General

Malware Config

Signatures

Files

• 11389b81d0d59a33c5039dcb614e19ecb654a087f77a1c050b343451af71f484

  .exe windows x86

  303f89b8f429d52fa9a67ddad2dbfa52

  
  

  Code Sign

  67:c4:91:00:26:43:40:4d:ba:04:2a:a6:7d:59:cc:56

  Certificate

  Issuer

  CN=XTKWFRTLHUJZGTUHXI

  Not Before

  19-10-2020 16:14

  Not After

  31-12-2039 23:59

  Subject

  CN=XTKWFRTLHUJZGTUHXI

  Extended Key Usages

  ExtKeyUsageCodeSigning

  69:ab:c9:5a:f0:fc:a4:45:38:75:83:5b:30:d8:35:c5:10:29:af:7d

  Signer

  Actual PE Digest

  69:ab:c9:5a:f0:fc:a4:45:38:75:83:5b:30:d8:35:c5:10:29:af:7d

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=XTKWFRTLHUJZGTUHXI

  24-02-2022 21:40

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comctl32

  ImageList_GetIconSize

  ImageList_Write

  ImageList_Read

  ImageList_GetIcon

  ImageList_ReplaceIcon

  ImageList_GetImageCount

  ImageList_Destroy

  ImageList_Create

  Sections

  .rdata

  Size: 512B - Virtual size: 143B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 270KB - Virtual size: 269KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 26KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ