60f22165875daf136d3a451460630b31e408cc8dc6be4e6c98c53792bdeee98f

Sharing

Copy URL

Twitter E-mail

General

Target

60f22165875daf136d3a451460630b31e408cc8dc6be4e6c98c53792bdeee98f
Size

1.1MB
MD5

c3ae781bd671ebfa92e0a8b6becf7800
SHA1

0869bb80c3a02c3a55cc9176e6eba8b65e0f8cd1
SHA256

60f22165875daf136d3a451460630b31e408cc8dc6be4e6c98c53792bdeee98f
SHA512

7094fe1ed8aaae13d3da9e4e4d08354a7213099b03d977d188ddbd8b174be46757db9c319c97baeaf3319f8343308929534218781a42e783b203b13bffaf86ca
SSDEEP

24576:zdu0en5t/AOWf3UN+qlrxMw8JjH0E1At9Z/0sp5:Zu0ezBck+6xeU3Hpp5

Score

N/A

Malware Config

Signatures

Files

60f22165875daf136d3a451460630b31e408cc8dc6be4e6c98c53792bdeee98f
.exe windows x86

56b471011e8bd66449360cbe0fe07d51

Code Sign

24:67:87:ab:9e:28:2e:bc:41:eb:61:35:44:b9:7f:99
Certificate

Issuer

CN=SQVOZRMT

Not Before

07-12-2018 11:30

Not After

31-12-2039 23:59

Subject

CN=SQVOZRMT

Extended Key Usages

ExtKeyUsageCodeSigning

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d3:1c:53:35:3f:3e:47:71:76:62:ef:d9:d5:f4:fc:23:8f:50:cb:0a:33:93:71:5f:53:c0:8b:bf:7d:7e:2d:b7
Signer

Actual PE Digest

d3:1c:53:35:3f:3e:47:71:76:62:ef:d9:d5:f4:fc:23:8f:50:cb:0a:33:93:71:5f:53:c0:8b:bf:7d:7e:2d:b7

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SQVOZRMT

11-12-2018 02:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetSystemPowerState
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
SetEvent
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringA
WritePrivateProfileStringW
lstrcmpA
lstrcmpW
lstrcmpiW
lstrlenA
lstrlenW
VirtualAllocEx
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OpenProcess
MultiByteToWideChar
MulDiv
LockResource
LockFile
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameW
GlobalFree
GlobalFlags
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVolumeInformationW
GetVersionExW
GetVersionExA
GetVersion
GetTimeZoneInformation
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetProfileIntA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileSizeEx
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetEnvironmentStringsW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleTitleA
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetConsoleAliasesW
GetConsoleAliasesA
GetCommandLineW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
FindResourceW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
ExitProcess
EnumResourceLanguagesW
EnterCriticalSection
DuplicateHandle
DeleteCriticalSection
CreateProcessW
CreateMutexW
CreateMailslotA
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CompareStringA
CommConfigDialogA
CloseHandle
VirtualAlloc
AssignProcessToJobObject

user32

SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnpackDDElParam
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
SetWindowPos
SetWindowLongW
SetWindowContextHelpId
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetMenuItemBitmaps
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageW
SendDlgItemMessageA
ScrollWindow
ScreenToClient
ReuseDDElParam
RemovePropW
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostThreadMessageA
PostQuitMessage
PostMessageW
PeekMessageW
OffsetRect
NotifyWinEvent
MoveWindow
ModifyMenuW
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyExA
MapDialogRect
LockWindowUpdate
LoadMenuW
LoadIconW
LoadCursorW
LoadBitmapW
LoadAcceleratorsW
KillTimer
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemW
InflateRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetWindow
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
FillRect
ExitWindowsEx
EqualRect
EnumDisplayDevicesA
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DrawMenuBar
DrawIcon
DrawFocusRect
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DeferWindowPos
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogIndirectParamW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CallWindowProcW
CallNextHookEx
AdjustWindowRectEx
AnimateWindow
BeginDeferWindowPos
BeginPaint
BringWindowToTop
BroadcastSystemMessageW
IsWindow

gdi32

LineTo
MoveToEx
OffsetViewportOrgEx
PolyTextOutW
PtVisible
RectVisible
RemoveFontResourceExW
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectFontLocal
SelectObject
SetBitmapBits
SetBkColor
SetBkMode
LPtoDP
SetMapMode
SetMetaFileBitsEx
SetPixel
SetROP2
SetRectRgn
SetRelAbs
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
StretchBlt
StrokePath
TextOutW
cGetTTFFromFOT
gdiPlaySpoolStream
GetEnhMetaFileW
Escape
GetWindowExtEx
GetViewportExtEx
GetTextExtentPoint32W
GetTextColor
GetStockObject
GetRgnBox
GetROP2
GetPixel
GetObjectW
GetMetaFileA
GetMapMode
GetHFONT
GetDeviceCaps
GetDIBColorTable
GetCurrentPositionEx
GetColorSpace
GetClipBox
GetBrushOrgEx
GetBkColor
GetBitmapBits
GdiQueryTable
GdiEntry10
GdiEndDocEMF
GdiDeleteLocalDC
GdiConvertPalette
FillRgn
ExtTextOutW
ExtSelectClipRgn
SetDIBColorTable
AbortDoc
EngStrokeAndFillPath
EngFindResource
EngDeletePath
EndPath
Ellipse
DeviceCapabilitiesExA
DeleteObject
DeleteDC
CreateSolidBrush
CreateScalableFontResourceA
CreateRectRgnIndirect
CreateRectRgn
CreatePen
CreatePatternBrush
CreateICW
CreateFontIndirectW
CreateEllipticRgn
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
Chord
BitBlt
BeginPath
AddFontResourceW
ExtFloodFill

comdlg32

GetFileTitleW

advapi32

SetKernelObjectSecurity
SetEntriesInAclW
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
MakeAbsoluteSD
LookupPrivilegeValueW
LookupAccountNameW
GetTokenInformation
GetKernelObjectSecurity
FreeSid
EqualSid
CreateProcessAsUserW
CheckTokenMembership
AllocateAndInitializeSid
AdjustTokenPrivileges
SetSecurityDescriptorDacl

shell32

ShellHookProc
ShellExecuteW
ShellAboutW
SHLoadNonloadedIconOverlayIdentifiers
SHGetIconOverlayIndexW
SHGetFolderPathW
SHGetFolderPathA
SHGetFileInfoW
SHGetFileInfo
SHEmptyRecycleBinW
SHCreateDirectoryExW
SHCreateDirectoryExA
SHAppBarMessage
ExtractAssociatedIconW
ExtractAssociatedIconA
DragQueryFileW
DragQueryFileA
DragFinish
CheckEscapesW

ole32

CoRegisterClassObject
CoRegisterMessageFilter
CoRevokeClassObject
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CreateILockBytesOnHGlobal
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
OleUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromGUID2
CoGetClassObject
CoFreeUnusedLibraries
CoDisconnectObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoGetObject

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
StrRChrIA
StrRStrIW
PathFindExtensionW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

56b471011e8bd66449360cbe0fe07d51

Code Sign

24:67:87:ab:9e:28:2e:bc:41:eb:61:35:44:b9:7f:99Certificate

Extended Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

d3:1c:53:35:3f:3e:47:71:76:62:ef:d9:d5:f4:fc:23:8f:50:cb:0a:33:93:71:5f:53:c0:8b:bf:7d:7e:2d:b7Signer

Signature Validations

Verification

11-12-2018 02:57 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 512B - Virtual size: 1000KB

24:67:87:ab:9e:28:2e:bc:41:eb:61:35:44:b9:7f:99
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

d3:1c:53:35:3f:3e:47:71:76:62:ef:d9:d5:f4:fc:23:8f:50:cb:0a:33:93:71:5f:53:c0:8b:bf:7d:7e:2d:b7
Signer

11-12-2018 02:57
Valid: false

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 512B - Virtual size: 1000KB