1708e55caf098e5d6d382dd4b62e0a945e604835d30a9b0db998129ae3c57f12

Sharing

Copy URL Twitter E-mail

General

Target

1708e55caf098e5d6d382dd4b62e0a945e604835d30a9b0db998129ae3c57f12
Size

75KB
MD5

cc4a0976d47df2f96eb0ca3fb948cbea
SHA1

51ff0b20a29ff8199ec47933c12332ccda8155a0
SHA256

1708e55caf098e5d6d382dd4b62e0a945e604835d30a9b0db998129ae3c57f12
SHA512

33f657944d3c18d49f2082a0a2472f8ec300b8fcc040017b900c4f665a7ae34f78f402c8a367ec7481fe244a41deb8e8357e97be9ff5bc0022d178a2f2bfd479
SSDEEP

1536:b9FOcRzxtz2SUMgiHOLkYfeOfTdWt6PUI1AeQZWW:b98cRS1iuHdM6PU/3

Score

N/A

Malware Config

Signatures

Files

1708e55caf098e5d6d382dd4b62e0a945e604835d30a9b0db998129ae3c57f12
.exe windows x86

38048b0cb9be073b4a03e8f744642a97

Code Sign

73:c2:e8:4a:e6:53:2c:94:4e:85:92:3a:67:87:27:6a
Certificate

Issuer

CN=evtwetvbqwe45vb2

Not Before

01/03/2012, 08:06

Not After

31/12/2039, 23:59

Subject

CN=evtwetvbqwe45vb2

Extended Key Usages

ExtKeyUsageCodeSigning

6d:ab:a1:eb:15:34:3e:df:e5:d0:7d:c3:30:f7:fd:b4:4f:92:29:4e
Signer

Actual PE Digest

6d:ab:a1:eb:15:34:3e:df:e5:d0:7d:c3:30:f7:fd:b4:4f:92:29:4e

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=evtwetvbqwe45vb2

15/09/2022, 14:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetProcAddress
LoadLibraryA
InterlockedCompareExchange

user32

DdeEnableCallback
DdeInitializeA
DefWindowProcA
DeleteMenu
DestroyMenu
DialogBoxIndirectParamA
DlgDirListW
DrawTextExA
EndDeferWindowPos
EnumDesktopsA
EnumDisplaySettingsW
EnumPropsExA
EnumPropsExW
EnumWindowStationsA
FreeDDElParam
GetAltTabInfo
GetClassInfoExA
GetClassInfoExW
GetClassWord
GetDCEx
GetDesktopWindow
GetDlgItemInt
GetIconInfo
GetMenuStringA
GetMessageExtraInfo
GetScrollInfo
GetTabbedTextExtentA
GetUserObjectInformationA
GetWindow
InSendMessageEx
InternalGetWindowText
InvalidateRect
InvertRect
IsCharAlphaNumericA
IsDialogMessage
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadImageW
LoadMenuIndirectW
MenuItemFromPoint
MessageBoxIndirectA
MsgWaitForMultipleObjectsEx
OpenWindowStationW
PostQuitMessage
PtInRect
RegisterDeviceNotificationA
RemovePropA
RemovePropW
SendInput
SendNotifyMessageA
SetCapture
SetClipboardViewer
SetLastErrorEx
SetMessageExtraInfo
SetWindowContextHelpId
SetWindowLongA
SetWindowWord
SetWindowsHookExW
SubtractRect
ToAscii
TranslateMDISysAccel
UnhookWindowsHook
UnionRect
UnregisterClassW
VkKeyScanA
WinHelpA
WindowFromPoint
wvsprintfA
DdeCmpStringHandles
CreateIconIndirect
CreateIcon
CreateDialogParamW
CreateDialogIndirectParamW
CreateAcceleratorTableW
CopyAcceleratorTableW
CloseWindowStation
CheckRadioButton
CheckMenuItem
CharUpperBuffW
CharLowerBuffW
CharLowerBuffA
CharLowerA
ChangeMenuW
ChangeDisplaySettingsA
CallMsgFilterA
BlockInput
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
ChooseColorA

ole32

CLIPFORMAT_UserSize
CLSIDFromString
CoAddRefServerProcess
CoCancelCall
CoCreateGuid
CoDeactivateObject
CoFileTimeToDosDateTime
CoFreeLibrary
CoFreeUnusedLibraries
CoGetClassObject
CoGetStdMarshalEx
CoInitializeSecurity
CoMarshalInterThreadInterfaceInStream
CoQueryAuthenticationServices
CoQueryClientBlanket
CoReactivateObject
CoRegisterPSClsid
CoRegisterSurrogate
CoRegisterSurrogateEx
CoReleaseMarshalData
CoRevertToSelf
CoRevokeClassObject
CoSetProxyBlanket
CoSuspendClassObjects
CoTaskMemAlloc
CoTaskMemRealloc
CoTreatAsClass
CreateBindCtx
CreateOleAdviseHolder
DllGetClassObjectWOW
DoDragDrop
FreePropVariantArray
GetClassFile
GetConvertStg
GetHookInterface
HACCEL_UserMarshal
HACCEL_UserUnmarshal
HBITMAP_UserMarshal
HBITMAP_UserUnmarshal
HBRUSH_UserFree
HBRUSH_UserMarshal
HBRUSH_UserSize
HDC_UserSize
HENHMETAFILE_UserFree
HENHMETAFILE_UserMarshal
HGLOBAL_UserMarshal
HMENU_UserUnmarshal
HMETAFILEPICT_UserMarshal
HMETAFILE_UserFree
HPALETTE_UserMarshal
HWND_UserSize
IsAccelerator
OleConvertIStorageToOLESTREAMEx
OleCreateDefaultHandler
OleCreateFromFileEx
OleCreateLinkEx
OleCreateLinkFromDataEx
OleGetAutoConvert
OleGetIconOfFile
OleQueryCreateFromData
OleRun
OleSetClipboard
OleUninitialize
ProgIDFromCLSID
PropStgNameToFmtId
ReadStringStream
SNB_UserSize
STGMEDIUM_UserFree
SetDocumentBitStg
StgCreatePropStg
StgCreateStorageEx
StgOpenAsyncDocfileOnIFillLockBytes
StgOpenStorageEx
StgSetTimes
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserSize
WdtpInterfacePointer_UserUnmarshal
WriteClassStm
WriteOleStg
WriteStringStream

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38048b0cb9be073b4a03e8f744642a97

Code Sign

73:c2:e8:4a:e6:53:2c:94:4e:85:92:3a:67:87:27:6aCertificate

Extended Key Usages

6d:ab:a1:eb:15:34:3e:df:e5:d0:7d:c3:30:f7:fd:b4:4f:92:29:4eSigner

Signature Validations

Verification

15/09/2022, 14:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 616B

.text Size: 61KB - Virtual size: 61KB

.reloc Size: 2KB - Virtual size: 1KB

73:c2:e8:4a:e6:53:2c:94:4e:85:92:3a:67:87:27:6a
Certificate

6d:ab:a1:eb:15:34:3e:df:e5:d0:7d:c3:30:f7:fd:b4:4f:92:29:4e
Signer

15/09/2022, 14:52
Valid: false

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 616B

.text
Size: 61KB - Virtual size: 61KB

.reloc
Size: 2KB - Virtual size: 1KB