General

Malware Config

Signatures

Files

• 7b75fbd9dfbac78202ef539539ffa34bf1c457a791b1117576da6c418fe054a1.exe

  .exe windows x86

  1857747c043cb479846bd5be2b04d87f

  
  

  Code Sign

  51:31:82:28:1b:07:33:b8:4a:75:e4:e4:b9:cb:7e:f6

  Certificate

  Issuer

  CN=99818423945557345441449878765547442456928866767918827368261976484851898342761913594992196975363836497319382637632569255628795451453624967647616715124687429

  Not Before

  23-01-2013 18:13

  Not After

  31-12-2039 23:59

  Subject

  CN=99818423945557345441449878765547442456928866767918827368261976484851898342761913594992196975363836497319382637632569255628795451453624967647616715124687429

  Extended Key Usages

  ExtKeyUsageCodeSigning

  99:66:64:59:e8:d1:d4:f2:96:26:a8:f1:af:87:dd:00:05:15:3a:f8

  Signer

  Actual PE Digest

  99:66:64:59:e8:d1:d4:f2:96:26:a8:f1:af:87:dd:00:05:15:3a:f8

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=99818423945557345441449878765547442456928866767918827368261976484851898342761913594992196975363836497319382637632569255628795451453624967647616715124687429

  12-05-2022 17:51

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualAlloc

  GetProcAddress

  LoadLibraryExA

  user32

  PostQuitMessage

  DefWindowProcA

  LoadIconA

  LoadCursorA

  GetClientRect

  gdi32

  DeleteEnhMetaFile

  CloseEnhMetaFile

  LineTo

  CreateEnhMetaFileA

  Rectangle

  MoveToEx

  PlayEnhMetaFile

  Sections

  .text

  Size: 175KB - Virtual size: 174KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 688B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata2

  Size: 512B - Virtual size: 100B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ