2a48c7732f552c2695e19f9fd21389345dd3b2461c30ea7e4c3babd8e489486d

Sharing

Copy URL Twitter E-mail

General

Target

2a48c7732f552c2695e19f9fd21389345dd3b2461c30ea7e4c3babd8e489486d
Size

75KB
MD5

185b651a67ee64ed5e18f4fa263e1a66
SHA1

a1529a3080d0ef8b7e91a11c1eee3a7777e9e4ef
SHA256

2a48c7732f552c2695e19f9fd21389345dd3b2461c30ea7e4c3babd8e489486d
SHA512

829c7e150059dbf25acc20f14d9cc96bb32553f6ee271fba33214f5a56c2c0db9d4e5acded1e52d3902a6b936fd9cebf37b670a8f2400131d4a3a2e9b38442b6
SSDEEP

384:EWWygTZiECfUfj8JuBTwGgQDqeng0XlQs/7wjOb041r:EWW7mqj8uTwvQDqeng0XrMg

Score

N/A

Malware Config

Signatures

Files

2a48c7732f552c2695e19f9fd21389345dd3b2461c30ea7e4c3babd8e489486d
.exe windows x86

5299bc6a3f9daacfe8b88fdbd5fe8ca2

Code Sign

3d:96:5e:d8:86:f8:92:59:b2:b8:11:8e:74:a5:f3:50
Certificate

Issuer

CN=fH2o

Not Before

07/06/2012, 07:53

Not After

31/12/2039, 23:59

Subject

CN=fH2o

Extended Key Usages

ExtKeyUsageCodeSigning

df:f4:83:9a:f7:bf:43:a4:f7:d0:3d:41:27:8f:0a:9a:38:31:70:ad
Signer

Actual PE Digest

df:f4:83:9a:f7:bf:43:a4:f7:d0:3d:41:27:8f:0a:9a:38:31:70:ad

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=fH2o

15/09/2022, 14:53
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
CreateFileA
GetWindowsDirectoryW
FileTimeToDosDateTime
GetCommandLineW
GetProcAddress
LoadLibraryW
GetCommandLineA
VirtualAlloc

gdi32

GetStockObject

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5299bc6a3f9daacfe8b88fdbd5fe8ca2

Code Sign

3d:96:5e:d8:86:f8:92:59:b2:b8:11:8e:74:a5:f3:50Certificate

Extended Key Usages

df:f4:83:9a:f7:bf:43:a4:f7:d0:3d:41:27:8f:0a:9a:38:31:70:adSigner

Signature Validations

Verification

15/09/2022, 14:53 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 42KB - Virtual size: 41KB

.rdata Size: 512B - Virtual size: 358B

.data Size: 512B - Virtual size: 240B

.data4 Size: 10KB - Virtual size: 9KB

.data3 Size: 10KB - Virtual size: 9KB

.data2 Size: 10KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 352B

3d:96:5e:d8:86:f8:92:59:b2:b8:11:8e:74:a5:f3:50
Certificate

df:f4:83:9a:f7:bf:43:a4:f7:d0:3d:41:27:8f:0a:9a:38:31:70:ad
Signer

15/09/2022, 14:53
Valid: false

.text
Size: 42KB - Virtual size: 41KB

.rdata
Size: 512B - Virtual size: 358B

.data
Size: 512B - Virtual size: 240B

.data4
Size: 10KB - Virtual size: 9KB

.data3
Size: 10KB - Virtual size: 9KB

.data2
Size: 10KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 352B