286496455b6b4db6133120bf7b15b80e8f1ae2478937b2973fd9fd8e3f69c4f5

Sharing

Copy URL Twitter E-mail

General

Target

286496455b6b4db6133120bf7b15b80e8f1ae2478937b2973fd9fd8e3f69c4f5
Size

70KB
MD5

6a496572027966844399aef6c4f2cf16
SHA1

9579dd09962e54ebac88c24c09fe069714c7f67a
SHA256

286496455b6b4db6133120bf7b15b80e8f1ae2478937b2973fd9fd8e3f69c4f5
SHA512

c300f403cd6a02d3a54b53d23d9bd4fb01fe66e0a08ba54e2c1ef02c3c700a0988001e922391defdadc8ffb94733d09ecf00296a9ada5d8f550ab6dff0f3141c
SSDEEP

1536:2M+V99nX2hbyMoc6QuD683btv7ZdASiXHRzpUxZzFPHO/hhdeIS2:x+v9Gh+MoUu20btTbiXRzS1FPH+er

Score

N/A

Malware Config

Signatures

Files

286496455b6b4db6133120bf7b15b80e8f1ae2478937b2973fd9fd8e3f69c4f5
.exe windows x86

f0592dcc43ba022ee12afd81d9ce1382

Code Sign

1b:5d:65:19:a1:99:87:a7:49:c4:c9:0a:ec:f1:a3:3b
Certificate

Issuer

CN=NCrG992VieeQ

Not Before

14/03/2012, 06:19

Not After

31/12/2039, 23:59

Subject

CN=NCrG992VieeQ

Extended Key Usages

ExtKeyUsageCodeSigning

53:bd:c3:ae:0e:73:60:c7:27:b6:ce:18:89:c5:ba:fd:89:d2:b2:5a
Signer

Actual PE Digest

53:bd:c3:ae:0e:73:60:c7:27:b6:ce:18:89:c5:ba:fd:89:d2:b2:5a

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=NCrG992VieeQ

15/09/2022, 14:53
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
LoadLibraryA
CreateFileA
lstrlenA
GetWindowsDirectoryA
lstrcpyA
GetProcAddress

user32

SetTimer
SetWindowPos
SetWindowsHookExW
ShowWindowAsync
SystemParametersInfoA
VkKeyScanW
WaitForInputIdle
SetScrollPos
SetMenuDefaultItem
SetMenu
SetLayeredWindowAttributes
SetForegroundWindow
SetCaretBlinkTime
SendNotifyMessageW
SendNotifyMessageA
SendMessageTimeoutA
SendInput
SendIMEMessageExW
SendDlgItemMessageA
ScrollWindowEx
ScreenToClient
ReuseDDElParam
RegisterDeviceNotificationA
RegisterClassW
PostQuitMessage
PostMessageA
OemToCharA
MonitorFromRect
LookupIconIdFromDirectoryEx
LoadKeyboardLayoutW
IsDialogMessageA
CallWindowProcA
ChangeDisplaySettingsW
ChangeMenuA
CharLowerW
CharPrevA
CharToOemBuffA
CharToOemBuffW
CharUpperW
ChildWindowFromPointEx
CreateDesktopW
CreateDialogIndirectParamA
IsClipboardFormatAvailable
CreateDialogParamA
CreateIcon
CreateMDIWindowA
CreateMDIWindowW
CreateWindowExA
DdeDisconnectList
DdeGetData
DdeInitializeW
DdeQueryConvInfo
DdeQueryNextServer
DdeReconnect
DeleteMenu
DispatchMessageW
DlgDirListA
DlgDirListW
DlgDirSelectExW
DrawAnimatedRects
DrawMenuBar
DrawTextA
DrawTextW
EnumDisplaySettingsExA
EnumDisplaySettingsW
EnumThreadWindows
EnumWindowStationsA
GetCaretBlinkTime
GetClassNameW
GetClipboardFormatNameA
GetCursor
GetFocus
GetIconInfo
GetKeyboardType
GetMenuDefaultItem
GetMenuItemRect
GetNextDlgGroupItem
GetPriorityClipboardFormat
GetProcessDefaultLayout
GetPropA
GetPropW
GetShellWindow
GetTitleBarInfo
GetWindowLongA
GetWindowModuleFileName
GetWindowPlacement
GrayStringA
BeginDeferWindowPos
IMPQueryIMEW
InvalidateRgn
IsChild

comdlg32

PageSetupDlgW
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
ChooseColorA
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW

advapi32

RegOpenKeyW

ole32

OleDraw
OleDuplicateData
OleGetAutoConvert
OleGetIconOfClass
OleNoteObjectVisible
OleRegEnumFormatEtc
OleRegGetUserType
ProgIDFromCLSID
STGMEDIUM_UserSize
STGMEDIUM_UserUnmarshal
SetDocumentBitStg
StgConvertPropertyToVariant
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgGetIFillLockBytesOnFile
StgOpenStorageEx
StgOpenStorageOnILockBytes
StringFromGUID2
StringFromIID
UpdateDCOMSettings
UtConvertDvtd16toDvtd32
UtGetDvtd16Info
UtGetDvtd32Info
WdtpInterfacePointer_UserSize
WriteClassStg
OleCreateLinkToFileEx
OleCreateLinkFromDataEx
OleCreateFromFileEx
OleBuildVersion
MkParseDisplayName
HkOleRegisterObject
HPALETTE_UserUnmarshal
HPALETTE_UserMarshal
HMETAFILE_UserUnmarshal
HMETAFILE_UserFree
HMENU_UserUnmarshal
HMENU_UserMarshal
HMENU_UserFree
HICON_UserUnmarshal
HICON_UserSize
HGLOBAL_UserMarshal
HGLOBAL_UserFree
HDC_UserSize
HDC_UserFree
HBRUSH_UserUnmarshal
HBRUSH_UserSize
HBITMAP_UserUnmarshal
HACCEL_UserFree
GetDocumentBitStg
EnableHookObject
CreatePointerMoniker
CreateOleAdviseHolder
CreateItemMoniker
CreateILockBytesOnHGlobal
CreateFileMoniker
CreateDataAdviseHolder
CreateClassMoniker
CoWaitForMultipleHandles
CoUnmarshalInterface
CoUnmarshalHresult
CoUninitialize
CoResumeClassObjects
CoReleaseServerProcess
CoRegisterMallocSpy
CoReactivateObject
CoLockObjectExternal
CoLoadLibrary
CoIsOle1Class
CoIsHandlerConnected
CoInstall
CoImpersonateClient
CoGetStdMarshalEx
CoGetInterfaceAndReleaseStream
CoGetInstanceFromIStorage
CoGetClassObject
CoGetCallContext
CoFreeUnusedLibraries
CoFileTimeToDosDateTime
CoDisableCallCancellation
CoCreateInstance
CoAllowSetForegroundWindow
CLIPFORMAT_UserUnmarshal
CLIPFORMAT_UserFree
OleConvertIStorageToOLESTREAMEx
CoGetMalloc

comctl32

ord8
CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindow
ord7
_TrackMouseEvent
ord3
PropertySheetW
PropertySheetA
PropertySheet
ord13
ord14
InitializeFlatSB
InitMUILanguage
InitCommonControlsEx
ord17
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_SetIconSize
ImageList_SetFilter
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_Replace
ImageList_Remove
ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ImageList_LoadImage
ImageList_GetImageCount
ImageList_GetIcon
ImageList_GetDragImage
ImageList_EndDrag
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_Draw
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Add
GetMUILanguage
ord4
FlatSB_ShowScrollBar
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollRange
FlatSB_GetScrollProp
FlatSB_GetScrollPos
FlatSB_EnableScrollBar
DrawStatusTextW
ord5
DrawStatusText
ord15
CreateToolbarEx

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0592dcc43ba022ee12afd81d9ce1382

Code Sign

1b:5d:65:19:a1:99:87:a7:49:c4:c9:0a:ec:f1:a3:3bCertificate

Extended Key Usages

53:bd:c3:ae:0e:73:60:c7:27:b6:ce:18:89:c5:ba:fd:89:d2:b2:5aSigner

Signature Validations

Verification

15/09/2022, 14:53 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

comctl32

Sections

.text Size: 12KB - Virtual size: 12KB

.text1 Size: 50KB - Virtual size: 49KB

.data Size: 1024B - Virtual size: 644B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

1b:5d:65:19:a1:99:87:a7:49:c4:c9:0a:ec:f1:a3:3b
Certificate

53:bd:c3:ae:0e:73:60:c7:27:b6:ce:18:89:c5:ba:fd:89:d2:b2:5a
Signer

15/09/2022, 14:53
Valid: false

.text
Size: 12KB - Virtual size: 12KB

.text1
Size: 50KB - Virtual size: 49KB

.data
Size: 1024B - Virtual size: 644B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB