General

Malware Config

Signatures

Files

• 2781194475512243ce53ba7e199feb37177d53d86d3bfd7e6c7bcf09615de054

  .exe windows x86

  18f3c2d0e02b324b8dc43606b96e4aa9

  
  

  Code Sign

  25:8b:c4:a1:56:32:a0:84:41:03:3d:44:90:1f:16:65

  Certificate

  Issuer

  CN=TSOZTOQLIGLKXHEXKZ

  Not Before

  29-07-2020 17:56

  Not After

  31-12-2039 23:59

  Subject

  CN=TSOZTOQLIGLKXHEXKZ

  Extended Key Usages

  ExtKeyUsageCodeSigning

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a5:78:32:a7:52:fc:03:b0:8a:1e:83:41:70:db:65:ec:30:ca:f3:ad

  Signer

  Actual PE Digest

  a5:78:32:a7:52:fc:03:b0:8a:1e:83:41:70:db:65:ec:30:ca:f3:ad

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=TSOZTOQLIGLKXHEXKZ

  05-10-2020 05:44

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  lstrcmpiA

  LoadLibraryA

  LocalFree

  LocalAlloc

  GetACP

  Sleep

  VirtualFree

  VirtualAlloc

  GetSystemInfo

  GetTickCount

  QueryPerformanceCounter

  GetVersion

  GetCurrentThreadId

  VirtualQuery

  WideCharToMultiByte

  SetCurrentDirectoryW

  MultiByteToWideChar

  lstrlenW

  lstrcpynW

  LoadLibraryExW

  IsValidLocale

  GetSystemDefaultUILanguage

  GetStartupInfoA

  GetProcAddress

  GetModuleHandleW

  GetModuleFileNameW

  GetUserDefaultUILanguage

  GetLocaleInfoW

  GetLastError

  GetCurrentDirectoryW

  GetCommandLineW

  FreeLibrary

  FindFirstFileW

  FindClose

  ExitProcess

  ExitThread

  CreateThread

  CompareStringW

  WriteFile

  UnhandledExceptionFilter

  SetFilePointer

  SetEndOfFile

  RtlUnwind

  ReadFile

  RaiseException

  GetStdHandle

  GetFileSize

  GetFileType

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  InitializeCriticalSection

  CreateFileW

  CloseHandle

  TlsSetValue

  TlsGetValue

  lstrcpyW

  lstrcmpA

  lstrcmpW

  WriteProcessMemory

  WritePrivateProfileStringW

  WaitForSingleObject

  WaitForMultipleObjectsEx

  WaitForMultipleObjects

  VirtualQueryEx

  VirtualProtectEx

  VirtualProtect

  VirtualFreeEx

  VirtualAllocEx

  VerLanguageNameW

  UnmapViewOfFile

  TerminateThread

  TerminateProcess

  SystemTimeToTzSpecificLocalTime

  SystemTimeToFileTime

  SwitchToThread

  SuspendThread

  SleepEx

  SizeofResource

  SignalObjectAndWait

  SetThreadPriority

  SetThreadLocale

  SetThreadContext

  SetThreadAffinityMask

  SetPriorityClass

  SetLastError

  SetFileAttributesW

  SetEvent

  SetErrorMode

  ResumeThread

  ResetEvent

  RemoveDirectoryW

  ReleaseSemaphore

  ReleaseMutex

  ReadProcessMemory

  QueryPerformanceFrequency

  QueryDosDeviceW

  PulseEvent

  OutputDebugStringW

  OpenProcess

  OpenMutexA

  OpenFileMappingA

  OpenFileMappingW

  OpenEventA

  OpenEventW

  MulDiv

  MoveFileW

  MapViewOfFile

  LockResource

  LoadResource

  LoadLibraryExA

  LoadLibraryW

  IsBadReadPtr

  GlobalUnlock

  GlobalSize

  GlobalMemoryStatusEx

  GlobalHandle

  GlobalLock

  GlobalFree

  GlobalFindAtomW

  GlobalDeleteAtom

  GlobalAlloc

  GlobalAddAtomW

  GetWindowsDirectoryW

  GetVolumeInformationW

  GetVersionExA

  GetVersionExW

  GetUserDefaultLCID

  GetTimeZoneInformation

  GetThreadPriority

  GetThreadLocale

  GetThreadContext

  GetTempPathA

  GetSystemDirectoryA

  GetSystemDirectoryW

  GetSystemDefaultLangID

  GetStringTypeExA

  GetStringTypeExW

  GetStartupInfoW

  GetProcessVersion

  GetProcessAffinityMask

  GetPrivateProfileStringW

  GetPriorityClass

  GetModuleHandleA

  GetModuleFileNameA

  GetLogicalDrives

  GetLocaleInfoA

  GetLocalTime

  GetFullPathNameW

  GetFileTime

  GetFileAttributesExW

  GetFileAttributesA

  GetFileAttributesW

  GetExitCodeThread

  GetExitCodeProcess

  GetEnvironmentVariableW

  GetEnvironmentStringsW

  GetDriveTypeW

  GetDiskFreeSpaceW

  GetDateFormatW

  GetCurrentThread

  GetCurrentProcessId

  GetCurrentProcess

  GetComputerNameA

  GetComputerNameW

  GetCommandLineA

  GetCPInfo

  FreeResource

  InterlockedIncrement

  InterlockedExchangeAdd

  InterlockedExchange

  InterlockedDecrement

  InterlockedCompareExchange

  FreeEnvironmentStringsW

  FormatMessageA

  FormatMessageW

  FlushFileBuffers

  FindResourceW

  FindNextFileW

  FindFirstFileA

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  FileTimeToDosDateTime

  ExpandEnvironmentStringsA

  ExpandEnvironmentStringsW

  EnumCalendarInfoW

  DuplicateHandle

  DeviceIoControl

  DeleteFileW

  CreateSemaphoreW

  CreateProcessW

  CreateMutexA

  CreateMutexW

  CreateFileMappingA

  CreateFileMappingW

  CreateFileA

  CreateEventA

  CreateEventW

  CreateDirectoryW

  CopyFileW

  CompareStringA

  FindFirstFileExW

  SetFilePointerEx

  user32

  LoadIconA

  GetClipboardOwner

  GetDesktopWindow

  IsMenu

  GetInputState

  GetCapture

  GetWindowTextLengthA

  GetDC

  GetCursor

  CloseWindowStation

  CountClipboardFormats

  VkKeyScanW

  GetClipboardSequenceNumber

  GetKeyState

  GetClipboardViewer

  GetSystemMetrics

  IsCharAlphaW

  IsCharLowerA

  GetListBoxInfo

  PaintDesktop

  GetMenuCheckMarkDimensions

  GetLastActivePopup

  GetThreadDesktop

  gdi32

  GetStockObject

  BeginPath

  DeleteColorSpace

  GetPixelFormat

  AddFontResourceW

  CreateMetaFileW

  GetObjectType

  GetEnhMetaFileW

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1.6MB - Virtual size: 1.6MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ