264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7

Sharing

Copy URL

Twitter E-mail

General

Target

264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7
Size

1.3MB
MD5

a72a60a337085a51cfb5c4268281f604
SHA1

c9cd515240c27dfe581237b6ff56bc507e5ddffb
SHA256

264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7
SHA512

58c0eada2738094ea12e49ff39a46971d307119778e8325830209f85f2b7f2945ec08dcb7db03d5cc51a57de2bfcff09da48be962da884ae45773073111d415a
SSDEEP

24576:Dc2e+mt0BUefY1OOz6KgoHPLVGdbiCu4SMZ4QV:49EfG3s28vuWB

Score

N/A

Malware Config

Signatures

Files

264210d36cbd2afd7e412e3639844eb7cf89c344ecf8cf498d9cb90a9777d6a7
.exe windows x86

7256249dafe773f8329c2a0a9c25a74b

Code Sign

06:91:71:2a:8e:58:ee:aa:4c:c0:90:5b:63:80:d7:5a
Certificate

Issuer

CN=JGOCGMZT

Not Before

30-11-2018 12:27

Not After

31-12-2039 23:59

Subject

CN=JGOCGMZT

Extended Key Usages

ExtKeyUsageCodeSigning

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

be:b0:c9:a7:54:f4:9d:3d:46:f7:14:40:43:8b:0f:de:37:92:d7:98
Signer

Actual PE Digest

be:b0:c9:a7:54:f4:9d:3d:46:f7:14:40:43:8b:0f:de:37:92:d7:98

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=JGOCGMZT

03-12-2018 23:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetModuleHandleA

user32

IsGUIThread
GetKeyboardLayout
ReleaseCapture
GetShellWindow
EnumClipboardFormats
IsCharAlphaNumericW
GetThreadDesktop
CharUpperA
VkKeyScanA
LoadCursorFromFileW
GetDialogBaseUnits
GetOpenClipboardWindow
CloseWindowStation
DestroyWindow
GetFocus
CloseClipboard
IsCharLowerW
GetWindowDC
GetClipboardData
VkKeyScanW
CharUpperW
IsCharUpperW
GetQueueStatus
CopyIcon
DestroyMenu
GetAsyncKeyState
GetMessagePos
CloseDesktop
GetCaretBlinkTime
IsWindowVisible
OemKeyScan
IsWindow
GetMenuContextHelpId
DestroyIcon
GetWindowTextLengthW
CharLowerA
GetMenuCheckMarkDimensions
IsMenu
GetMenu
GetDC
GetClipboardViewer
GetClipboardSequenceNumber
EndMenu
GetTopWindow
DrawMenuBar
LoadCursorFromFileA
CountClipboardFormats

gdi32

AddFontResourceW
GetSystemPaletteUse
CloseFigure
DeleteEnhMetaFile
CreateHalftonePalette
SaveDC
CloseEnhMetaFile
AddFontResourceA
GetTextAlign
UpdateColors
SwapBuffers
RealizePalette
CreateSolidBrush
DeleteColorSpace
GetROP2
CreateMetaFileW
CloseMetaFile
GetObjectType
StrokePath
GetFontLanguageInfo
DeleteDC
PathToRegion
DeleteMetaFile
GetGraphicsMode
DeleteObject
GdiGetBatchLimit

advapi32

RegQueryValueExA
RegOpenKeyExW

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 733KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7256249dafe773f8329c2a0a9c25a74b

Code Sign

06:91:71:2a:8e:58:ee:aa:4c:c0:90:5b:63:80:d7:5aCertificate

Extended Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

be:b0:c9:a7:54:f4:9d:3d:46:f7:14:40:43:8b:0f:de:37:92:d7:98Signer

Signature Validations

Verification

03-12-2018 23:57 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 756B

.rsrc Size: 2KB - Virtual size: 733KB

06:91:71:2a:8e:58:ee:aa:4c:c0:90:5b:63:80:d7:5a
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

be:b0:c9:a7:54:f4:9d:3d:46:f7:14:40:43:8b:0f:de:37:92:d7:98
Signer

03-12-2018 23:57
Valid: false

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 756B

.rsrc
Size: 2KB - Virtual size: 733KB