913c6f65e3cab1756f424fa7c2d81b75ab0726b66d5c301056740821b641adfb

Sharing

Copy URL

Twitter E-mail

General

Target

913c6f65e3cab1756f424fa7c2d81b75ab0726b66d5c301056740821b641adfb
Size

582KB
MD5

c822149db6e41ee020572700b82eff28
SHA1

5c8b4eaac5e209c11fd8ccd6a86b5629d8a04741
SHA256

913c6f65e3cab1756f424fa7c2d81b75ab0726b66d5c301056740821b641adfb
SHA512

eac49b60df3ca9b34d8f5f5117a0c89eac466fd9a6209fab9cd91d34978a687fbae83c72311af2d793d211de81246dd3b515ac78d5213a7aca2064ff15a591ed
SSDEEP

6144:OCE98sDXeHfijLo9qLV+y2qGGAlg6uuDkX06:OCS6HQSm6qGGmFuuYX06

Score

N/A

Malware Config

Signatures

Files

913c6f65e3cab1756f424fa7c2d81b75ab0726b66d5c301056740821b641adfb
.dll windows x86

ccc305b228c4aa5b695a14d04d027e1f

Code Sign

03:3d:67:a3:1f:bd:45:84:45:4a:cb:88:67:13:d2:f7
Certificate

Issuer

CN=SBDFBGBZYKYZJUTAJC

Not Before

27-10-2020 21:30

Not After

31-12-2039 23:59

Subject

CN=SBDFBGBZYKYZJUTAJC

Extended Key Usages

ExtKeyUsageCodeSigning

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0a:0b:46:a5:97:58:c2:29:ed:19:f2:55:f5:e7:f1:e9:51:fa:5e:67
Signer

Actual PE Digest

0a:0b:46:a5:97:58:c2:29:ed:19:f2:55:f5:e7:f1:e9:51:fa:5e:67

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SBDFBGBZYKYZJUTAJC

15-04-2022 17:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LoadLibraryExW
GetProcAddress

user32

GetLastActivePopup
LoadIconA
GetCursor
GetKBCodePage
CreatePopupMenu
GetDoubleClickTime
GetInputState
GetDialogBaseUnits
GetMenuCheckMarkDimensions
CloseClipboard
GetCapture
GetDesktopWindow
AnyPopup
GetCaretBlinkTime
GetActiveWindow
GetClipboardOwner
CountClipboardFormats
CreateMenu
GetClipboardViewer
GetClipboardSequenceNumber
GetFocus
GetForegroundWindow
EndMenu
LoadIconW

gdi32

GetEnhMetaFileBits
UpdateColors
WidenPath

advapi32

RegOpenKeyA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata11
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata10
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata9
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata8
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata5
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata4
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata3
Size: 350KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccc305b228c4aa5b695a14d04d027e1f

Code Sign

03:3d:67:a3:1f:bd:45:84:45:4a:cb:88:67:13:d2:f7Certificate

Extended Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

0a:0b:46:a5:97:58:c2:29:ed:19:f2:55:f5:e7:f1:e9:51:fa:5e:67Signer

Signature Validations

Verification

15-04-2022 17:00 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata11 Size: 512B - Virtual size: 100B

.rdata10 Size: 512B - Virtual size: 100B

.rdata9 Size: 512B - Virtual size: 100B

.rdata8 Size: 512B - Virtual size: 100B

.rdata7 Size: 512B - Virtual size: 100B

.rdata6 Size: 512B - Virtual size: 100B

.rdata5 Size: 10KB - Virtual size: 9KB

.rdata4 Size: 10KB - Virtual size: 9KB

.rdata3 Size: 350KB - Virtual size: 350KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 193KB - Virtual size: 192KB

.reloc Size: 1024B - Virtual size: 936B

03:3d:67:a3:1f:bd:45:84:45:4a:cb:88:67:13:d2:f7
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

0a:0b:46:a5:97:58:c2:29:ed:19:f2:55:f5:e7:f1:e9:51:fa:5e:67
Signer

15-04-2022 17:00
Valid: false

.text
Size: 5KB - Virtual size: 5KB

.rdata11
Size: 512B - Virtual size: 100B

.rdata10
Size: 512B - Virtual size: 100B

.rdata9
Size: 512B - Virtual size: 100B

.rdata8
Size: 512B - Virtual size: 100B

.rdata7
Size: 512B - Virtual size: 100B

.rdata6
Size: 512B - Virtual size: 100B

.rdata5
Size: 10KB - Virtual size: 9KB

.rdata4
Size: 10KB - Virtual size: 9KB

.rdata3
Size: 350KB - Virtual size: 350KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 193KB - Virtual size: 192KB

.reloc
Size: 1024B - Virtual size: 936B