b2216ad849b14288f1441d4c7be556eb778f80a3ba776eaaacf7c3f16671db23

Sharing

Copy URL

Twitter E-mail

General

Target

b2216ad849b14288f1441d4c7be556eb778f80a3ba776eaaacf7c3f16671db23
Size

2.3MB
MD5

4ee8b1716db71779b4c9b1f12120f54a
SHA1

abf5ee914721e886035eea9e4f308afffe0a7053
SHA256

b2216ad849b14288f1441d4c7be556eb778f80a3ba776eaaacf7c3f16671db23
SHA512

7c9092b0f2b9ca87b8d72eb312fa36be59a065525509c3c8174a218e871b5d60f1a58760f89006b6fe70bebf94cddf07f47ac8fa6fb6b5b74dcd93f91dc1e7a9
SSDEEP

49152:Kc860r4w49JWLaLTd+rdEl6jiSaRYQVdSUqX71Y3wCTC+d21BMWCrW:Kc860r4LiaLTd+REl8vaRYQVd3qX71uu

Score

N/A

Malware Config

Signatures

Files

b2216ad849b14288f1441d4c7be556eb778f80a3ba776eaaacf7c3f16671db23
.exe windows x86

a9cf51aa71bda58b86837d033b481e0b

Code Sign

8a:cb:9d:47:17:4f:12:59:7b:0c:51:54:23:8c:eb:8e
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

10-04-2020 00:00

Not After

10-04-2021 23:59

Subject

CN=clear technology sro,O=clear technology sro,POSTALCODE=14000,STREET=Jaurisova 515,L=Praha,ST=Praha,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

71:cd:e0:18:7a:65:d2:a8:ea:61:fe:28:23:18:df:2e:e0:1e:61:ce
Signer

Actual PE Digest

71:cd:e0:18:7a:65:d2:a8:ea:61:fe:28:23:18:df:2e:e0:1e:61:ce

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=clear technology sro,O=clear technology sro,POSTALCODE=14000,STREET=Jaurisova 515,L=Praha,ST=Praha,C=CZ

18-05-2022 18:08
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
RoundRect
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CreateCompatibleBitmap
SetPixel
OffsetRgn
PatBlt
StretchBlt
FillRgn
GetTextExtentPoint32W
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CopyMetaFileW
CreateDCW
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetObjectW
DeleteObject
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CombineRgn
CreateRectRgnIndirect
SetRectRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
GetTextFaceW

kernel32

GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
WriteConsoleW
LoadLibraryExA
CreateProcessW
GetProcessHeap
DeleteCriticalSection
GetWindowsDirectoryW
DecodePointer
GetCurrentDirectoryW
GetOEMCP
LoadLibraryW
GetSystemInfo
RaiseException
HeapReAlloc
GetLastError
Sleep
HeapSize
FindFirstChangeNotificationW
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetCurrentProcess
EnterCriticalSection
HeapFree
VirtualProtect
GetVolumeInformationW
HeapAlloc
GetACP
OutputDebugStringA
SetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
LocalAlloc
LocalReAlloc
LocalFree
GetCurrentProcessId
LoadResource
LockResource
SizeofResource
FindResourceW
WideCharToMultiByte
GlobalSize
MulDiv
FormatMessageW
CopyFileW
MultiByteToWideChar
CloseHandle
WaitForSingleObject
CreateEventW
GetCurrentThreadId
SetThreadPriority
ResumeThread
CompareStringW
lstrcmpA
GlobalGetAtomNameW
FileTimeToSystemTime
EncodePointer
GetSystemDirectoryW
FreeLibrary
FreeResource
LoadLibraryExW
LoadLibraryA
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CreateFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
lstrcmpiW
GlobalFlags
GetVersionExW
GetUserDefaultUILanguage
FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
lstrcpyW
FindResourceExW
VerSetConditionMask
VerifyVersionInfoW
GetTempPathW
GetTickCount
GetProfileIntW
SearchPathW
GetTempFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwind
GetFileType
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
HeapQueryInformation
GetCommandLineA
GetCommandLineW
VirtualAlloc
VirtualQuery
QueryPerformanceFrequency
SetStdHandle
ExitProcess
GetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringW
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage

user32

GetDlgItem
GetDlgCtrlID
SetFocus
GetCapture
GetMenu
SetMenu
TrackPopupMenu
UpdateWindow
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
GetClientRect
GetWindowRect
AdjustWindowRectEx
ScreenToClient
MapWindowPoints
CopyRect
EqualRect
PtInRect
SetWindowLongW
GetClassLongW
GetClassNameW
GetTopWindow
GetWindow
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
GetMonitorInfoW
ShowWindow
MoveWindow
CheckDlgButton
SetWindowTextW
IsDialogMessageW
DestroyIcon
CharUpperW
ClientToScreen
GetDesktopWindow
RealChildWindowFromPoint
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
FillRect
DestroyMenu
GetMenuItemInfoW
InflateRect
SystemParametersInfoW
CopyImage
SendDlgItemMessageA
SetRectEmpty
OffsetRect
PostQuitMessage
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetAsyncKeyState
MapDialogRect
IntersectRect
TrackMouseEvent
InvalidateRect
LoadImageW
EnableMenuItem
SetCursor
DeleteMenu
EndDeferWindowPos
KillTimer
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
SetMenuItemBitmaps
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
CallNextHookEx
DefWindowProcW
GetWindowLongW
CheckMenuItem
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoW
RegisterClassW
CallWindowProcW
PostMessageW
GetMessageTime
IsIconic
GetMessagePos
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetTimer
GetFocus
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSysColorBrush
GetSysColor
GetDC
GetSystemMetrics
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetLastActivePopup
GetWindowThreadProcessId
GetParent
MessageBoxW
IsWindowEnabled
EnableWindow
SendMessageW
UnhookWindowsHookEx
EnumWindows
DrawTextW
GetClassInfoExW
ReleaseDC
ShowOwnedPopups
GetDoubleClickTime

comctl32

ImageList_Destroy
ImageList_SetIconSize
ImageList_SetBkColor
InitCommonControlsEx
ImageList_Remove

oleaut32

LoadTypeLi
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VariantCopy
VariantChangeType
VarBstrFromDate
VariantInit
SysAllocString
SysFreeString

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

advapi32

RegCloseKey
RegCreateKeyW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW

uxtheme

DrawThemeBackground
GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
DrawThemeText
OpenThemeData
GetThemeTextExtent
CloseThemeData
GetThemeBackgroundRegion

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

shell32

SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetDesktopFolder

ole32

OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
RegisterDragDrop
ReleaseStgMedium
OleDuplicateData
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
CoTaskMemFree
CoTaskMemAlloc
CoDisconnectObject

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdiplusShutdown
GdipAlloc

shlwapi

PathRemoveFileSpecW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
StrFormatKBSizeW

msimg32

TransparentBlt
AlphaBlend

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9cf51aa71bda58b86837d033b481e0b

Code Sign

8a:cb:9d:47:17:4f:12:59:7b:0c:51:54:23:8c:eb:8eCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

71:cd:e0:18:7a:65:d2:a8:ea:61:fe:28:23:18:df:2e:e0:1e:61:ceSigner

Signature Validations

Verification

18-05-2022 18:08 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

user32

comctl32

oleaut32

version

advapi32

uxtheme

winspool.drv

shell32

ole32

gdiplus

shlwapi

msimg32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 402KB - Virtual size: 402KB

.data Size: 30KB - Virtual size: 1.0MB

.rsrc Size: 321KB - Virtual size: 321KB

.reloc Size: 130KB - Virtual size: 130KB

8a:cb:9d:47:17:4f:12:59:7b:0c:51:54:23:8c:eb:8e
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

71:cd:e0:18:7a:65:d2:a8:ea:61:fe:28:23:18:df:2e:e0:1e:61:ce
Signer

18-05-2022 18:08
Valid: false

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 402KB - Virtual size: 402KB

.data
Size: 30KB - Virtual size: 1.0MB

.rsrc
Size: 321KB - Virtual size: 321KB

.reloc
Size: 130KB - Virtual size: 130KB