9276db304a3d98315f8a181b3b59f3c350d7f7a1b5090e7d5dfd5896b82ba51e

Sharing

Copy URL Twitter E-mail

General

Target

9276db304a3d98315f8a181b3b59f3c350d7f7a1b5090e7d5dfd5896b82ba51e
Size

278KB
MD5

5b310bede0331da2d4870df57bd10851
SHA1

7063e3781db3ca478e9f31c3d084fcb2969b085a
SHA256

9276db304a3d98315f8a181b3b59f3c350d7f7a1b5090e7d5dfd5896b82ba51e
SHA512

a45f5f3fca1cdfcbb4a0ea11a7f44aeafb7f2e66440ddfc11929a318db8e832a8843dcabe2f6224368fd8c402686d55d0d42c53e7c7ff743e0055f4be83ed0eb
SSDEEP

6144:qYk7RnxF3BEuTP0PvdA8r1eyABpxEJPlLsiJEwpC5kSm4krOWh:qYex0uT8Hq6eyABvuPl5mRkJh

Score

N/A

Malware Config

Signatures

Files

9276db304a3d98315f8a181b3b59f3c350d7f7a1b5090e7d5dfd5896b82ba51e
.exe windows x86

9ccb98a73b351647b1a2fd5623e17f49

Code Sign

4c:35:75:3f:cf:2a:de:ad:46:0c:1f:dd:50:bf:2e:14
Certificate

Issuer

CN=12361235123

Not Before

26/02/2012, 20:29

Not After

31/12/2039, 23:59

Subject

CN=12361235123

Extended Key Usages

ExtKeyUsageCodeSigning

0f:dd:f0:e6:97:d7:5b:9d:62:23:57:b1:8e:b4:5e:6c:9d:24:7f:83
Signer

Actual PE Digest

0f:dd:f0:e6:97:d7:5b:9d:62:23:57:b1:8e:b4:5e:6c:9d:24:7f:83

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=12361235123

15/09/2022, 14:53
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

advapi32

RegOpenKeyExA

shell32

ExtractAssociatedIconW
ExtractIconExW
ExtractIconEx
SHFormatDrive
SHGetIconOverlayIndexW
ShellExecuteEx
WOWShellExecute
SHBrowseForFolder
SHGetSpecialFolderLocation
SHGetIconOverlayIndexA
SHInvokePrinterCommandA
SHCreateDirectoryExW
SHPathPrepareForWriteA
SHGetFileInfoW
SHGetDiskFreeSpaceA
DuplicateIcon
Shell_NotifyIcon
Shell_NotifyIconA
SHBrowseForFolderW
ExtractIconExA
SHGetPathFromIDList
SHFileOperationW
DoEnvironmentSubstA
SHLoadInProc
DoEnvironmentSubstW
ExtractAssociatedIconExW
SHQueryRecycleBinW
DragQueryFile
CommandLineToArgvW
SHCreateProcessAsUserW
SHGetPathFromIDListA
SHGetDataFromIDListW
DragFinish
ShellExecuteW
SHCreateDirectoryExA
SHGetDiskFreeSpaceExA
SHGetFileInfo
ShellExecuteExW
SHAddToRecentDocs
SHGetMalloc
SHQueryRecycleBinA
SHGetInstanceExplorer
SHInvokePrinterCommandW
DragQueryPoint
SHGetFolderLocation
DragQueryFileA
SHFileOperationA
SHBrowseForFolderA
SHGetDiskFreeSpaceExW
SHPathPrepareForWriteW
SHGetSpecialFolderPathA
SHGetFileInfoA
ShellExecuteA
ExtractIconW
FindExecutableA
ExtractAssociatedIconA

shlwapi

StrRChrIA
StrStrIW
StrChrIA
StrStrW
StrStrA
StrCmpNIA
StrRStrIW
StrRChrIW
StrChrIW
StrRChrW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text11
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text12
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ccb98a73b351647b1a2fd5623e17f49

Code Sign

4c:35:75:3f:cf:2a:de:ad:46:0c:1f:dd:50:bf:2e:14Certificate

Extended Key Usages

0f:dd:f0:e6:97:d7:5b:9d:62:23:57:b1:8e:b4:5e:6c:9d:24:7f:83Signer

Signature Validations

Verification

15/09/2022, 14:53 Valid: false

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

Sections

.text Size: 3KB - Virtual size: 2KB

.text11 Size: 258KB - Virtual size: 258KB

.text12 Size: 1024B - Virtual size: 912B

.text1 Size: 1024B - Virtual size: 1000B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 528B

4c:35:75:3f:cf:2a:de:ad:46:0c:1f:dd:50:bf:2e:14
Certificate

0f:dd:f0:e6:97:d7:5b:9d:62:23:57:b1:8e:b4:5e:6c:9d:24:7f:83
Signer

15/09/2022, 14:53
Valid: false

.text
Size: 3KB - Virtual size: 2KB

.text11
Size: 258KB - Virtual size: 258KB

.text12
Size: 1024B - Virtual size: 912B

.text1
Size: 1024B - Virtual size: 1000B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 528B