9d4e57dd99db146e38c407ac8042a374aa4bc77286da76d75e7e10b9c27bc151

Sharing

Copy URL

Twitter E-mail

General

Target

9d4e57dd99db146e38c407ac8042a374aa4bc77286da76d75e7e10b9c27bc151
Size

119KB
MD5

ec21e736f76ab2263be860cf704447b5
SHA1

fe8a3189b6cbd099c7fb087161daa12c0d31e9f3
SHA256

9d4e57dd99db146e38c407ac8042a374aa4bc77286da76d75e7e10b9c27bc151
SHA512

47a1509d3d3b99a998ed99dbd7c7158e5f6cfb9e622fcf96236d95aac1d53e4a0d9451f058a7bc79638c10ddd3342625e12712f09ee4dc8519f7bbfc7f88ec07
SSDEEP

1536:flq5+sRBczNkAvJt6K/Dg4qll4QZHxPqNQwL52Pm5qin5fY3a4+GRGXeU:dMY76K/DulS29Q2Pmj5fSSeU

Score

N/A

Malware Config

Signatures

Files

9d4e57dd99db146e38c407ac8042a374aa4bc77286da76d75e7e10b9c27bc151
.exe windows x86

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

04:b4:64:7f:58:6c:a9:50:b2:7d:28:e6:d5:01:dc:6e
Certificate

Issuer

CN=SyvZ

Not Before

24/05/2012, 05:06

Not After

31/12/2039, 23:59

Subject

CN=SyvZ

Extended Key Usages

ExtKeyUsageCodeSigning

77:a8:79:ee:ef:cf:e2:5c:61:c3:c6:53:f8:e0:e5:49:aa:8b:68:71
Signer

Actual PE Digest

77:a8:79:ee:ef:cf:e2:5c:61:c3:c6:53:f8:e0:e5:49:aa:8b:68:71

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SyvZ

15/09/2022, 14:53
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
CloseHandle
VirtualAllocEx
WriteFile
GetModuleHandleW
GetProcAddress

advapi32

RegCloseKey

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

641f55d89cd96b75c8269e4a5e7be8ae

Code Sign

04:b4:64:7f:58:6c:a9:50:b2:7d:28:e6:d5:01:dc:6eCertificate

Extended Key Usages

77:a8:79:ee:ef:cf:e2:5c:61:c3:c6:53:f8:e0:e5:49:aa:8b:68:71Signer

Signature Validations

Verification

15/09/2022, 14:53 Valid: false

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 97KB - Virtual size: 97KB

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 176B

04:b4:64:7f:58:6c:a9:50:b2:7d:28:e6:d5:01:dc:6e
Certificate

77:a8:79:ee:ef:cf:e2:5c:61:c3:c6:53:f8:e0:e5:49:aa:8b:68:71
Signer

15/09/2022, 14:53
Valid: false

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 97KB - Virtual size: 97KB

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 176B