48d92824814f196a25535e437220d2d07399b1cacbcc05f1b5cb5726a713f095

Sharing

Copy URL Twitter E-mail

General

Target

48d92824814f196a25535e437220d2d07399b1cacbcc05f1b5cb5726a713f095
Size

213KB
MD5

af284b96eef153db797885b2b322aa6b
SHA1

d8d39017d920104fc009040b2995218efe0bd762
SHA256

48d92824814f196a25535e437220d2d07399b1cacbcc05f1b5cb5726a713f095
SHA512

6595067a816ce05464a548a433db6ec49f5f67b0d72299ce23279a693fe102129b6b22a545b19f5296d4b0daa9b564ea495ab501ffe40322dd6af2b1e83ab6a1
SSDEEP

3072:UsJztPmNhnIiaDCjqW9DKZr9+VwYddG+czMoKvAd:BxmL1aDMqQDK6Ce84o

Score

N/A

Malware Config

Signatures

Files

48d92824814f196a25535e437220d2d07399b1cacbcc05f1b5cb5726a713f095
.dll windows x86

5566fb1f6405a2b6cf03eae8e827918e

Code Sign

16:e7:96:54:95:8d:a5:8c:47:4f:8e:bf:74:88:e4:ad
Certificate

Issuer

CN=eltFCYuxXkdvVBAFYUQMiUAvcPupqZ PoxIcDUpqqv KWVbal hxwVBHhftuZAiZw iGaPtfxBjfxKSZdlCKzWrhJCGwfKYtXwgOVRxIeNXjSOAmMCOEyTvGJncjJLIbWmLjzLKGDkGQREXjibzxFj

Not Before

27/06/2012, 08:37

Not After

31/12/2039, 23:59

Subject

CN=eltFCYuxXkdvVBAFYUQMiUAvcPupqZ PoxIcDUpqqv KWVbal hxwVBHhftuZAiZw iGaPtfxBjfxKSZdlCKzWrhJCGwfKYtXwgOVRxIeNXjSOAmMCOEyTvGJncjJLIbWmLjzLKGDkGQREXjibzxFj

Extended Key Usages

ExtKeyUsageCodeSigning

c3:d3:4a:cc:cc:3a:b9:59:52:8c:ff:9e:0c:f7:d4:71:cc:90:ff:94
Signer

Actual PE Digest

c3:d3:4a:cc:cc:3a:b9:59:52:8c:ff:9e:0c:f7:d4:71:cc:90:ff:94

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=eltFCYuxXkdvVBAFYUQMiUAvcPupqZ PoxIcDUpqqv KWVbal hxwVBHhftuZAiZw iGaPtfxBjfxKSZdlCKzWrhJCGwfKYtXwgOVRxIeNXjSOAmMCOEyTvGJncjJLIbWmLjzLKGDkGQREXjibzxFj

15/09/2022, 14:53
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
lstrcatW
VirtualAllocEx
GetWindowsDirectoryW

user32

BeginPaint
UpdateWindow
ScrollWindow
SetScrollPos
SetScrollRange
ReleaseDC
GetDC
AppendMenuA
CallMsgFilterW
CascadeWindows
ChangeDisplaySettingsW
CharToOemA
CheckMenuItem
CloseDesktop
CopyAcceleratorTableA
CopyRect
CreateIconFromResourceEx
CreateMDIWindowA
DdeClientTransaction
DdeCreateStringHandleW
DdeFreeStringHandle
DdePostAdvise
DdeSetQualityOfService
DeregisterShellHookWindow
DrawStateW
EndDialog
EndMenu
EnumChildWindows
GetAltTabInfo
GetClassLongW
GetClipboardOwner
GetComboBoxInfo
GetInputState
EndPaint
GetMessageA
GetScrollPos
GetScrollRange
GetSubMenu
GetUpdateRect
GetWindowRgn
GetWindowThreadProcessId
IMPQueryIMEA
InSendMessageEx
InsertMenuItemA
IsCharUpperW
IsDialogMessageA
LoadKeyboardLayoutW
LockWorkStation
MoveWindow
OemToCharBuffW
RegisterClassExA
RegisterDeviceNotificationW
RemoveMenu
ScrollDC
SendDlgItemMessageA
SendMessageW
SendNotifyMessageW
SetDlgItemTextW
SetWindowWord
SystemParametersInfoW
TabbedTextOutA
TileWindows
ToAscii
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
VkKeyScanA
VkKeyScanExA
WaitForInputIdle
WindowFromDC
PostQuitMessage
DefWindowProcA
LoadIconA
CreateWindowExA
GetKeyboardLayout

gdi32

TextOutA
GetTextMetricsA

advapi32

RegOpenKeyExA

Sections

.text
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5566fb1f6405a2b6cf03eae8e827918e

Code Sign

16:e7:96:54:95:8d:a5:8c:47:4f:8e:bf:74:88:e4:adCertificate

Extended Key Usages

c3:d3:4a:cc:cc:3a:b9:59:52:8c:ff:9e:0c:f7:d4:71:cc:90:ff:94Signer

Signature Validations

Verification

15/09/2022, 14:53 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 203KB - Virtual size: 202KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

16:e7:96:54:95:8d:a5:8c:47:4f:8e:bf:74:88:e4:ad
Certificate

c3:d3:4a:cc:cc:3a:b9:59:52:8c:ff:9e:0c:f7:d4:71:cc:90:ff:94
Signer

15/09/2022, 14:53
Valid: false

.text
Size: 203KB - Virtual size: 202KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB