueryValueExA
RegSetValueW
RegCreateKeyA
RegCloseKey
RegOpenKeyW
RegQueryValueW

user32

DrawStateW
TranslateMessage
PostQuitMessage
InflateRect
DispatchMessageW
PeekMessageW
LoadIconW
CloseClipboard
EmptyClipboard
LoadCursorFromFileW
GetWindowTextW
GetSystemMenu
SetMenuItemInfoW
LoadCursorW
MessageBeep
WindowFromPoint
TranslateAcceleratorW
UnionRect
ReleaseCapture
DeferWindowPos
RegisterHotKey
EnableWindow
LoadAcceleratorsW
SetMenu
ClientToScreen
RedrawWindow
SetWindowTextW
EndDeferWindowPos
ChildWindowFromPoint
UnregisterHotKey
SetCursorPos
RemoveMenu
GetUpdateRgn
IsWindow
SetScrollInfo
IsZoomed
LoadBitmapW
IsClipboardFormatAvailable
TranslateMDISysAccel
GetWindowRect
ScreenToClient
GetAsyncKeyState
SetWindowLongW
GetSubMenu
GetWindowTextLengthW
IsWindowEnabled
GetClientRect
SetCapture
GetWindowLongW
InsertMenuW
OffsetRect
ValidateRect
GetMessageTime
InvalidateRect
GetDC
MessageBoxW
ChangeDisplaySettingsW
GetUpdateRect
BeginPaint
ShowWindow
LoadImageW
GetParent
SetForegroundWindow
GetCapture
EnableMenuItem
GetDlgItem
UnregisterClassW
ScrollWindow
CreateWindowExW
UpdateWindow
DefFrameProcW
ModifyMenuW
DestroyWindow
CallWindowProcW
SystemParametersInfoW
GetCursorPos
CheckMenuRadioItem
GetDesktopWindow
SendMessageW
GetMessagePos
GetScrollInfo
ReleaseDC
GetKeyState
GetClassNameW
PtInRect
GetMessageW
FillRect
WaitForInputIdle
CreateAcceleratorTableW
EnumWindows
EnumDisplaySettingsW
PostMessageW
DestroyCursor
CreatePopupMenu
RegisterClassW
BeginDeferWindowPos
CreateDialogIndirectParamW
DrawMenuBar
DestroyAcceleratorTable
DestroyMenu
SetCursor
DrawEdge
GetMenuState
EndPaint
TrackPopupMenu
OpenClipboard
GetSystemMetrics
GetForegroundWindow
CreateMenu
DefWindowProcW
AdjustWindowRectEx
RegisterClipboardFormatW

kernel32

SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetLastError
MultiByteToWideChar
WriteFile
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcAddress
WideCharToMultiByte
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
RtlUnwind
ExitProcess
GetVersion
GetCommandLineA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
CloseHandle
CreateFileA
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
CreateFileW
ReadFile
SetFilePointer

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8f21daf36b57b444036e044d350b180

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

af:14:5e:46:98:15:c7:59:8e:01:51:29:2c:a3:c0:cdCertificate

Extended Key Usages

Key Usages

51:3c:70:b9:f3:27:04:09:b9:2a:27:f2:9e:ff:42:43:d3:a4:b9:e4Signer

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 106KB

.rsrc Size: 4KB - Virtual size: 3KB

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

af:14:5e:46:98:15:c7:59:8e:01:51:29:2c:a3:c0:cd
Certificate

51:3c:70:b9:f3:27:04:09:b9:2a:27:f2:9e:ff:42:43:d3:a4:b9:e4
Signer

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 106KB

.rsrc
Size: 4KB - Virtual size: 3KB