General

Malware Config

Signatures

Files

• c35c506929aab0dd67b981add03bbeaba3c7c2e0a80babc066c0f43e4027699c

  .dll windows x86

  9f218d386c5c8cb163315c801b4de4d7

  
  

  Code Sign

  f6:75:13:9e:a6:8b:89:7a:86:5a:98:f8:e4:61:1f:00

  Certificate

  Issuer

  CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  03-12-2020 00:00

  Not After

  03-12-2021 23:59

  Subject

  CN=BS TEHNIK d.o.o.,O=BS TEHNIK d.o.o.,POSTALCODE=1225,STREET=Vevrov trg 1,L=Lukovica,C=SI

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  01

  Certificate

  Issuer

  CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  01-01-2004 00:00

  Not After

  31-12-2028 23:59

  Subject

  CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95

  Certificate

  Issuer

  CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  12-03-2019 00:00

  Not After

  31-12-2028 23:59

  Subject

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-11-2018 00:00

  Not After

  31-12-2030 23:59

  Subject

  CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  68:2e:83:22:f3:7c:2f:c2:ab:5c:07:39:bd:f1:e5:0d:78:a7:82:a4

  Signer

  Actual PE Digest

  68:2e:83:22:f3:7c:2f:c2:ab:5c:07:39:bd:f1:e5:0d:78:a7:82:a4

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=BS TEHNIK d.o.o.,O=BS TEHNIK d.o.o.,POSTALCODE=1225,STREET=Vevrov trg 1,L=Lukovica,C=SI

  07-03-2022 09:48

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetModuleHandleW

  GetLastError

  VirtualAllocEx

  GetCurrentProcessId

  SetUnhandledExceptionFilter

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  lstrcmpiW

  lstrlenW

  GetTickCount

  lstrcpyW

  lstrcatW

  OpenEventW

  SetEvent

  CreateEventW

  CloseHandle

  CreateProcessW

  GetModuleFileNameW

  ExitProcess

  GetCommandLineW

  QueryPerformanceCounter

  GetCurrentThreadId

  GetCurrentProcess

  user32

  LoadIconA

  GetMenuContextHelpId

  GetLastActivePopup

  GetWindowTextLengthA

  IsClipboardFormatAvailable

  GetListBoxInfo

  GetInputState

  IsCharLowerW

  IsMenu

  IsCharUpperA

  GetCapture

  VkKeyScanW

  CountClipboardFormats

  GetOpenClipboardWindow

  OpenIcon

  CharUpperW

  GetClipboardData

  LoadCursorFromFileW

  GetKeyboardLayout

  GetWindowTextLengthW

  CloseWindowStation

  GetClipboardSequenceNumber

  GetMenuCheckMarkDimensions

  IsCharAlphaNumericA

  GetMessageTime

  PaintDesktop

  GetParent

  CharNextA

  GetSystemMetrics

  IsCharUpperW

  CharUpperA

  IsCharAlphaNumericW

  WindowFromDC

  DestroyMenu

  DestroyIcon

  IsWindowUnicode

  IsCharLowerA

  GetDC

  IsCharAlphaW

  VkKeyScanA

  EndMenu

  IsWindowVisible

  DrawMenuBar

  GetDialogBaseUnits

  CreatePopupMenu

  GetFocus

  GetWindowContextHelpId

  GetKeyboardType

  IsCharAlphaA

  GetDlgCtrlID

  DestroyCursor

  GetQueueStatus

  GetCaretBlinkTime

  GetThreadDesktop

  GetShellWindow

  ShowCaret

  CloseClipboard

  CopyIcon

  GetDesktopWindow

  GetDoubleClickTime

  GetForegroundWindow

  OemKeyScan

  LoadStringA

  MessageBoxA

  SetThreadDesktop

  ReleaseDC

  OpenInputDesktop

  GetWindowRect

  GetWindowDC

  GetUserObjectInformationA

  GetSysColor

  GetIconInfo

  FillRect

  DrawTextA

  DrawIconEx

  CreateIcon

  CloseDesktop

  CharLowerBuffA

  CharToOemA

  gdi32

  GetStockObject

  GetEnhMetaFileW

  GetEnhMetaFileBits

  StrokePath

  DeleteEnhMetaFile

  CloseMetaFile

  GetTextCharset

  DeleteObject

  GetStretchBltMode

  CreateSolidBrush

  GetObjectType

  CancelDC

  CreatePatternBrush

  GetColorSpace

  CloseEnhMetaFile

  CreateHalftonePalette

  FlattenPath

  EndPath

  GetPixelFormat

  EndPage

  GetEnhMetaFileA

  GetBkColor

  UpdateColors

  UnrealizeObject

  GetGraphicsMode

  DeleteMetaFile

  GetDCBrushColor

  GetBkMode

  CreateMetaFileA

  GetMapMode

  SaveDC

  GdiGetBatchLimit

  WidenPath

  RealizePalette

  CreateMetaFileW

  GetSystemPaletteUse

  BeginPath

  DeleteDC

  GetLayout

  advapi32

  RegOpenKeyA

  Sections

  .text

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text8

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text7

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text6

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text5

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text4

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text3

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text2

  Size: 512B - Virtual size: 300B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 573B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2.0MB - Virtual size: 2.0MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 884B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ