aad78bf529834d91dfc6234d849fbb17b79c17dcc216c64b42ebcf5f9dd40d9d

Sharing

Copy URL Twitter E-mail

General

Target

aad78bf529834d91dfc6234d849fbb17b79c17dcc216c64b42ebcf5f9dd40d9d
Size

311KB
MD5

1d30fb0a4e3b31b4081cda8ca369b90f
SHA1

fea490d37a139450f2ef0d4c3152fabd4c0eac1a
SHA256

aad78bf529834d91dfc6234d849fbb17b79c17dcc216c64b42ebcf5f9dd40d9d
SHA512

15726db0ce7b0fbb54dda9eefcbafc8b6f33e153ec76b06d2e84c8cab37972f2dd499daba13e2516968ab03174b332655080067bf870db20322ed124e09e2d98
SSDEEP

6144:IsbB+hz9/wAS64AqzuGp2hpEwnI41gY9sN:IsB6tVSzFuu63I9

Score

N/A

Malware Config

Signatures

Files

aad78bf529834d91dfc6234d849fbb17b79c17dcc216c64b42ebcf5f9dd40d9d
.exe windows x86

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26
Certificate

Issuer

CN=u65ykrty

Not Before

28/01/2012, 05:39

Not After

31/12/2039, 23:59

Subject

CN=u65ykrty

Extended Key Usages

ExtKeyUsageCodeSigning

a5:b4:a9:9c:3d:c5:39:e7:d8:4f:40:d9:a2:13:7b:f8:e2:97:a1:7a
Signer

Actual PE Digest

a5:b4:a9:9c:3d:c5:39:e7:d8:4f:40:d9:a2:13:7b:f8:e2:97:a1:7a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=u65ykrty

15/09/2022, 14:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

user32

LoadIconW

advapi32

RegOpenKeyExW

shlwapi

SHRegEnumUSValueA
PathMakeSystemFolderA
PathSetDlgItemPathA
SHRegGetBoolUSValueW
SHRegSetUSValueW
SHRegWriteUSValueA
PathAddExtensionA
ord16

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26Certificate

Extended Key Usages

a5:b4:a9:9c:3d:c5:39:e7:d8:4f:40:d9:a2:13:7b:f8:e2:97:a1:7aSigner

Signature Validations

Verification

15/09/2022, 14:52 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 303KB - Virtual size: 302KB

.data Size: 1024B - Virtual size: 640B

.text5 Size: 512B - Virtual size: 32B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 164B

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26
Certificate

a5:b4:a9:9c:3d:c5:39:e7:d8:4f:40:d9:a2:13:7b:f8:e2:97:a1:7a
Signer

15/09/2022, 14:52
Valid: false

.text
Size: 303KB - Virtual size: 302KB

.data
Size: 1024B - Virtual size: 640B

.text5
Size: 512B - Virtual size: 32B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 164B