General

Malware Config

Signatures

Files

• 72c6263c691245f4b8bb28faf17e5140393f6906cd976a5a71efc6da76964f8a

  .dll windows x86

  dee76c051358d55d49f4e4774deb7588

  
  

  Code Sign

  6c:68:43:82:ac:08:f1:b7:42:2a:fc:42:ff:77:ca:0b

  Certificate

  Issuer

  CN=LRHOEUSYOEOXISTPKZ

  Not Before

  18-10-2020 20:29

  Not After

  31-12-2039 23:59

  Subject

  CN=LRHOEUSYOEOXISTPKZ

  Extended Key Usages

  ExtKeyUsageCodeSigning

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  02-05-2019 00:00

  Not After

  01-08-2030 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  a8:33:2b:a5:ff:2a:0e:81:6f:07:bb:9b:24:e7:b6:cf:bc:22:f2:24

  Signer

  Actual PE Digest

  a8:33:2b:a5:ff:2a:0e:81:6f:07:bb:9b:24:e7:b6:cf:bc:22:f2:24

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=LRHOEUSYOEOXISTPKZ

  02-05-2022 15:26

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  LoadLibraryA

  GetProcAddress

  GetModuleHandleW

  user32

  SetCursor

  MessageBoxA

  FillRect

  GetSysColor

  SetFocus

  MessageBoxW

  GetUserObjectInformationW

  GetProcessWindowStation

  DestroyIcon

  GetWindow

  GetLastActivePopup

  GetClassNameW

  FindWindowExW

  GetDesktopWindow

  SetWindowLongW

  GetWindowLongW

  PtInRect

  OffsetRect

  GetCursorPos

  GetClientRect

  GetWindowTextLengthW

  LoadCursorW

  DefWindowProcW

  CallWindowProcW

  CreateDialogIndirectParamW

  GetDlgCtrlID

  GetActiveWindow

  GetCapture

  SetWindowTextW

  DispatchMessageW

  DispatchMessageA

  IsWindowUnicode

  PeekMessageA

  PeekMessageW

  TranslateMessage

  MsgWaitForMultipleObjects

  CharNextW

  DestroyWindow

  GetWindowThreadProcessId

  MapWindowPoints

  ScreenToClient

  InvalidateRect

  ReleaseDC

  GetWindowDC

  GetDC

  IsWindowVisible

  EqualRect

  IsWindow

  GetForegroundWindow

  AttachThreadInput

  GetParent

  GetWindowRect

  DialogBoxIndirectParamW

  EndDialog

  SetDlgItemTextW

  CheckDlgButton

  GetFocus

  SetCapture

  ReleaseCapture

  UpdateWindow

  BeginPaint

  EndPaint

  DrawFocusRect

  SetRectEmpty

  MonitorFromWindow

  GetMonitorInfoW

  DrawTextW

  GetSystemMetrics

  IsWindowEnabled

  EnableWindow

  IsDlgButtonChecked

  GetWindowTextW

  UnregisterClassW

  GetDlgItem

  IsIconic

  SetWindowPos

  DestroyCursor

  ShowWindow

  CreateWindowExW

  SendMessageW

  LoadIconA

  LoadIconW

  GetInputState

  CreatePopupMenu

  AnyPopup

  GetCursor

  GetDialogBaseUnits

  GetCaretBlinkTime

  GetMenuCheckMarkDimensions

  EndMenu

  GetClipboardSequenceNumber

  CreateMenu

  CountClipboardFormats

  GetKBCodePage

  GetClipboardOwner

  CloseClipboard

  GetClipboardViewer

  gdi32

  GetEnhMetaFileA

  UpdateColors

  WidenPath

  advapi32

  RegOpenKeyA

  RegQueryValueExA

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata4

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata3

  Size: 350KB - Virtual size: 350KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata2

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 101KB - Virtual size: 100KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 143KB - Virtual size: 143KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 664B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ