37dc1d141196a09756e380e5c8e289f2e653f2af5a405e7e1e94640076ac7253

Sharing

Copy URL Twitter E-mail

General

Target

37dc1d141196a09756e380e5c8e289f2e653f2af5a405e7e1e94640076ac7253
Size

320KB
MD5

aebcb3f5bba935b005178ae541a16a8b
SHA1

3f47d0b10a5658b2407cba6e5ace2192ae9cd28d
SHA256

37dc1d141196a09756e380e5c8e289f2e653f2af5a405e7e1e94640076ac7253
SHA512

c669b010fdd85d85a10c7de92c79ec818c22471d9b2b9bcd40a1881d07c01f35c071645d34c7e11dffb2c82e443dbd9d1162f5bf059de4d6a06860a3bfd5c012
SSDEEP

6144:bDfD2zvuKexRfKnNfsj+nIOu5Bd18xT0fWlEqtO0AzyD+F9d:bDvyNfVIO+duTdE4O0KyD4d

Score

N/A

Malware Config

Signatures

Files

37dc1d141196a09756e380e5c8e289f2e653f2af5a405e7e1e94640076ac7253
.exe windows x86

fcdb88db8079791066942bdca177213f

Code Sign

7e:c4:c9:44:89:3b:59:84:4c:b6:ad:c2:7e:a7:59:d1
Certificate

Issuer

CN=jyiXMUmyTcNmtGHjgwNEYkoVDTyGCzWDeoiSVcbKkyJCkCrEOCQjCKlgLGX aOLZPmSjrWcTKpFkfcRZhTELThVqcxGMzAS XNnizxWvAwfKKDahdazrUSGXwVXoCgozIKfMQsDNmi qEAWaXZHLGd

Not Before

27/06/2012, 17:04

Not After

31/12/2039, 23:59

Subject

CN=jyiXMUmyTcNmtGHjgwNEYkoVDTyGCzWDeoiSVcbKkyJCkCrEOCQjCKlgLGX aOLZPmSjrWcTKpFkfcRZhTELThVqcxGMzAS XNnizxWvAwfKKDahdazrUSGXwVXoCgozIKfMQsDNmi qEAWaXZHLGd

Extended Key Usages

ExtKeyUsageCodeSigning

e2:bb:17:42:e7:17:4d:14:a2:ee:72:5c:c0:05:9b:3d:3a:35:58:85
Signer

Actual PE Digest

e2:bb:17:42:e7:17:4d:14:a2:ee:72:5c:c0:05:9b:3d:3a:35:58:85

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=jyiXMUmyTcNmtGHjgwNEYkoVDTyGCzWDeoiSVcbKkyJCkCrEOCQjCKlgLGX aOLZPmSjrWcTKpFkfcRZhTELThVqcxGMzAS XNnizxWvAwfKKDahdazrUSGXwVXoCgozIKfMQsDNmi qEAWaXZHLGd

15/09/2022, 14:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetWindowsDirectoryW
LoadLibraryA
GetProcAddress
lstrcatW
CreateFileW
GetCommProperties
SetHandleCount
SetThreadExecutionState
IsBadWritePtr
EraseTape
GetConsoleAliasExesW
IsBadReadPtr
GetDiskFreeSpaceW
CreateJobObjectW
lstrcpyA
UnlockFile
SetConsoleActiveScreenBuffer
ScrollConsoleScreenBufferW
GlobalMemoryStatus
SetHandleInformation
BuildCommDCBAndTimeoutsW
SizeofResource
Module32FirstW
SetConsoleCursorInfo
HeapFree
GetHandleInformation
PurgeComm
CreateMutexA
GetPrivateProfileStructW
LockFile
LCMapStringA
SetCalendarInfoW
CancelDeviceWakeupRequest
MoveFileWithProgressW
WritePrivateProfileSectionW
GlobalAddAtomA
BackupRead
GlobalDeleteAtom
AssignProcessToJobObject
GetConsoleAliasesLengthA
FoldStringW
FreeLibraryAndExitThread
GetSystemPowerStatus
GetOEMCP
GetCurrentThread
BuildCommDCBAndTimeoutsA
PeekNamedPipe
IsBadStringPtrA
GenerateConsoleCtrlEvent
GetThreadLocale
GetDriveTypeW
SetFileAttributesW
ReadProcessMemory
EndUpdateResourceA
SetCommBreak
GetTempPathA
ClearCommError
GetComputerNameW
SetConsoleTitleA
WriteProfileStringW
SetFilePointerEx
InterlockedCompareExchange
GlobalGetAtomNameA
lstrlenA
OutputDebugStringA
Heap32First
GetCurrentDirectoryW
GlobalAlloc
GetNumberOfConsoleMouseButtons
ReadConsoleOutputA
OpenProcess
GetSystemInfo
PeekConsoleInputA
SetVolumeMountPointA
GetTempFileNameW
SetProcessWorkingSetSize
GlobalHandle
GetLogicalDriveStringsA
SetDefaultCommConfigA
Process32Next
FindNextVolumeMountPointW
IsDebuggerPresent
AllocConsole
GetConsoleScreenBufferInfo
UnmapViewOfFile
Process32NextW
EnumSystemCodePagesA
GetCommandLineA
GetLogicalDriveStringsW
WritePrivateProfileStructW
GetPrivateProfileStringW
GetVolumePathNameW
FindCloseChangeNotification
CreateEventA
GetConsoleTitleW

user32

CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
GetDC
ReleaseDC
SetScrollRange
SetScrollPos
ScrollWindow
SendMessageA
BeginPaint
GetSystemMetrics
wsprintfA
EndPaint
PostQuitMessage
DefWindowProcA
GetWindowTextLengthA
ToAscii
SetWinEventHook
ScrollWindowEx
mouse_event
IsCharLowerW
LoadCursorFromFileW
SetDeskWallpaper
GetClipboardSequenceNumber
OpenIcon
ChangeMenuA
GetKeyboardLayoutList
GetMenuDefaultItem
IsWindowEnabled
UnhookWindowsHook
DrawEdge
FindWindowExW
TrackPopupMenu
MonitorFromRect
IsRectEmpty
DdeQueryStringA
EnumDisplaySettingsW
IMPSetIMEW
GetSystemMenu
ShowCursor
GetWindowPlacement
CreateIconIndirect
GetClipboardViewer
GetUserObjectSecurity
SetWindowsHookW
GetQueueStatus
MessageBoxIndirectA
EnumThreadWindows
GetWindowTextLengthW
LoadMenuIndirectA
CheckDlgButton
GetWindowRect
GetCursor
EnableMenuItem
InvertRect
EnumDesktopsW
WaitMessage
ScrollDC
EnumPropsA
ChangeMenuW
GetForegroundWindow
DdeFreeStringHandle
GetSysColorBrush
AllowSetForegroundWindow
AppendMenuA
CopyImage
GetUserObjectInformationA
FindWindowW
GetKeyboardLayout
OpenDesktopA
CreateDialogIndirectParamW
OemKeyScan
ChildWindowFromPoint
GetCursorInfo
CreateCursor
GetWindowRgn
GetShellWindow
EnumWindows
RegisterDeviceNotificationA
GetMessagePos
SetProcessWindowStation
GetClassLongW
IMPGetIMEW
WaitForInputIdle
ShowOwnedPopups
GetInputState
GetGuiResources
CascadeWindows
RegisterShellHookWindow
GetTitleBarInfo
SetShellWindow
SetSysColors
GetIconInfo
EndDeferWindowPos
LoadStringW
UpdateLayeredWindow
CharLowerBuffW
GetClipboardFormatNameA
ChildWindowFromPointEx
CharPrevExA
GetNextDlgTabItem
SystemParametersInfoA

gdi32

GetStockObject
GetTextMetricsA
TextOutA
SetTextAlign

msvcrt

strlen
memset

advapi32

RegOpenKeyExW

shell32

DragQueryFile
FindExecutableA
SHFreeNameMappings
DuplicateIcon
ExtractIconExW
SHGetDataFromIDListA
SHGetDesktopFolder
DoEnvironmentSubstW
SHInvokePrinterCommandW
SHLoadInProc
SHGetPathFromIDListA
SHGetDiskFreeSpaceExW
SHQueryRecycleBinW
ShellHookProc
WOWShellExecute
ShellAboutW
SHGetFileInfoA
SHEmptyRecycleBinA
Shell_NotifyIconW
ShellExecuteW
ExtractAssociatedIconExW
SHFileOperationA
SHGetInstanceExplorer
SHGetFolderPathW
SHGetIconOverlayIndexW
SHFormatDrive
SHGetFolderLocation
ShellExecuteExW
SHIsFileAvailableOffline
SHLoadNonloadedIconOverlayIdentifiers
SHCreateDirectoryExW
DragQueryFileW
SHPathPrepareForWriteA
SHGetSpecialFolderPathW
ExtractAssociatedIconExA
SHGetPathFromIDList
SHChangeNotify
SHAddToRecentDocs
SHGetFileInfo
SHGetSpecialFolderLocation
SHBrowseForFolderW
ExtractIconEx
SHBrowseForFolder
ShellExecuteA
ExtractIconExA
SHCreateProcessAsUserW
SHGetIconOverlayIndexA
SHQueryRecycleBinA
Shell_NotifyIcon
ShellExecuteEx
SHAppBarMessage
SHBrowseForFolderA
SHEmptyRecycleBinW

shlwapi

StrCmpNIW
StrRChrIW
StrChrW
StrCmpNA
StrCmpNIA
StrChrIA
StrRChrA
StrRChrIA
StrRChrW
StrStrIA
StrRStrIA
StrChrA

Sections

.text
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcdb88db8079791066942bdca177213f

Code Sign

7e:c4:c9:44:89:3b:59:84:4c:b6:ad:c2:7e:a7:59:d1Certificate

Extended Key Usages

e2:bb:17:42:e7:17:4d:14:a2:ee:72:5c:c0:05:9b:3d:3a:35:58:85Signer

Signature Validations

Verification

15/09/2022, 14:52 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

shell32

shlwapi

Sections

.text Size: 302KB - Virtual size: 301KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

7e:c4:c9:44:89:3b:59:84:4c:b6:ad:c2:7e:a7:59:d1
Certificate

e2:bb:17:42:e7:17:4d:14:a2:ee:72:5c:c0:05:9b:3d:3a:35:58:85
Signer

15/09/2022, 14:52
Valid: false

.text
Size: 302KB - Virtual size: 301KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB