d4fa5024707463137485384896088182d3eb6a76e559f1d27880c58365abb22eN

Sharing

Copy URL Twitter E-mail

General

Target

d4fa5024707463137485384896088182d3eb6a76e559f1d27880c58365abb22eN
Size

119KB
MD5

261e00cc79eb1eefc9ad9c595e33d790
SHA1

3f0883571d86669bd23069e81ee02abd5973b042
SHA256

d4fa5024707463137485384896088182d3eb6a76e559f1d27880c58365abb22e
SHA512

cc95f5ad081134655fad8c0cba6c9f495fc4b8a4895a42f4d057942447a91e8f2938dcdf5cd17abd137d9832060804b0452682d574615e147dad6dc09e964ad4
SSDEEP

192:Fm9+2I2VwQWxlVkVOKs6TtoM2rvAEZ/eexI5kxeyqBtp6EE9H6dnECm5GiUVaYNt:/G4fVkEuz2rIENxeyBE8HO45Pcl3yO

Score

1^/10

Malware Config

Signatures

Files

d4fa5024707463137485384896088182d3eb6a76e559f1d27880c58365abb22eN
.exe windows:4 windows x86 arch:x86

ddd87289a3cd2253d408851e8cd71082

Code Sign

17:b0:dd:49:6d:dc:d5:54:b7:0d:ed:57:14:01:f9:4f
Certificate

Issuer

CN=Oqiwaweaqirorow

Not Before

31/12/2010, 22:00

Not After

31/12/2039, 23:59

Subject

CN=Oqiwaweaqirorow

68:5f:4d:23:99:24:67:f6:47:a1:8e:93:cb:73:84:ff:b9:1d:8b:e1
Signer

Actual PE Digest

68:5f:4d:23:99:24:67:f6:47:a1:8e:93:cb:73:84:ff:b9:1d:8b:e1

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
GetLastError
GetCommandLineA
ExitProcess
GetSystemInfo

user32

GetClientRect
LoadCursorA
PostQuitMessage
RegisterClassExA
SetTimer
DispatchMessageA
DefWindowProcA
BeginPaint
CreateWindowExA

gdi32

SelectObject
DeleteDC
CreateCompatibleDC

advapi32

GetUserNameA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 706B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 768B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddd87289a3cd2253d408851e8cd71082

Code Sign

17:b0:dd:49:6d:dc:d5:54:b7:0d:ed:57:14:01:f9:4fCertificate

68:5f:4d:23:99:24:67:f6:47:a1:8e:93:cb:73:84:ff:b9:1d:8b:e1Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 768B - Virtual size: 706B

.data Size: 768B - Virtual size: 652B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 256B - Virtual size: 198B

17:b0:dd:49:6d:dc:d5:54:b7:0d:ed:57:14:01:f9:4f
Certificate

68:5f:4d:23:99:24:67:f6:47:a1:8e:93:cb:73:84:ff:b9:1d:8b:e1
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 768B - Virtual size: 706B

.data
Size: 768B - Virtual size: 652B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 256B - Virtual size: 198B