52869cba0ae804bd8294bd67e86fc31e49eb2b344353bf50087afda53b9f3740

Sharing

Copy URL

Twitter E-mail

General

Target

52869cba0ae804bd8294bd67e86fc31e49eb2b344353bf50087afda53b9f3740
Size

460KB
MD5

0a2d2639b8b06e6748312abca5b1d745
SHA1

524f3b3119a9adea4308f190904d7a0dceb475b8
SHA256

52869cba0ae804bd8294bd67e86fc31e49eb2b344353bf50087afda53b9f3740
SHA512

ac3d6eebe4c64ec66f968d11e598f477e28b7b0a6523b14a4975cea29b8913a33b2354eda48a878658dcb359b974ab43e9c4ccbabdc3f73109258fe1d539ff5f
SSDEEP

6144:ltEtEtEtEtEtEtEtEtEtEtXbu2EtQvhfLDg0ah:LeeeeeeeeeeXCjqv5Dg0a

Score

N/A

Malware Config

Signatures

Files

52869cba0ae804bd8294bd67e86fc31e49eb2b344353bf50087afda53b9f3740
.exe windows x86

6be1afd23ea68c8b9eddd750533c3a41

Code Sign

c8:c4:7f:f5:72:40:fc:da:35:a0:02:15:f4:e5:5a:4a
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28-05-2020 00:00

Not After

28-05-2021 23:59

Subject

CN=OOO PROEL-NN2018,O=OOO PROEL-NN2018,POSTALCODE=423040,STREET=d. 120 kv. 21\, ul. Gimatdinova,L=Nurlat,ST=Tatarstan Resp.,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-05-2019 00:00

Not After

01-08-2030 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0e:8b:88:fa:a4:6e:f4:81:79:9f:d0:32:c5:3b:9d:6e:07:af:e0:7f
Signer

Actual PE Digest

0e:8b:88:fa:a4:6e:f4:81:79:9f:d0:32:c5:3b:9d:6e:07:af:e0:7f

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=OOO PROEL-NN2018,O=OOO PROEL-NN2018,POSTALCODE=423040,STREET=d. 120 kv. 21\, ul. Gimatdinova,L=Nurlat,ST=Tatarstan Resp.,C=RU

18-05-2022 18:09
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
LoadLibraryA
GetProcAddress
VirtualAlloc

user32

LoadIconA
IsGUIThread
IsCharAlphaA
IsCharLowerA
IsCharAlphaNumericW
IsCharAlphaNumericA
IsCharLowerW
IsCharAlphaW
IsCharUpperA
IsClipboardFormatAvailable
IsCharUpperW
GetThreadDesktop
GetDialogBaseUnits
LoadCursorFromFileA
CharUpperW
DestroyCursor
VkKeyScanA
DestroyMenu
GetSystemMetrics
CharUpperA
DrawMenuBar
LoadCursorFromFileW
GetListBoxInfo
GetMenuItemCount
IsWindow
WindowFromDC

gdi32

GetEnhMetaFileA
CreateMetaFileA
SwapBuffers
GetSystemPaletteUse
FillPath
GetMapMode
CloseMetaFile
UpdateColors
CancelDC
GetTextAlign
GetLayout
RealizePalette

advapi32

RegQueryValueExW
GetUserNameA

Sections

.text
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 945B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6be1afd23ea68c8b9eddd750533c3a41

Code Sign

c8:c4:7f:f5:72:40:fc:da:35:a0:02:15:f4:e5:5a:4aCertificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

0e:8b:88:fa:a4:6e:f4:81:79:9f:d0:32:c5:3b:9d:6e:07:af:e0:7fSigner

Signature Validations

Verification

18-05-2022 18:09 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 227KB - Virtual size: 227KB

.rdata Size: 1024B - Virtual size: 945B

.data Size: 220KB - Virtual size: 219KB

.rsrc Size: 1KB - Virtual size: 1KB

c8:c4:7f:f5:72:40:fc:da:35:a0:02:15:f4:e5:5a:4a
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

0e:8b:88:fa:a4:6e:f4:81:79:9f:d0:32:c5:3b:9d:6e:07:af:e0:7f
Signer

18-05-2022 18:09
Valid: false

.text
Size: 227KB - Virtual size: 227KB

.rdata
Size: 1024B - Virtual size: 945B

.data
Size: 220KB - Virtual size: 219KB

.rsrc
Size: 1KB - Virtual size: 1KB