11910110653571ef2590b90de3b44e3d491b702d245a844b2f0615829eb2d50a

Sharing

Copy URL Twitter E-mail

General

Target

11910110653571ef2590b90de3b44e3d491b702d245a844b2f0615829eb2d50a
Size

694KB
MD5

64d2a1f8ace5ab1fa317b3d846dd5670
SHA1

550083ba27edaa7ba2fa5c430d8d6cf34fb7097f
SHA256

11910110653571ef2590b90de3b44e3d491b702d245a844b2f0615829eb2d50a
SHA512

c1aaba4d8e8ed3a8f594bd3662e6f88899bdf96abda26f2c6293f0a36dbf60f225c1d6e746d47aed53043b731c6ca0fa78c19175911ae6b537e165d410085c2d
SSDEEP

12288:gzhS+ro8RsI45d0bQGBf+rX+TFXckJsEVDBNwRhD:P+roOsI45mbRf6+B51mRhD

Score

N/A

Malware Config

Signatures

Files

11910110653571ef2590b90de3b44e3d491b702d245a844b2f0615829eb2d50a
.exe windows x86

a6f860862d345880b6ab4a484ed9ad13

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:8a:8b:c0:b5:b8:df:88:bc:c7:11:b3:fd:a5:59:7d
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

10/08/2015, 00:00

Not After

09/08/2016, 23:59

Subject

CN=OOO \"PERVAYA LIGA\",O=OOO \"PERVAYA LIGA\",POSTALCODE=197110,STREET=PETROVSKAYA KOSA\, 9,L=Saint-Petersburg,ST=Saint-Petersburg,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5c:23:e1:d3:63:1f:e4:78:a9:ba:91:3a:a6:a3:33:d1:c8:94:3e:38
Signer

Actual PE Digest

5c:23:e1:d3:63:1f:e4:78:a9:ba:91:3a:a6:a3:33:d1:c8:94:3e:38

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=OOO \"PERVAYA LIGA\",O=OOO \"PERVAYA LIGA\",POSTALCODE=197110,STREET=PETROVSKAYA KOSA\, 9,L=Saint-Petersburg,ST=Saint-Petersburg,C=US

29/09/2022, 18:53
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

WindowFromPoint
GetScrollInfo
GetClipCursor
SetRect
PostQuitMessage
MoveWindow
CreateCursor
EnumPropsExW
SetDeskWallpaper
DrawAnimatedRects
AdjustWindowRectEx
GetInputDesktop
GetListBoxInfo
GetUpdateRgn
DrawCaptionTempW
GetMenuContextHelpId
DlgDirListA
GetListBoxInfo
SetCursor
InsertMenuW
DefFrameProcW
EqualRect
SetMenuItemInfoW
UnloadKeyboardLayout
OemToCharBuffA
DialogBoxParamW
GetTabbedTextExtentA
GetClassNameA
FlashWindow
LoadCursorFromFileA
SetWindowPos
BroadcastSystemMessageExW
ClipCursor
DrawTextA
DefWindowProcW
BroadcastSystemMessageExA
GetTabbedTextExtentW
CheckDlgButton
WindowFromPoint
CloseDesktop
DialogBoxParamA
SetWindowsHookA
GetPropW
GetMenuItemInfoW
GetCaretPos
UnregisterHotKey
DestroyAcceleratorTable
GetWindowLongA
ScreenToClient
ChangeMenuW
CreateIconFromResourceEx
GetMenu
CharNextExA
GetDlgItemInt
SetWindowTextW
GetScrollBarInfo
RealGetWindowClassA
DrawMenuBarTemp
LoadAcceleratorsW
RegisterDeviceNotificationW
GetNextDlgGroupItem
IsWindow
CheckMenuItem
SetMenu
LoadStringW
CharUpperW
PrintWindow
InvalidateRgn
RegisterClassExW
ExitWindowsEx
InsertMenuItemA
OpenWindowStationW
GetMessagePos
DefDlgProcW
DestroyWindow
GetWindowModuleFileNameA
RegisterWindowMessageW
ToUnicodeEx
AdjustWindowRect
SetForegroundWindow
WaitForInputIdle
EndDialog
GetDlgCtrlID
GetUserObjectSecurity
ShowScrollBar
IsCharAlphaA
GetUpdateRgn
CreateMenu
IsIconic
DialogBoxIndirectParamA
SetScrollInfo
SetClassLongW
IsRectEmpty
IsCharUpperA
RealGetWindowClassW
DlgDirSelectExA
IsCharAlphaW
ScrollWindowEx
UnhookWindowsHook
GetCursor
TileWindows
ReleaseDC
GetAltTabInfoW
GetGuiResources
GetWindowRgnBox
DrawCaption
ToAscii
GetInternalWindowPos
CallWindowProcW
RemoveMenu
TrackPopupMenu
LoadImageA
RegisterHotKey
SetActiveWindow
GetCapture
SetInternalWindowPos
CreateIconIndirect
OemToCharA
MapVirtualKeyExA
AllowForegroundActivation
ShowOwnedPopups
DrawIcon
SetProgmanWindow
CharNextA
DestroyMenu
BlockInput
SetCaretPos
MessageBoxIndirectA
EditWndProc
WinHelpA
SendNotifyMessageW
GetKeyNameTextW
FindWindowExW
EmptyClipboard
DefDlgProcA
DispatchMessageW
GetSubMenu
InvalidateRect
CharLowerA
DragObject
ChildWindowFromPoint
SetUserObjectInformationA
GetUserObjectInformationW
CreateIcon
DrawStateW
EndPaint
GetKeyNameTextA
GetKeyboardLayout
GetWindowDC
GetMenuState
SendMessageA
CreateCursor
OpenIcon
SendNotifyMessageA
CascadeChildWindows
GetScrollInfo
RegisterClipboardFormatA
LoadCursorFromFileW
wvsprintfA
InsertMenuA
IsDlgButtonChecked
CascadeWindows
GetWindowInfo
DrawFrameControl
IntersectRect
DrawAnimatedRects
PostThreadMessageW
RealChildWindowFromPoint
UnionRect
MapVirtualKeyA
PrivateExtractIconsW
TabbedTextOutW
LoadStringA
DrawMenuBar
MenuItemFromPoint
IsChild
CharPrevW
AdjustWindowRectEx
ArrangeIconicWindows
GetWindowModuleFileNameW
CopyAcceleratorTableW
CloseClipboard
EnumWindowStationsW
IsDialogMessage
MonitorFromRect
PostThreadMessageA
TranslateAcceleratorW
SetClassWord
CharLowerBuffW
DestroyCaret
MessageBoxW
OpenInputDesktop
CharToOemA
MoveWindow
UpdateWindow
ToUnicode
CloseDesktop
SetWindowRgn
DrawTextExA
InflateRect
EndTask
CreateAcceleratorTableA
CheckMenuRadioItem
GetInputState
GetWindowLongW
CharToOemBuffW
GetMenuStringA
SetSysColors
DestroyIcon
BringWindowToTop
SetFocus
SendDlgItemMessageA
ShowCaret
CharToOemBuffA
SetMenuDefaultItem
GetSysColor
SetWindowWord
wsprintfW
FillRect
AnyPopup
CallNextHookEx
SetParent
GetClassInfoExA
SetTimer
SetWindowsHookExA
EnumPropsExW
SendMessageTimeoutW
SendMessageCallbackW
GetClassInfoA
MapVirtualKeyW
GetIconInfo
PrivateExtractIconExA
ChangeDisplaySettingsW
SetProcessWindowStation
DefFrameProcA
CreateMDIWindowA
SendDlgItemMessageW
GetPropA
ShowCursor
EnableScrollBar
SetDebugErrorLevel
PostMessageW
UnregisterClassW
AttachThreadInput
ValidateRect
CreateDialogIndirectParamW
OffsetRect
DrawFrame
GetFocus
SendMessageCallbackA
GetMenuItemID
IsCharLowerA
ChangeDisplaySettingsA
FindWindowA
ChildWindowFromPointEx
SetClipboardViewer
IsWindowVisible
SetCaretBlinkTime
GetTopWindow
SetPropW
DrawTextW
DlgDirSelectExW
DispatchMessageA
ChangeDisplaySettingsExW
GetClipboardFormatNameA
TrackMouseEvent
ScrollWindow
GetClassInfoExW
AppendMenuW
SetMenuItemBitmaps
UnlockWindowStation
CharLowerBuffA
GetMessageW
SetSystemMenu
SetPropA
CharNextW
LockWorkStation
InvertRect
GetNextDlgTabItem
SetCursorContents
DrawTextExW
GetClipboardData
PaintDesktop
GetMouseMovePointsEx
FlashWindowEx
DlgDirListW
AppendMenuA
MessageBoxA
SendMessageTimeoutA
FrameRect
TranslateAcceleratorA
SetMenuContextHelpId
MenuWindowProcW
ShowWindow
EnableMenuItem
CreateIconFromResource
GetAltTabInfoA
WinHelpW
CloseWindow
wsprintfA
GetMenuStringW
GetWindowTextW
GetMenuInfo
OemToCharBuffW
wvsprintfW
TabbedTextOutA
RegisterClipboardFormatW
LoadIconA
OpenDesktopA
GetCursorInfo
EndMenu
GetDlgItem
GetMenuItemCount

kernel32

GetBinaryTypeA
GetDiskFreeSpaceExA
UnregisterWait
GetLocalTime
SetVolumeLabelA
GetDiskFreeSpaceW
DeactivateActCtx
GetProcessTimes
SetLastError
SystemTimeToTzSpecificLocalTime
CompareStringW
GetProfileIntW
GetLastError
GetACP
IsDBCSLeadByte
FreeUserPhysicalPages
FindFirstVolumeW
GetDefaultCommConfigW
IsProcessInJob
GetPrivateProfileIntA
FoldStringA
ReleaseActCtx
AllocateUserPhysicalPages
FindResourceExA
EnumDateFormatsExW
GetFileSizeEx
CreateEventW
GetCPInfo
GetTapeStatus
PeekNamedPipe
BuildCommDCBA
CreateTimerQueue
CreateTapePartition
UpdateResourceW
PrivCopyFileExW
CreateSemaphoreA
WinExec
EnumLanguageGroupLocalesA
AllocConsole
RtlCaptureContext
SetFileAttributesW
MulDiv
GetCurrentConsoleFont
GetSystemTime
GetProcessIoCounters
FindFirstFileExW
EnumResourceNamesW
QueryPerformanceFrequency
GetTimeFormatW
EnumCalendarInfoW
lstrcpyA
SetThreadUILanguage
DefineDosDeviceA
GlobalAddAtomA
lstrcpy
Beep
ReadConsoleInputExW
SetFileValidData
GetProcessShutdownParameters
GlobalFindAtomA
OpenFileMappingA
SetEnvironmentVariableA
UnmapViewOfFile
HeapSize
GetEnvironmentVariableW
OpenSemaphoreA
GetThreadTimes
GetStartupInfoA
FatalExit
GetConsoleMode
GetComPlusPackageInstallStatus
LoadResource
DeactivateActCtx
GetConsoleTitleA
SetDefaultCommConfigA
GetVolumePathNamesForVolumeNameW
SetComputerNameA
SetHandleCount
GetCurrentActCtx
CancelDeviceWakeupRequest
SetCommMask
ShowConsoleCursor
GetTimeZoneInformation
SystemTimeToFileTime
EndUpdateResourceW
GetThreadPriorityBoost
GetProfileIntW
DeleteAtom
EnterCriticalSection
GetNumberFormatA
InitializeCriticalSection
GetFileAttributesA
WriteTapemark
SetComputerNameExW
GetProfileIntA
FreeEnvironmentStringsA
FlushViewOfFile
CreateJobObjectA
lstrcpyW
GetSystemTimeAdjustment
lstrcpynW
GetCalendarInfoA
QueryPerformanceCounter
EnumTimeFormatsW
lstrcmpA
GetConsoleTitleW
LockFile
ConnectNamedPipe
SetThreadAffinityMask
RtlMoveMemory
SetLastError
ExpandEnvironmentStringsA
CreateThread
LZCopy
WritePrivateProfileStructW
SetFileApisToOEM
DeleteTimerQueueEx
FindFirstFileExA
GlobalReAlloc
ReleaseMutex
ResetEvent
SetTapePosition
SetNamedPipeHandleState
RemoveDirectoryW
AddAtomA
MoveFileWithProgressW
CreateMemoryResourceNotification
CreateDirectoryW
WriteConsoleW
FlushConsoleInputBuffer
ClearCommError
GetExitCodeThread
OpenFile
BuildCommDCBW
FileTimeToLocalFileTime
GlobalLock
GetFullPathNameA
GetProcessVersion
EnumCalendarInfoExA
InitializeCriticalSectionAndSpinCount
GetWriteWatch
GetFileAttributesExA
RtlUnwind
DeleteVolumeMountPointW
GetLongPathNameW
GetDateFormatW
CreateMailslotW
LocalHandle
WritePrivateProfileSectionA
LocalUnlock
GetConsoleOutputCP
CreateJobSet
FatalAppExitW
GetGeoInfoW
GetSystemDefaultLangID
CopyLZFile
GetFileAttributesExW
DisconnectNamedPipe
GetExitCodeProcess
TryEnterCriticalSection
GlobalFree
LoadLibraryExA
LocalAlloc
GlobalAlloc
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

comdlg32

FindTextW
GetFileTitleA
GetFileTitleW
PrintDlgExA
PageSetupDlgA
GetOpenFileNameW
ChooseColorA
ReplaceTextA
dwOKSubclass
GetSaveFileNameA
PrintDlgW
dwLBSubclass
LoadAlterBitmap
CommDlgExtendedError
WantArrows
GetSaveFileNameW
GetOpenFileNameA
ChooseColorW
FindTextA
ReplaceTextW
ChooseFontW

oleaut32

VarXor
SafeArrayPutElement
DispGetParam
VarDateFromR4
VarI4FromUI2
VarI8FromDisp
VarUI2FromStr
VarR8FromDate
OleLoadPictureEx
VarBoolFromR4
VarI8FromI1
ClearCustData
VarCyFromI4
VarI2FromI1
VarDateFromR8
VarDecCmpR8
VarParseNumFromStr
LHashValOfNameSys
VarUI4FromI1
VarI1FromI2
SafeArrayGetDim
OACreateTypeLib2
VarDecMul
VARIANT_UserMarshal
VarDecRound
VarUI1FromUI8
SafeArrayDestroy
VarDateFromCy
SysFreeString
VarCyFromUI4
VarBstrCat
GetVarConversionLocaleSetting
SafeArrayGetIID
OleCreatePropertyFrame
VariantTimeToDosDateTime
SysAllocString
VarDecDiv
VarUI1FromDisp
SafeArrayCopyData
VarUI1FromDec
SafeArrayUnaccessData
VarRound
DispGetIDsOfNames
VarImp
VarDecFromDisp
SafeArrayCreateVectorEx
CreateDispTypeInfo
BSTR_UserSize
VarI2FromUI4
DllUnregisterServer
GetRecordInfoFromGuids
VariantClear
VarUI1FromCy
SafeArrayLock
VarI2FromR4
VarI4FromUI1
VarR8Pow
VarUI4FromDec
DosDateTimeToVariantTime
VarUI4FromI8
OleIconToCursor
VarI4FromUI4
VarI1FromDec
VarUdateFromDate
VarBoolFromI1
VarCyAdd
VarI2FromR8

winspool.drv

CloseSpoolFileHandle
FlushPrinter
AddFormW
EnumPrinterKeyW
EnumPrintProcessorsA
PrinterProperties
AddPrinterDriverA
PrinterMessageBoxA
DeletePrinterDataExA
EnumPrinterDataW
ConvertUnicodeDevModeToAnsiDevmode
EnumMonitorsW
EnumPrinterDataExA
PerfClose
DeletePrinterDataExW
QueryColorProfile
EnumPrintProcessorDatatypesW
FindFirstPrinterChangeNotification
EnumPrinterDataExW
ConvertAnsiDevModeToUnicodeDevmode
DeletePrintProvidorA
DocumentPropertySheets
DevQueryPrintEx
DeletePrinterConnectionA
DEVICEMODE
DeletePrinterKeyA
StartDocPrinterW
OpenPrinterW
DeletePrintProcessorA
DocumentPropertiesW
DevicePropertySheets
AddPortExW
AddPrinterDriverExW
AddPrintProcessorA
AddPrinterW
GetDefaultPrinterW
SetPrinterDataExW
SetFormA
DeletePortW
EnumPrintProcessorsW
EnumPrinterDataA
GetPrinterDriverW
DeviceCapabilitiesW
WritePrinter
AddMonitorW
SetJobA
DocumentEvent
GetPrinterDriverA
SetPortW
DeletePrintProcessorW
DeletePrinterDriverExW
PerfOpen
SetPrinterDataA
EndPagePrinter
DeviceMode
WaitForPrinterChange

version

VerLanguageNameW
GetFileVersionInfoSizeA
VerQueryValueW
VerQueryValueA
VerFindFileA
VerFindFileW
GetFileVersionInfoSizeW

ws2_32

listen
WSCUnInstallNameSpace
WSAAsyncSelect
WSASocketW
connect
WPUCompleteOverlappedRequest
WSAJoinLeaf
socket
WSACancelBlockingCall
WSADuplicateSocketA
WSAAsyncGetServByPort
WSALookupServiceBeginA
WSACancelAsyncRequest
recvfrom
closesocket
WSAInstallServiceClassA
WSASend
WSASetServiceA
WSCUpdateProvider
WSADuplicateSocketW
gethostname
WSCEnumProtocols
WSAAsyncGetHostByAddr
WSASetEvent
inet_ntoa
WSCDeinstallProvider
bind
WSAResetEvent
WSAEnumNameSpaceProvidersA
WSALookupServiceBeginW
WSAEnumNameSpaceProvidersW
WSARemoveServiceClass
WSCGetProviderPath
WSAHtons
WSCEnableNSProvider
select
send
WSAProviderConfigChange
WSAGetOverlappedResult
WSAStringToAddressA
WSANtohl
getprotobyname
shutdown
WSALookupServiceNextA
getnameinfo
getsockname
sendto
WSCInstallNameSpace
getservbyname
WSANSPIoctl
WSCInstallProvider
WSAGetServiceClassNameByClassIdA
recv
WSAEnumNetworkEvents
ntohl
WSAAsyncGetProtoByName
WSAIsBlocking
WSACleanup
gethostbyaddr
WSARecv
accept
WSASetLastError
WSAAsyncGetHostByName
WSARecvFrom
htonl
WSACloseEvent

comctl32

FlatSB_GetScrollProp
CreatePropertySheetPageA
PropertySheet
CreateStatusWindow
ImageList_AddMasked
ShowHideMenuCtl
CreateUpDownControl
GetMUILanguage
ImageList_BeginDrag
InitCommonControlsEx
ImageList_Replace
ImageList_Write
ImageList_GetFlags
ImageList_DrawEx
ImageList_Duplicate
ImageList_GetImageRect
MenuHelp
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_AddIcon
ImageList_GetIconSize
DestroyPropertySheetPage
ImageList_SetFlags
FlatSB_SetScrollPos
CreatePropertySheetPage
LBItemFromPt
ImageList_SetDragCursorImage
DrawStatusText
FlatSB_ShowScrollBar
UninitializeFlatSB
ImageList_DragLeave
ImageList_Destroy
ImageList_LoadImage
ImageList_Copy
FlatSB_GetScrollRange
InitMUILanguage
ImageList_Read
InitializeFlatSB
MakeDragList
ImageList_LoadImageA
ImageList_DragMove
ImageList_LoadImageW
ImageList_SetBkColor
FlatSB_SetScrollProp
ImageList_GetIcon
FlatSB_GetScrollPos
InitCommonControls
PropertySheetW
FlatSB_GetScrollInfo
PropertySheetA
FlatSB_EnableScrollBar
ImageList_DragEnter
DrawInsert
ImageList_Merge
ImageList_Create

gdi32

SetBkColor
CreateFontIndirectW
CreateMetaFileA
GdiRealizationInfo
GetDeviceCaps
GetStockObject
SetViewportExtEx
PolylineTo
GetLogColorSpaceW
EngQueryEMFInfo
GetCurrentObject
GdiGetPageCount
SetPixelFormat
SetBitmapDimensionEx
QueryFontAssocStatus
GetRegionData
SetLayout
PlgBlt
CreatePen
GetEUDCTimeStampExW
SetWorldTransform
GetTextAlign
GdiReleaseLocalDC
GetMiterLimit
GetGlyphIndicesA
SetPaletteEntries
GdiDllInitialize
RealizePalette
GetCharWidthI
CreateCompatibleDC
SetMetaFileBitsEx
EngComputeGlyphSet
HT_Get8BPPFormatPalette
GetNearestColor
GetCharABCWidthsW
GetTextFaceW
GetTextExtentExPointA
RectVisible
GetCharacterPlacementW
GetICMProfileW
GetDeviceGammaRamp
SetPixel
SetMiterLimit
SetArcDirection
GdiAddGlsBounds
ChoosePixelFormat
ColorCorrectPalette
SetPolyFillMode
GdiGradientFill
EngUnicodeToMultiByteN
CreateScalableFontResourceW
DeleteObject
FrameRgn
EngBitBlt
DPtoLP
CreateDCW
GdiIsMetaPrintDC
CreateFontIndirectA
SelectBrushLocal
GdiResetDCEMF
StretchDIBits
ScaleWindowExtEx
EngFindResource
FlattenPath
SetColorAdjustment
GdiConvertToDevmodeW
CreateMetaFileW
ResetDCW
GdiAddGlsRecord
cGetTTFFromFOT
GetTransform

Sections

d
Size: 456KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

f
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

d
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata0
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

f
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata1
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

f
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6f860862d345880b6ab4a484ed9ad13

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

5f:8a:8b:c0:b5:b8:df:88:bc:c7:11:b3:fd:a5:59:7dCertificate

Extended Key Usages

Key Usages

5c:23:e1:d3:63:1f:e4:78:a9:ba:91:3a:a6:a3:33:d1:c8:94:3e:38Signer

Signature Validations

Verification

29/09/2022, 18:53 Valid: false

Headers

File Characteristics

Imports

user32

kernel32

comdlg32

oleaut32

winspool.drv

version

ws2_32

comctl32

gdi32

Sections

d Size: 456KB - Virtual size: 460KB

f Size: 9KB - Virtual size: 16KB

d Size: 22KB - Virtual size: 24KB

.rdata0 Size: 40KB - Virtual size: 44KB

f Size: 512B - Virtual size: 4KB

.rdata1 Size: 87KB - Virtual size: 88KB

f Size: 10KB - Virtual size: 12KB

.rsrc Size: 62KB - Virtual size: 62KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

5f:8a:8b:c0:b5:b8:df:88:bc:c7:11:b3:fd:a5:59:7d
Certificate

5c:23:e1:d3:63:1f:e4:78:a9:ba:91:3a:a6:a3:33:d1:c8:94:3e:38
Signer

29/09/2022, 18:53
Valid: false

d
Size: 456KB - Virtual size: 460KB

f
Size: 9KB - Virtual size: 16KB

d
Size: 22KB - Virtual size: 24KB

.rdata0
Size: 40KB - Virtual size: 44KB

f
Size: 512B - Virtual size: 4KB

.rdata1
Size: 87KB - Virtual size: 88KB

f
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 62KB - Virtual size: 62KB