8176f21fb83482ae1e7a723fdc352697795f07d03c30ff68410203127369c974

Sharing

Copy URL

Twitter E-mail

General

Target

8176f21fb83482ae1e7a723fdc352697795f07d03c30ff68410203127369c974
Size

1.0MB
MD5

ea1c4f1656731c8e075fcc06557e71d1
SHA1

81fc93fa20955013e7fcacdde22a9f204dc50459
SHA256

8176f21fb83482ae1e7a723fdc352697795f07d03c30ff68410203127369c974
SHA512

510f37a08724dbc701b1975cc497e503672d19fd4a73ad7668a5d83f001f13219cdc86d3f72bf8714f42ede6da753f5eea175455e732d382ae5ca4f565594d3a
SSDEEP

3072:szVNTuo0I5VCxmUd12i/8Y8rfulU8bax1i2NXu02LbjfrzyJKqAcwBuOo4Xl:sznu+5E3dUi278b4NX07fsALuo

Score

N/A

Malware Config

Signatures

Files

8176f21fb83482ae1e7a723fdc352697795f07d03c30ff68410203127369c974
.exe windows x86

24694711279a949bbb0146f4e340c955

Code Sign

67:00:21:b1:60:2f:d0:74:be:08:94:59:9c:90:95:0c
Certificate

Issuer

CN=GBMKLQJNMMDAVCCUKT

Not Before

23-07-2020 17:43

Not After

31-12-2039 23:59

Subject

CN=GBMKLQJNMMDAVCCUKT

Extended Key Usages

ExtKeyUsageCodeSigning

a7:d2:fd:01:0a:6d:16:72:bd:5e:ef:df:ef:54:d7:27:b3:12:11:d2
Signer

Actual PE Digest

a7:d2:fd:01:0a:6d:16:72:bd:5e:ef:df:ef:54:d7:27:b3:12:11:d2

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=GBMKLQJNMMDAVCCUKT

18-05-2022 18:07
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
WriteConsoleA
SetStdHandle
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
SetErrorMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAllocEx
GetModuleHandleW
GetLastError

user32

LoadIconA
IsGUIThread
LoadCursorFromFileA
GetWindowTextLengthW

gdi32

GetStockObject

advapi32

GetUserNameA
RegOpenKeyA
RegQueryValueExA

comctl32

ImageList_Destroy
ImageList_Create
ord17

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tdata
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tdat2a
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tdat2b
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tdat2a1
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 689KB - Virtual size: 689KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24694711279a949bbb0146f4e340c955

Code Sign

67:00:21:b1:60:2f:d0:74:be:08:94:59:9c:90:95:0cCertificate

Extended Key Usages

a7:d2:fd:01:0a:6d:16:72:bd:5e:ef:df:ef:54:d7:27:b3:12:11:d2Signer

Signature Validations

Verification

18-05-2022 18:07 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

Sections

.text Size: 141KB - Virtual size: 141KB

.rdata Size: 24KB - Virtual size: 23KB

.tdata Size: 182KB - Virtual size: 182KB

.tdat2a Size: 1024B - Virtual size: 700B

.tdat2b Size: 1024B - Virtual size: 700B

.tdat2a1 Size: 1024B - Virtual size: 700B

.data Size: 3KB - Virtual size: 2KB

2 Size: 689KB - Virtual size: 689KB

.rsrc Size: 2KB - Virtual size: 1KB

67:00:21:b1:60:2f:d0:74:be:08:94:59:9c:90:95:0c
Certificate

a7:d2:fd:01:0a:6d:16:72:bd:5e:ef:df:ef:54:d7:27:b3:12:11:d2
Signer

18-05-2022 18:07
Valid: false

.text
Size: 141KB - Virtual size: 141KB

.rdata
Size: 24KB - Virtual size: 23KB

.tdata
Size: 182KB - Virtual size: 182KB

.tdat2a
Size: 1024B - Virtual size: 700B

.tdat2b
Size: 1024B - Virtual size: 700B

.tdat2a1
Size: 1024B - Virtual size: 700B

.data
Size: 3KB - Virtual size: 2KB

2
Size: 689KB - Virtual size: 689KB

.rsrc
Size: 2KB - Virtual size: 1KB