library_3[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

library_3.exe
Size

1.5MB
MD5

fe0c99fa7c65f818e29f3fcafb85b521
SHA1

c805356b0bbd898844256734cc3dcd9907f64148
SHA256

69eac55ff687843f9d856e7facdef36d1c53faa5df6ff3eab874a1426a5efcea
SHA512

5c6d09706afd637c354e74160d3e89c3fd6f7e41695379ff872e4e95a0359f940846d5a2db0af46281b6bc1e850b371df2adba8493dec817b445f9a20291f92c
SSDEEP

24576:vwZXuV+v7ClPtyhc+j0Fsa+IjRGbxsmhNgFFxkOiYdjNwR63d4MEu4Vm4ABwG/xe:vw9uVa7KVscg0FL9RGiMA443d4MEuXwl

Score

N/A

Malware Config

Signatures

Files

library_3.exe
.exe windows x86

96b43ae5ec1db67e8f009f90ecb1df30

Code Sign

e6:af:15:49:ef:33:1a:8c
Certificate

Issuer

CN=unknown,OU=unknown,O=unknown,L=unknown,ST=unknown,C=CN,1.2.840.113549.1.9.1=#0c0b756e6b6e6f776e40777473

Not Before

26/03/2019, 02:46

Not After

23/03/2029, 02:46

Subject

CN=unknown,OU=unknown,O=unknown,L=unknown,ST=unknown,C=CN,1.2.840.113549.1.9.1=#0c0b756e6b6e6f776e40777473

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

91:ce:86:1f:29:e0:74:c4:27:98:76:b2:ee:58:46:8f:65:5d:79:78:ff:10:b2:9d:3c:c1:92:cb:f0:f3:8b:9d
Signer

Actual PE Digest

91:ce:86:1f:29:e0:74:c4:27:98:76:b2:ee:58:46:8f:65:5d:79:78:ff:10:b2:9d:3c:c1:92:cb:f0:f3:8b:9d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=unknown,OU=unknown,O=unknown,L=unknown,ST=unknown,C=CN,1.2.840.113549.1.9.1=#0c0b756e6b6e6f776e40777473

25/09/2022, 06:25
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleActiveScreenBuffer
SetConsoleCursorInfo
FindAtomW
DeleteFileW
LoadResource
GetLastError
ReadConsoleW
GetConsoleTitleA
GetACP
GetLargePageMinimum
FindClose
FindNextChangeNotification
GetLocaleInfoEx
GetDefaultCommConfigW
WaitForSingleObject
GetConsoleAliasesLengthW
GetSystemDefaultLangID
GetCurrentProcess
GetProcessHeap
GetSystemDefaultLCID
GetCommandLineW
EnumSystemLanguageGroupsW
OpenMutexW
TlsGetValue
LoadLibraryA
InterlockedDecrement
GetProcAddress
HeapAlloc
HeapFree
RtlUnwind
GetCommandLineA
GetStartupInfoA
RaiseException
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetOEMCP
IsValidCodePage
ReadFile
SetStdHandle
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA

user32

GetSysColorBrush

advapi32

ImpersonateSelf
ImpersonateAnonymousToken

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96b43ae5ec1db67e8f009f90ecb1df30

Code Sign

e6:af:15:49:ef:33:1a:8cCertificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

91:ce:86:1f:29:e0:74:c4:27:98:76:b2:ee:58:46:8f:65:5d:79:78:ff:10:b2:9d:3c:c1:92:cb:f0:f3:8b:9dSigner

Signature Validations

Verification

25/09/2022, 06:25 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.data Size: 5KB - Virtual size: 13KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 89KB - Virtual size: 89KB

e6:af:15:49:ef:33:1a:8c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

91:ce:86:1f:29:e0:74:c4:27:98:76:b2:ee:58:46:8f:65:5d:79:78:ff:10:b2:9d:3c:c1:92:cb:f0:f3:8b:9d
Signer

25/09/2022, 06:25
Valid: false

.text
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 5KB - Virtual size: 13KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 89KB - Virtual size: 89KB