General

Malware Config

Signatures

Files

• 913c6f65e3cab1756f424fa7c2d81b75ab0726b66d5c301056740821b641adfb

  .dll windows x86

  ccc305b228c4aa5b695a14d04d027e1f

  
  

  Code Sign

  03:3d:67:a3:1f:bd:45:84:45:4a:cb:88:67:13:d2:f7

  Certificate

  Issuer

  CN=SBDFBGBZYKYZJUTAJC

  Not Before

  27-10-2020 21:30

  Not After

  31-12-2039 23:59

  Subject

  CN=SBDFBGBZYKYZJUTAJC

  Extended Key Usages

  ExtKeyUsageCodeSigning

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  23-10-2020 00:00

  Not After

  22-01-2032 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  0a:0b:46:a5:97:58:c2:29:ed:19:f2:55:f5:e7:f1:e9:51:fa:5e:67

  Signer

  Actual PE Digest

  0a:0b:46:a5:97:58:c2:29:ed:19:f2:55:f5:e7:f1:e9:51:fa:5e:67

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=SBDFBGBZYKYZJUTAJC

  15-04-2022 17:00

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetLastError

  LoadLibraryExW

  GetProcAddress

  user32

  GetLastActivePopup

  LoadIconA

  GetCursor

  GetKBCodePage

  CreatePopupMenu

  GetDoubleClickTime

  GetInputState

  GetDialogBaseUnits

  GetMenuCheckMarkDimensions

  CloseClipboard

  GetCapture

  GetDesktopWindow

  AnyPopup

  GetCaretBlinkTime

  GetActiveWindow

  GetClipboardOwner

  CountClipboardFormats

  CreateMenu

  GetClipboardViewer

  GetClipboardSequenceNumber

  GetFocus

  GetForegroundWindow

  EndMenu

  LoadIconW

  gdi32

  GetEnhMetaFileBits

  UpdateColors

  WidenPath

  advapi32

  RegOpenKeyA

  Sections

  .text

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata11

  Size: 512B - Virtual size: 100B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata10

  Size: 512B - Virtual size: 100B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata9

  Size: 512B - Virtual size: 100B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata8

  Size: 512B - Virtual size: 100B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata7

  Size: 512B - Virtual size: 100B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata6

  Size: 512B - Virtual size: 100B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata5

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata4

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata3

  Size: 350KB - Virtual size: 350KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 193KB - Virtual size: 192KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 936B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ