b1309885ddffae1d762c323df65318a46ea76b836dfb9c2878334a3f28eaa269

Sharing

Copy URL

Twitter E-mail

General

Target

b1309885ddffae1d762c323df65318a46ea76b836dfb9c2878334a3f28eaa269
Size

1.2MB
MD5

769ee0a7eab155fc71ede69dd47c8d20
SHA1

e1d99a26d1670f8468a0f0e3800c34101cd32e4c
SHA256

b1309885ddffae1d762c323df65318a46ea76b836dfb9c2878334a3f28eaa269
SHA512

bb0aeab772ef326c75f6c4915c0c6b74aeff3d9b3ea3745fcfc8104da767d1c22f820e7f2316c85f2baaadb7cb9564bf2b8d58a426eb60d25d445b4228e33787
SSDEEP

24576:NfykOAeq0+Zi9xDk50ivwLsEiB3U7l6axoDcHKGWb8Bklz1UXMRJ:Y+fHK1oDcHKbVTkMT

Score

N/A

Malware Config

Signatures

Files

b1309885ddffae1d762c323df65318a46ea76b836dfb9c2878334a3f28eaa269
.dll windows x86

d826e530e1f30a6333f5525a82472bc9

Code Sign

34:e0:ac:74:aa:99:95:dc:01:1d:cf:80:28:03:1d:90
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

21-07-2014 00:00

Not After

21-07-2015 23:59

Subject

CN=Sambamedia S.l.,O=Sambamedia S.l.,L=Adeje,ST=Santa Cruz de Tenerife,C=ES

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:a7:1d:6f:ba:8f:3b:2c:11:4f:79:20:67:5a:f3:3d:1e:ea:fb:3f
Signer

Actual PE Digest

09:a7:1d:6f:ba:8f:3b:2c:11:4f:79:20:67:5a:f3:3d:1e:ea:fb:3f

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Sambamedia S.l.,O=Sambamedia S.l.,L=Adeje,ST=Santa Cruz de Tenerife,C=ES

29-09-2022 18:51
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetProcessHeap
CreateFileA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
HeapSize
HeapAlloc
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetStartupInfoA
SetHandleCount
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
GetSystemInfo
VirtualAlloc
GetModuleFileNameA
RaiseException
ExitProcess
Sleep
RtlUnwind
IsBadReadPtr
HeapValidate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
LoadLibraryA
GlobalFindAtomW
GetVersionExA
lstrlenA
GetAtomNameW
GlobalGetAtomNameW
GetModuleHandleA
CompareStringW
GlobalFlags
InterlockedIncrement
LoadLibraryW
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
InterlockedDecrement
GetCurrentProcessId
GlobalAddAtomW
SetEvent
GetLastError
SetLastError
GlobalFree
GetTempPathW
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
WideCharToMultiByte
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
GetLocaleInfoW
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
CopyFileW
GetCommandLineA
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetTempFileNameW
OpenEventA

user32

DestroyWindow
GetDlgItem
GetSystemMetrics
DestroyMenu
LoadAcceleratorsW
GetSysColor
LoadIconW
LoadCursorW
GetForegroundWindow
SetForegroundWindow
GetTopWindow
GetCapture
SetActiveWindow
GetActiveWindow
ShowOwnedPopups
IsWindowVisible
InvalidateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
ScreenToClient
MapWindowPoints
GetClientRect
BringWindowToTop
RegisterWindowMessageW
IsIconic
GetPropW
GetWindowTextW
SetWindowTextW
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
UnregisterClassW
LoadMenuW
ModifyMenuW
InsertMenuItemW
GetMenuItemInfoW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
GrayStringW
DrawTextExW
DrawTextW
FillRect
GetSysColorBrush
UnhookWindowsHookEx
MessageBoxW
GetWindowLongW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
SetCursor
GetKeyState
CallNextHookEx
PeekMessageW
SetWindowsHookExW
ValidateRect
LoadStringW
PostQuitMessage
DispatchMessageW
GetMenuCheckMarkDimensions
LoadBitmapW
SetMenuItemBitmaps
GetFocus
TabbedTextOutW
PostMessageW
SendMessageW
IsWindow
IsMenu
GetMenuItemCount
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongW
GetMessagePos
GetMessageTime
GetMenu
SetMenu
DefWindowProcW
RemovePropW
CallWindowProcW
InflateRect
PtInRect
GetMenuItemID
GetMenuState
GetSubMenu
SetPropW
GetClassLongW
TrackPopupMenu
WinHelpW
EndDeferWindowPos
CopyRect
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
ShowWindow
SetRectEmpty
ReleaseCapture
GetClipboardFormatNameA
GetClipboardFormatNameW
UnpackDDElParam
TranslateAcceleratorW
ReuseDDElParam
SystemParametersInfoW
GetDesktopWindow
BeginDeferWindowPos

gdi32

CreateFontIndirectW
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
PtVisible
RectVisible
BitBlt
GetPixel
TextOutW
CreatePatternBrush
Escape
DeleteObject
DeleteDC
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreateSolidBrush
GetObjectType
GetStockObject
GetObjectW
CreateBitmap
ExtTextOutW
GetDeviceCaps
GetTextExtentPoint32W

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

OpenThreadToken
SetThreadToken
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RevertToSelf

shell32

DragFinish
DragQueryFileW
ShellExecuteExW

shlwapi

PathFindExtensionW
PathFindFileNameW

ole32

StringFromCLSID
CoTaskMemFree

oleaut32

VariantChangeType
VariantClear
VariantInit

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

CPlApplet

Sections

.text
Size: 425KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d826e530e1f30a6333f5525a82472bc9

Code Sign

34:e0:ac:74:aa:99:95:dc:01:1d:cf:80:28:03:1d:90Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

09:a7:1d:6f:ba:8f:3b:2c:11:4f:79:20:67:5a:f3:3d:1e:ea:fb:3fSigner

Signature Validations

Verification

29-09-2022 18:51 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

oleacc

Exports

Exports

Sections

.text Size: 425KB - Virtual size: 424KB

.rdata Size: 121KB - Virtual size: 120KB

.data Size: 10KB - Virtual size: 27KB

.rsrc Size: 1024B - Virtual size: 668B

.reloc Size: 65KB - Virtual size: 65KB

34:e0:ac:74:aa:99:95:dc:01:1d:cf:80:28:03:1d:90
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

09:a7:1d:6f:ba:8f:3b:2c:11:4f:79:20:67:5a:f3:3d:1e:ea:fb:3f
Signer

29-09-2022 18:51
Valid: false

.text
Size: 425KB - Virtual size: 424KB

.rdata
Size: 121KB - Virtual size: 120KB

.data
Size: 10KB - Virtual size: 27KB

.rsrc
Size: 1024B - Virtual size: 668B

.reloc
Size: 65KB - Virtual size: 65KB