48b3c2bcafa3ee0b1789c9b94a023deaa0dc70d1b6f5942d1f15fc6299447ba4

Sharing

Copy URL Twitter E-mail

General

Target

48b3c2bcafa3ee0b1789c9b94a023deaa0dc70d1b6f5942d1f15fc6299447ba4
Size

69KB
MD5

9a4940f6a0e815140770c7b366e714bc
SHA1

18adb236f80b06ea6aebdb155e86ee1903aec0a5
SHA256

48b3c2bcafa3ee0b1789c9b94a023deaa0dc70d1b6f5942d1f15fc6299447ba4
SHA512

62e8dbc36803bf13da1be2ead3359187d18f89330f3f1ddf380cb76f08973e7b723bb9d87ef6de32095a8b9e06581ec4bd36a82b61f52b3c4b6128ac462e43b5
SSDEEP

768:g0qqh0RgYAgVYsH1nx9p+EtBRE4tq5DrM2EbR6Thkw5AXD/QvhJyIQk1Y0D:hMRgYDCKFXPtq5DYvb64IZJyIQKhD

Score

N/A

Malware Config

Signatures

Files

48b3c2bcafa3ee0b1789c9b94a023deaa0dc70d1b6f5942d1f15fc6299447ba4
.exe windows x86

c1807b153e6a78fee2af07f50e1465ec

Code Sign

29:91:e1:1b:94:9b:d7:9b:48:8d:41:3e:68:60:cd:19
Certificate

Issuer

CN=123ttt

Not Before

08/03/2012, 07:59

Not After

31/12/2039, 23:59

Subject

CN=123ttt

Extended Key Usages

ExtKeyUsageCodeSigning

b6:d0:e2:a3:62:a7:59:bc:01:e1:f9:c1:df:3e:5e:07:ce:3f:f0:c8
Signer

Actual PE Digest

b6:d0:e2:a3:62:a7:59:bc:01:e1:f9:c1:df:3e:5e:07:ce:3f:f0:c8

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=123ttt

15/09/2022, 14:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetCommState
lstrcpyA
lstrlenA
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
CreateFileA
VirtualAlloc

user32

AllowSetForegroundWindow
CallWindowProcW
ChangeDisplaySettingsExA
CharNextExA
CharPrevW
CharUpperA
CharUpperW
ChildWindowFromPoint
CreateDesktopW
DdeAddData
DdeConnectList
DdeFreeStringHandle
DdeGetLastError
DdeInitializeW
DdeQueryConvInfo
DdeQueryNextServer
DdeQueryStringW
DdeReconnect
DefWindowProcW
DestroyIcon
DestroyMenu
DispatchMessageW
DlgDirSelectComboBoxExW
DragDetect
DrawTextExA
EndPaint
EndTask
EnumDesktopsA
EnumDisplayDevicesW
EnumDisplayMonitors
EnumPropsA
GetClassInfoExA
GetClipboardFormatNameA
GetClipboardFormatNameW
GetDCEx
GetDoubleClickTime
GetKBCodePage
GetKeyboardState
GetLastActivePopup
GetMenuBarInfo
GetMenuCheckMarkDimensions
GetMenuStringA
GetQueueStatus
GetScrollPos
GetTopWindow
GetWindow
GetWindowLongW
GrayStringA
GrayStringW
IMPGetIMEW
InflateRect
InsertMenuItemW
InvalidateRect
IsCharAlphaA
IsClipboardFormatAvailable
IsHungAppWindow
LoadAcceleratorsW
LoadCursorW
LoadIconA
LockWorkStation
LookupIconIdFromDirectoryEx
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
OpenDesktopW
PostQuitMessage
PostThreadMessageW
RealGetWindowClassA
RegisterClassA
RegisterClipboardFormatW
RegisterWindowMessageA
ScrollWindowEx
SendInput
SendMessageA
SendMessageTimeoutA
SetCapture
SetCursor
SetDlgItemTextA
SetMenu
SetMenuDefaultItem
SetMenuItemInfoA
SetWindowLongW
SetWindowTextA
ShowWindow
TabbedTextOutW
TrackMouseEvent
TrackPopupMenu
UnhookWindowsHook
UnpackDDElParam
UnregisterClassA
UnregisterClassW
VkKeyScanExW
WINNLSEnableIME

ole32

BindMoniker
CLIPFORMAT_UserSize
CoAddRefServerProcess
CoBuildVersion
CoCopyProxy
CoCreateInstanceEx
CoFileTimeToDosDateTime
CoGetClassVersion
CoGetCurrentLogicalThreadId
CoGetInstanceFromIStorage
CoGetMalloc
CoGetObject
CoImpersonateClient
CoInitializeEx
CoInitializeSecurity
CoInitializeWOW
CoQueryClientBlanket
CoQueryReleaseObject
CoReactivateObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoReleaseMarshalData
CoRevertToSelf
CoRevokeClassObject
CoSetCancelObject
CoTreatAsClass
CreateBindCtx
CreatePointerMoniker
CreateStdProgressIndicator
DoDragDrop
GetHGlobalFromStream
GetHookInterface
GetRunningObjectTable
HACCEL_UserSize
HBITMAP_UserSize
HBRUSH_UserUnmarshal
HDC_UserSize
HDC_UserUnmarshal
HGLOBAL_UserUnmarshal
HMENU_UserFree
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserUnmarshal
HPALETTE_UserUnmarshal
HWND_UserMarshal
IsAccelerator
OleConvertOLESTREAMToIStorageEx
OleCreateEmbeddingHelper
OleCreateFromData
OleCreateLinkFromDataEx
OleCreateLinkToFileEx
OleDuplicateData
OleGetAutoConvert
OleGetIconOfFile
OleInitialize
OleIsCurrentClipboard
OleIsRunning
OleLoad
OleLoadFromStream
OleLockRunning
OleQueryLinkFromData
OleRegEnumFormatEtc
OleSave
OleSaveToStream
OleSetAutoConvert
OleSetContainedObject
OleSetMenuDescriptor
OpenOrCreateStream
PropStgNameToFmtId
RegisterDragDrop
SNB_UserFree
SNB_UserUnmarshal
STGMEDIUM_UserSize
STGMEDIUM_UserUnmarshal
StgCreateDocfile
StgCreateStorageEx
StgGetIFillLockBytesOnFile
StgIsStorageFile
StgOpenAsyncDocfileOnIFillLockBytes
StgOpenStorage
StgOpenStorageEx
WdtpInterfacePointer_UserFree
WriteClassStm
WriteFmtUserTypeStg
WriteStringStream

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1807b153e6a78fee2af07f50e1465ec

Code Sign

29:91:e1:1b:94:9b:d7:9b:48:8d:41:3e:68:60:cd:19Certificate

Extended Key Usages

b6:d0:e2:a3:62:a7:59:bc:01:e1:f9:c1:df:3e:5e:07:ce:3f:f0:c8Signer

Signature Validations

Verification

15/09/2022, 14:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 980B

.text Size: 55KB - Virtual size: 55KB

.text2 Size: 1024B - Virtual size: 800B

.reloc Size: 1KB - Virtual size: 1KB

29:91:e1:1b:94:9b:d7:9b:48:8d:41:3e:68:60:cd:19
Certificate

b6:d0:e2:a3:62:a7:59:bc:01:e1:f9:c1:df:3e:5e:07:ce:3f:f0:c8
Signer

15/09/2022, 14:52
Valid: false

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 980B

.text
Size: 55KB - Virtual size: 55KB

.text2
Size: 1024B - Virtual size: 800B

.reloc
Size: 1KB - Virtual size: 1KB