8c32df7d6bcaddcfd9533d64da3773852085910e2959cd23d12e23a309b4012f

Sharing

Copy URL

Twitter E-mail

General

Target

8c32df7d6bcaddcfd9533d64da3773852085910e2959cd23d12e23a309b4012f
Size

267KB
MD5

0612af005c742667f9928ca35f151da6
SHA1

30a96d3786bacea6c11edfda7ca29c8bd51f4277
SHA256

8c32df7d6bcaddcfd9533d64da3773852085910e2959cd23d12e23a309b4012f
SHA512

fd0da256f3404d46549a56f2407fadad15f01f3782aa2e32b525b586fcb6509c7d68bca6599b846f7af55f8ea31b5fa85e8f7724f769b6e515d118bfe7ba6b90
SSDEEP

3072:XLuJZ4AV1OgNTYtJ3ExxDZ3mH/5HjjV/YVO/vbX3mLkvEDnqKyMUtBlMRXpa:KZjNoJ3E7kBHjxY8/jmYv43yMURMXs

Score

N/A

Malware Config

Signatures

Files

8c32df7d6bcaddcfd9533d64da3773852085910e2959cd23d12e23a309b4012f
.dll windows x86

9bf8d187981c9aae532665113e749ffd

Code Sign

39:e2:8b:b2:3f:2b:dc:bc:43:3d:21:f3:e7:30:3e:39
Certificate

Issuer

CN=rWQ

Not Before

08/05/2012, 11:55

Not After

31/12/2039, 23:59

Subject

CN=rWQ

Extended Key Usages

ExtKeyUsageCodeSigning

ed:5e:85:9d:08:88:ff:ca:ce:d7:46:86:50:f3:93:d7:8f:ca:bb:ed
Signer

Actual PE Digest

ed:5e:85:9d:08:88:ff:ca:ce:d7:46:86:50:f3:93:d7:8f:ca:bb:ed

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=rWQ

15/09/2022, 14:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
VirtualAlloc
lstrcatA
FileTimeToDosDateTime
GetWindowsDirectoryA

user32

LoadIconA
LoadCursorA

gdi32

GetStockObject

advapi32

RegOpenKeyExA

Sections

.2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.3
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bf8d187981c9aae532665113e749ffd

Code Sign

39:e2:8b:b2:3f:2b:dc:bc:43:3d:21:f3:e7:30:3e:39Certificate

Extended Key Usages

ed:5e:85:9d:08:88:ff:ca:ce:d7:46:86:50:f3:93:d7:8f:ca:bb:edSigner

Signature Validations

Verification

15/09/2022, 14:52 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.2 Size: 1024B - Virtual size: 1000B

.3 Size: 250KB - Virtual size: 250KB

.text Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 96B

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 552B

39:e2:8b:b2:3f:2b:dc:bc:43:3d:21:f3:e7:30:3e:39
Certificate

ed:5e:85:9d:08:88:ff:ca:ce:d7:46:86:50:f3:93:d7:8f:ca:bb:ed
Signer

15/09/2022, 14:52
Valid: false

.2
Size: 1024B - Virtual size: 1000B

.3
Size: 250KB - Virtual size: 250KB

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 96B

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 552B