2ec74e80639227eee3ee926b0bc156cf285c0609052a60c50301574ee3fe8225

Sharing

Copy URL

Twitter E-mail

General

Target

2ec74e80639227eee3ee926b0bc156cf285c0609052a60c50301574ee3fe8225
Size

115KB
MD5

013bd50a384c4f4ac1315213c20181c8
SHA1

53103a296e4077525ad0ca69b8455fa29c72e833
SHA256

2ec74e80639227eee3ee926b0bc156cf285c0609052a60c50301574ee3fe8225
SHA512

553b173fa4a57b8694febdc939cbc5b503f4c32d85eafc86500597ad3bab2901c7c6dde38c701c44738bf8c2a6e37ac6b75d092347bbf0e0b9404c957409b14f
SSDEEP

1536:1yM09d7kr6wnlc08Tr6dzRFKzw9jUPxxXIh0FCVNG3Q/qIh0FCVNG3Q/+b:1yM09d4XRddY5xXzoG3QCzoG3QGb

Score

N/A

Malware Config

Signatures

Files

2ec74e80639227eee3ee926b0bc156cf285c0609052a60c50301574ee3fe8225
.dll windows x86

261233cf18e2ff5ae8ba656ef78f6ada

Code Sign

46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83
Certificate

Issuer

CN=222222222

Not Before

13/02/2012, 04:39

Not After

31/12/2039, 23:59

Subject

CN=222222222

Extended Key Usages

ExtKeyUsageCodeSigning

51:e1:95:e4:37:89:9f:c8:aa:4a:21:83:4d:a5:4d:a7:c1:7e:26:ca
Signer

Actual PE Digest

51:e1:95:e4:37:89:9f:c8:aa:4a:21:83:4d:a5:4d:a7:c1:7e:26:ca

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=222222222

15/09/2022, 14:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetSystemInfo
GetProcAddress
LoadLibraryA
GetWindowsDirectoryW

comdlg32

GetFileTitleW
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
ChooseColorA
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
PrintDlgA

oleaut32

BSTR_UserSize
BstrFromVector
CreateErrorInfo
CreateStdDispatch
CreateTypeLib2
DispCallFunc
DispInvoke
GetErrorInfo
LHashValOfNameSys
LHashValOfNameSysA
LPSAFEARRAY_Marshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LoadRegTypeLi
LoadTypeLi
OaBuildVersion
OleIconToCursor
OleLoadPicture
OleLoadPictureEx
OleLoadPictureFileEx
OleSavePictureFile
OleTranslateColor
RegisterActiveObject
RevokeActiveObject
SafeArrayAccessData
SafeArrayAllocDescriptorEx
SafeArrayCopy
SafeArrayCreateEx
SafeArrayDestroy
SafeArrayDestroyDescriptor
SafeArrayGetElement
SafeArrayGetIID
SafeArrayGetVartype
SafeArrayLock
SafeArrayPtrOfIndex
SafeArraySetIID
SafeArrayUnaccessData
SafeArrayUnlock
SysAllocString
SysAllocStringLen
UnRegisterTypeLi
VARIANT_UserSize
VarAbs
VarBoolFromCy
VarBoolFromDate
VarBoolFromDec
VarBoolFromR8
VarBoolFromStr
VarBstrFromCy
VarBstrFromR4
VarBstrFromR8
VarBstrFromUI2
VarBstrFromUI4
VarCat
VarCmp
VarCyFix
VarCyFromBool
VarCyFromDisp
VarCyFromI1
VarCyFromR8
VarCyRound
VarDateFromCy
VarDecAdd
VarDecCmpR8
VarDecFix
VarDecFromDate
VarDecFromI1
VarDecFromUI4
VarDecNeg
VarFormat
VarFormatDateTime
VarFormatNumber
VarI1FromBool
VarI1FromI2
VarI1FromI4
VarI1FromR4
VarI1FromUI2
VarI2FromBool
VarI2FromStr
VarI4FromBool
VarI4FromCy
VarI4FromDate
VarI4FromDisp
VarI4FromI1
VarI4FromUI1
VarImp
VarInt
VarPow
VarR4CmpR8
VarR4FromDate
VarR4FromDec
VarR4FromI1
VarR4FromR8
VarR4FromStr
VarR4FromUI1
VarR4FromUI2
VarR8FromI1
VarR8FromI2
VarR8FromStr
VarR8FromUI1
VarR8Pow
VarR8Round
VarUI1FromBool
VarUI1FromCy
VarUI1FromDec
VarUI1FromI1
VarUI1FromI4
VarUI1FromR4
VarUI1FromUI4
VarUI2FromCy
VarUI2FromDate
VarUI4FromI1
VarUI4FromUI1
VarUdateFromDate
VariantChangeTypeEx
VariantCopyInd
VectorFromBstr

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

261233cf18e2ff5ae8ba656ef78f6ada

Code Sign

46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83Certificate

Extended Key Usages

51:e1:95:e4:37:89:9f:c8:aa:4a:21:83:4d:a5:4d:a7:c1:7e:26:caSigner

Signature Validations

Verification

15/09/2022, 14:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

oleaut32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 516B

.text7 Size: 1024B - Virtual size: 1000B

.text5 Size: 20KB - Virtual size: 20KB

.text6 Size: 1KB - Virtual size: 1KB

.rsrc Size: 82KB - Virtual size: 81KB

.reloc Size: 2KB - Virtual size: 1KB

46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83
Certificate

51:e1:95:e4:37:89:9f:c8:aa:4a:21:83:4d:a5:4d:a7:c1:7e:26:ca
Signer

15/09/2022, 14:52
Valid: false

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 516B

.text7
Size: 1024B - Virtual size: 1000B

.text5
Size: 20KB - Virtual size: 20KB

.text6
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 82KB - Virtual size: 81KB

.reloc
Size: 2KB - Virtual size: 1KB