General

Malware Config

Signatures

Files

• e275434786c74dc8e568e156d6e7de940c5c3e93ddd6180f175ac691bd6a85c2

  .exe windows x86

  12f12d364f5f6a801e52c9dce28d1965

  
  

  Code Sign

  ae:cb:d4:e4:e3:94:e4:c4

  Certificate

  Issuer

  CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Not Before

  05-03-2020 17:48

  Not After

  05-03-2021 17:48

  Subject

  CN=Legato Investment LTD,O=Legato Investment LTD,L=London,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  Certificate

  Issuer

  CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Not Before

  01-09-2009 00:00

  Not After

  31-12-2037 23:59

  Subject

  CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  07

  Certificate

  Issuer

  CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Not Before

  03-05-2011 07:00

  Not After

  03-05-2031 07:00

  Subject

  CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:6f:e2:34:13:d2:ef:c6:f5:99:e3:f4:d1:b9:22:7c:df:1e:d2:4f

  Signer

  Actual PE Digest

  03:6f:e2:34:13:d2:ef:c6:f5:99:e3:f4:d1:b9:22:7c:df:1e:d2:4f

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Legato Investment LTD,O=Legato Investment LTD,L=London,C=GB

  18-05-2022 18:09

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  oleaut32

  VariantClear

  SysAllocString

  user32

  SendMessageA

  SetTimer

  KillTimer

  DialogBoxParamA

  SetWindowLongA

  GetWindowLongA

  SetWindowTextW

  SetWindowTextA

  LoadIconA

  LoadStringW

  LoadStringA

  CharUpperW

  CharUpperA

  DestroyWindow

  EndDialog

  PostMessageA

  ShowWindow

  MessageBoxW

  GetDlgItem

  DialogBoxParamW

  shell32

  ShellExecuteExA

  msvcrt

  _controlfp

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  _onexit

  __dllonexit

  ??1type_info@@UAE@XZ

  _except_handler3

  _beginthreadex

  memcpy

  free

  malloc

  _CxxThrowException

  _purecall

  memmove

  __CxxFrameHandler

  memcmp

  kernel32

  GetCommandLineW

  GetStartupInfoA

  GetModuleHandleA

  InitializeCriticalSection

  ResetEvent

  SetEvent

  CreateEventA

  VirtualFree

  VirtualAlloc

  Sleep

  WaitForMultipleObjects

  GetStdHandle

  SetEndOfFile

  WriteFile

  ReadFile

  SetFilePointer

  GetFileSize

  CreateFileA

  FindNextFileA

  FindFirstFileW

  FindFirstFileA

  FindClose

  GetTempFileNameA

  GetTempPathA

  GetCurrentDirectoryA

  GetFullPathNameW

  GetFullPathNameA

  lstrlenA

  DeleteFileW

  DeleteFileA

  CreateDirectoryW

  CreateDirectoryA

  RemoveDirectoryW

  SetFileAttributesW

  RemoveDirectoryA

  SetFileAttributesA

  SetLastError

  CreateFileW

  SetFileTime

  GetWindowsDirectoryA

  FormatMessageW

  FormatMessageA

  LocalFree

  GetModuleFileNameW

  GetModuleFileNameA

  AreFileApisANSI

  GetLastError

  WideCharToMultiByte

  MultiByteToWideChar

  DeleteCriticalSection

  WaitForSingleObject

  CloseHandle

  CreateProcessA

  SetCurrentDirectoryA

  GetVersionExA

  LeaveCriticalSection

  EnterCriticalSection

  Sections

  .text

  Size: 81KB - Virtual size: 80KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .sxdata

  Size: 512B - Virtual size: 4B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 33KB - Virtual size: 33KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ