3e0f9641dcc4f547b87318c5bb129c4e18c26ce6f33c0eb0dff333f8b2a8b222

Sharing

Copy URL Twitter E-mail

General

Target

3e0f9641dcc4f547b87318c5bb129c4e18c26ce6f33c0eb0dff333f8b2a8b222
Size

47KB
MD5

e43b875991c7e7df88bd77f35e8e9ee1
SHA1

75f7c1b9b97642cf0106af63fcd29c54e5a31c7d
SHA256

3e0f9641dcc4f547b87318c5bb129c4e18c26ce6f33c0eb0dff333f8b2a8b222
SHA512

ed59423c34bc43648c74a5020d6a57ef8ff54c24c0de97949e2f9a7c0f190d21875fd3f09d066fa01964c4a5e5606b9408892add1863fb5384e6b37be346a553
SSDEEP

768:wMwXdxXXh10ZTj0u5JdqUx+mgLxQg11aQpXz:qXx2ZTj5q2+mgempD

Score

N/A

Malware Config

Signatures

Files

3e0f9641dcc4f547b87318c5bb129c4e18c26ce6f33c0eb0dff333f8b2a8b222
.exe windows x86

f5923f5729ea5cacc6f2a8d2008a64d0

Code Sign

32:1e:5e:21:e5:6e:87:85:49:2a:1d:77:9b:fd:ac:14
Certificate

Issuer

CN=BTuS

Not Before

15/06/2012, 13:28

Not After

31/12/2039, 23:59

Subject

CN=BTuS

Extended Key Usages

ExtKeyUsageCodeSigning

d3:ce:7a:99:9c:c4:ef:df:e4:46:f3:1a:0d:8f:fc:ef:7b:58:fb:7d
Signer

Actual PE Digest

d3:ce:7a:99:9c:c4:ef:df:e4:46:f3:1a:0d:8f:fc:ef:7b:58:fb:7d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=BTuS

15/09/2022, 14:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToDosDateTime
lstrcatA
CreateFileA
GetCommandLineA
GetProcAddress
LoadLibraryW
VirtualAlloc

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.16
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data15
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data14
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data13
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data12
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5923f5729ea5cacc6f2a8d2008a64d0

Code Sign

32:1e:5e:21:e5:6e:87:85:49:2a:1d:77:9b:fd:ac:14Certificate

Extended Key Usages

d3:ce:7a:99:9c:c4:ef:df:e4:46:f3:1a:0d:8f:fc:ef:7b:58:fb:7dSigner

Signature Validations

Verification

15/09/2022, 14:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 512B - Virtual size: 236B

.data Size: 512B - Virtual size: 528B

.16 Size: 1024B - Virtual size: 1000B

.data15 Size: 1024B - Virtual size: 1000B

.data14 Size: 1024B - Virtual size: 1000B

.data13 Size: 1024B - Virtual size: 1000B

.data12 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 294B

32:1e:5e:21:e5:6e:87:85:49:2a:1d:77:9b:fd:ac:14
Certificate

d3:ce:7a:99:9c:c4:ef:df:e4:46:f3:1a:0d:8f:fc:ef:7b:58:fb:7d
Signer

15/09/2022, 14:52
Valid: false

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 512B - Virtual size: 236B

.data
Size: 512B - Virtual size: 528B

.16
Size: 1024B - Virtual size: 1000B

.data15
Size: 1024B - Virtual size: 1000B

.data14
Size: 1024B - Virtual size: 1000B

.data13
Size: 1024B - Virtual size: 1000B

.data12
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 294B