e33a83f3dbc6d86a6f6b6367492dcfbde8ba48394d1c6e9350f84283d77bfc00

Sharing

Copy URL Twitter E-mail

General

Target

e33a83f3dbc6d86a6f6b6367492dcfbde8ba48394d1c6e9350f84283d77bfc00
Size

792KB
MD5

0425787626acfd330e9ad63570eaa660
SHA1

66fea45bc67fbea2c45a0b2c9cf85194e8d9a710
SHA256

e33a83f3dbc6d86a6f6b6367492dcfbde8ba48394d1c6e9350f84283d77bfc00
SHA512

828caae0196bb011a3a48047ef0f849e13fa96ec6a3963c909070f699ef04f5a2277ad0b0ee6387b8184f87dc061a85c84acba55ba760f7b1e89d62d6300b5fd
SSDEEP

24576:201Ib+vvD9FcLF6kC+YtMnvBbZe7McM+ZO:TIsDTsF6Whc/

Score

N/A

Malware Config

Signatures

Files

e33a83f3dbc6d86a6f6b6367492dcfbde8ba48394d1c6e9350f84283d77bfc00
.exe windows x86

bd5b4eb4f60d045086bf87c0749910f8

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

40:1a:e9:f3:e4:75:b3:00:43:73:36:e8:4e:31:9a:7f
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/01/2014, 00:00

Not After

23/01/2015, 23:59

Subject

CN=ICS Setup,O=ICS Setup,POSTALCODE=65113,STREET=Lilienblum 28,L=Tel-Aviv,ST=Gush dan,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

15:3e:88:93:00:c7:2a:13:e0:da:96:3a:c8:32:21:f1:e2:6b:51:57
Signer

Actual PE Digest

15:3e:88:93:00:c7:2a:13:e0:da:96:3a:c8:32:21:f1:e2:6b:51:57

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ICS Setup,O=ICS Setup,POSTALCODE=65113,STREET=Lilienblum 28,L=Tel-Aviv,ST=Gush dan,C=IL

29/09/2022, 19:04
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetMalloc
ShellExecuteExA

kernel32

GetCommandLineA
FindClose
GetDiskFreeSpaceA
CreateDirectoryA
SetFilePointer
GetCurrentDirectoryA
Sleep
GetModuleFileNameA
AllocConsole
GetStdHandle
SetConsoleTitleA
ReleaseMutex
WaitForSingleObject
CloseHandle
CreateMutexA
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
GetLastError
LoadLibraryExA
WriteFile
GetExitCodeProcess
GetProcAddress
FreeLibrary
LoadLibraryA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA

user32

RegisterClassExA
DestroyIcon
PostQuitMessage
DefWindowProcA
GetUpdateRect
BeginPaint
EndPaint
GetClientRect
GetSysColorBrush
LoadCursorA
GetDlgItemTextA
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
GetParent
SendMessageA
MessageBoxA
CreateWindowExA
UpdateWindow
UnregisterClassA
LoadIconA
GetClassNameA
EnumWindows
IsWindow
DestroyWindow
GetWindowTextA
ShowWindowAsync
CreateDialogParamA
DialogBoxParamA
InvalidateRect
SetForegroundWindow
EndDialog
GetWindowRect
GetDesktopWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
FillRect
SetWindowPos
SetWindowTextA

ole32

CoCreateInstance
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize

gdi32

DeleteObject
SelectPalette
CreatePalette
BitBlt
CreateCompatibleDC
RealizePalette
GetTextExtentPoint32A
SelectObject
CreateFontIndirectA
SetBkMode
RemoveFontResourceA
AddFontResourceA
CreateSolidBrush
DeleteDC
ExtTextOutA
SetTextColor
CreateCompatibleBitmap

msvcrt

_stat
__p__fmode
__set_app_type
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
floor
remove
atoi
atof
memmove
__p__commode
_ftol
fseek
fread
exit
ftell
_vsnprintf
_snprintf
sprintf
fopen
fclose
fwrite
malloc
free
_except_handler3
_controlfp

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd5b4eb4f60d045086bf87c0749910f8

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

40:1a:e9:f3:e4:75:b3:00:43:73:36:e8:4e:31:9a:7fCertificate

Extended Key Usages

Key Usages

15:3e:88:93:00:c7:2a:13:e0:da:96:3a:c8:32:21:f1:e2:6b:51:57Signer

Signature Validations

Verification

29/09/2022, 19:04 Valid: false

Headers

File Characteristics

Imports

comctl32

shell32

kernel32

advapi32

user32

ole32

gdi32

msvcrt

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 6KB - Virtual size: 11KB

.rsrc Size: 16KB - Virtual size: 15KB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

40:1a:e9:f3:e4:75:b3:00:43:73:36:e8:4e:31:9a:7f
Certificate

15:3e:88:93:00:c7:2a:13:e0:da:96:3a:c8:32:21:f1:e2:6b:51:57
Signer

29/09/2022, 19:04
Valid: false

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 6KB - Virtual size: 11KB

.rsrc
Size: 16KB - Virtual size: 15KB