1dd0f9050162e0e1e950636012c91e95586dcb646984dd8622707b9146cd0b44

Sharing

Copy URL Twitter E-mail

General

Target

1dd0f9050162e0e1e950636012c91e95586dcb646984dd8622707b9146cd0b44
Size

37KB
MD5

c31756f8ada819899db79420cb66cee9
SHA1

0bdde75aa12ee99143435c7f472cb24b812af3c5
SHA256

1dd0f9050162e0e1e950636012c91e95586dcb646984dd8622707b9146cd0b44
SHA512

7ed58284d0c34c7bc2860e18be1d4858c9f4ace9a6baafaba80e9282cb7b204d6d1291d962508263dc5dbd6c11cbb82e488f88385f10c0323d551b4ca2d2de6e
SSDEEP

768:xh88aicG8GDzLMnY/qO5MQDLC3oKUEAdnWHJsNsGO:Ld1/LMnY/qCMcKAqt

Score

N/A

Malware Config

Signatures

Files

1dd0f9050162e0e1e950636012c91e95586dcb646984dd8622707b9146cd0b44
.dll windows x86

929ebce196ba54f4b5beea260eb08c24

Code Sign

40:63:aa:a3:eb:98:8e:6e:b2:9a:f7:9e:a0:c1:93:33
Certificate

Issuer

CN=erqwerqwert23623

Not Before

05/03/2012, 06:09

Not After

31/12/2039, 23:59

Subject

CN=erqwerqwert23623

Extended Key Usages

ExtKeyUsageCodeSigning

ac:ef:72:90:2a:d5:61:a6:58:c7:79:26:ec:66:15:6f:dd:d0:ff:b2
Signer

Actual PE Digest

ac:ef:72:90:2a:d5:61:a6:58:c7:79:26:ec:66:15:6f:dd:d0:ff:b2

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=erqwerqwert23623

15/09/2022, 14:53
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetCommState
lstrcpyA
lstrlenA
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
CreateFileA
VirtualAlloc

user32

AnyPopup
AppendMenuA
ArrangeIconicWindows
ChangeDisplaySettingsExA
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
CharUpperA
ChildWindowFromPointEx
ClipCursor
CreateDialogIndirectParamA
CreateMenu
CreatePopupMenu
DdeAddData
DdeConnectList
DdeGetData
DefMDIChildProcW
DefWindowProcA
DeregisterShellHookWindow
DialogBoxIndirectParamW
DlgDirSelectComboBoxExA
DragObject
DrawAnimatedRects
DrawCaption
DrawFrame
DrawMenuBar
DrawStateW
DrawTextA
DrawTextW
EnableMenuItem
EndMenu
EndPaint
EnumDisplaySettingsA
EnumDisplaySettingsW
EnumPropsExW
FlashWindowEx
FreeDDElParam
GetAncestor
GetClassLongW
GetClassNameW
GetClipboardSequenceNumber
GetClipboardViewer
GetDCEx
GetDlgItemInt
GetKeyNameTextW
GetKeyboardState
GetMenuItemInfoA
GetMenuStringA
GetScrollBarInfo
GetTitleBarInfo
GetWindowRect
GetWindowTextW
GetWindowWord
HiliteMenuItem
InSendMessage
InSendMessageEx
InsertMenuItemA
InvalidateRect
IsCharAlphaA
IsCharUpperA
IsClipboardFormatAvailable
LoadBitmapW
LoadMenuIndirectW
LockSetForegroundWindow
LookupIconIdFromDirectory
MessageBoxExW
MoveWindow
OemToCharBuffA
OpenIcon
PostQuitMessage
RealGetWindowClass
RegisterWindowMessageA
RemovePropW
ScrollDC
SendNotifyMessageW
SetCapture
SetClipboardData
SetCursorPos
SetDebugErrorLevel
SetDeskWallpaper
SetDlgItemInt
SetDlgItemTextA
SetDoubleClickTime
SetMenuInfo
SetProcessDefaultLayout
SetProcessWindowStation
SetPropA
SetShellWindow
SetUserObjectInformationA
SetWindowContextHelpId
SetWindowsHookExW
ShowOwnedPopups
SwapMouseButton
ToUnicodeEx
UnregisterDeviceNotification

ole32

CLSIDFromProgIDEx
CoAddRefServerProcess
CoBuildVersion
CoDeactivateObject
CoDisableCallCancellation
CoEnableCallCancellation
CoFileTimeNow
CoFreeAllLibraries
CoFreeUnusedLibraries
CoGetClassObject
CoGetInstanceFromIStorage
CoGetInterfaceAndReleaseStream
CoGetStdMarshalEx
CoGetTreatAsClass
CoInitializeEx
CoInitializeSecurity
CoMarshalHresult
CoQueryAuthenticationServices
CoQueryReleaseObject
CoReactivateObject
CoRegisterClassObject
CoRegisterPSClsid
CoRegisterSurrogateEx
CoResumeClassObjects
CoRevokeClassObject
CoRevokeMallocSpy
CoSetCancelObject
CoSetProxyBlanket
CoTaskMemFree
CreateBindCtx
CreateDataAdviseHolder
CreateFileMoniker
CreateGenericComposite
CreateItemMoniker
DcomChannelSetHResult
DllDebugObjectRPCHook
DllGetClassObjectWOW
GetHGlobalFromStream
HBRUSH_UserFree
HDC_UserMarshal
HENHMETAFILE_UserFree
HGLOBAL_UserUnmarshal
HICON_UserMarshal
HMETAFILEPICT_UserFree
HMETAFILEPICT_UserMarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HWND_UserSize
IsAccelerator
MkParseDisplayName
MonikerRelativePathTo
OleConvertOLESTREAMToIStorageEx
OleCreateFromFile
OleCreateLink
OleCreateLinkFromDataEx
OleCreateLinkToFileEx
OleCreateMenuDescriptor
OleCreateStaticFromData
OleGetClipboard
OleIsRunning
OleLockRunning
OleNoteObjectVisible
OleRegEnumVerbs
OleRegGetUserType
OleSave
OleSetContainedObject
OleSetMenuDescriptor
PropVariantCopy
ReadClassStm
ReadOleStg
SNB_UserMarshal
STGMEDIUM_UserMarshal
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgIsStorageFile
StgOpenPropStg
StringFromGUID2
StringFromIID
UtConvertDvtd32toDvtd16
UtGetDvtd16Info
UtGetDvtd32Info
WriteStringStream

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

929ebce196ba54f4b5beea260eb08c24

Code Sign

40:63:aa:a3:eb:98:8e:6e:b2:9a:f7:9e:a0:c1:93:33Certificate

Extended Key Usages

ac:ef:72:90:2a:d5:61:a6:58:c7:79:26:ec:66:15:6f:dd:d0:ff:b2Signer

Signature Validations

Verification

15/09/2022, 14:53 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 980B

.text Size: 20KB - Virtual size: 20KB

.text2 Size: 1024B - Virtual size: 800B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

40:63:aa:a3:eb:98:8e:6e:b2:9a:f7:9e:a0:c1:93:33
Certificate

ac:ef:72:90:2a:d5:61:a6:58:c7:79:26:ec:66:15:6f:dd:d0:ff:b2
Signer

15/09/2022, 14:53
Valid: false

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 980B

.text
Size: 20KB - Virtual size: 20KB

.text2
Size: 1024B - Virtual size: 800B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB