77287d96fa3c0bcff5add36fe245c13e71d4bc759e5f62b6159f3a923e339a56

Sharing

Copy URL Twitter E-mail

General

Target

77287d96fa3c0bcff5add36fe245c13e71d4bc759e5f62b6159f3a923e339a56
Size

329KB
MD5

66fc4a65a48570501b2dc43bf3e12b20
SHA1

b401f113c0e6c53e849d47966f401d90f526259f
SHA256

77287d96fa3c0bcff5add36fe245c13e71d4bc759e5f62b6159f3a923e339a56
SHA512

96dc9e3d61694ea303df5bf99b73154cee4d52c799452f3012eebfe65565be280f228cd54040ef7d155d74df09152193f33dcfd8c23f17602a2cf4e9aab84c8a
SSDEEP

6144:S6h4Ceeeeeeleeeeeeeeeeeee6eeeeeeeeeeeeeeeeeee2eeebeeeeeeeeeeeeen:SC4k+GVhQxBgqVBGPjTFWNa

Score

N/A

Malware Config

Signatures

Files

77287d96fa3c0bcff5add36fe245c13e71d4bc759e5f62b6159f3a923e339a56
.exe windows x86

df557c95dbcdd2e5d2ff950b4e3ab191

Code Sign

39:ec:3d:9a:40:fd:54:64:b0:6e:f6:79:b4:6c:28:de
Certificate

Issuer

CN=BzokDEUZbtuuSIvHtWkqhmCYuCmKikslQCfMCxQcrQVHNXRk zuDLbBue x YEmoePHlDIfEzgeHHXyutkUap DsceBpyEjuvyDRnKJfjneYVASIIlNQuliFlIEmCMTPizlSfoGFEbPnYTLgBtGp e

Not Before

02/07/2012, 12:48

Not After

31/12/2039, 23:59

Subject

CN=BzokDEUZbtuuSIvHtWkqhmCYuCmKikslQCfMCxQcrQVHNXRk zuDLbBue x YEmoePHlDIfEzgeHHXyutkUap DsceBpyEjuvyDRnKJfjneYVASIIlNQuliFlIEmCMTPizlSfoGFEbPnYTLgBtGp e

Extended Key Usages

ExtKeyUsageCodeSigning

30:d4:3d:4b:cf:45:37:9c:8f:8f:b5:9a:27:ef:8a:9b:16:d7:3c:01
Signer

Actual PE Digest

30:d4:3d:4b:cf:45:37:9c:8f:8f:b5:9a:27:ef:8a:9b:16:d7:3c:01

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=BzokDEUZbtuuSIvHtWkqhmCYuCmKikslQCfMCxQcrQVHNXRk zuDLbBue x YEmoePHlDIfEzgeHHXyutkUap DsceBpyEjuvyDRnKJfjneYVASIIlNQuliFlIEmCMTPizlSfoGFEbPnYTLgBtGp e

29/09/2022, 18:51
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetWindowsDirectoryW
LoadLibraryA
GetProcAddress
lstrcatW
CreateFileW
GetCommProperties
SetHandleCount
SetThreadExecutionState
IsBadWritePtr
EraseTape
GetConsoleAliasExesW
IsBadReadPtr
GetDiskFreeSpaceW
CreateJobObjectW
lstrcpyA
UnlockFile
SetConsoleActiveScreenBuffer
ScrollConsoleScreenBufferW
GlobalMemoryStatus
SetHandleInformation
BuildCommDCBAndTimeoutsW
SizeofResource
Module32FirstW
SetConsoleCursorInfo
HeapFree
GetHandleInformation
PurgeComm
CreateMutexA
GetPrivateProfileStructW
LockFile
LCMapStringA
SetCalendarInfoW
CancelDeviceWakeupRequest
MoveFileWithProgressW
WritePrivateProfileSectionW
GlobalAddAtomA
BackupRead
GlobalDeleteAtom
AssignProcessToJobObject
GetConsoleAliasesLengthA
FoldStringW
FreeLibraryAndExitThread
GetSystemPowerStatus
GetOEMCP
GetCurrentThread
BuildCommDCBAndTimeoutsA
PeekNamedPipe
IsBadStringPtrA
GenerateConsoleCtrlEvent
GetThreadLocale
GetDriveTypeW
SetFileAttributesW
ReadProcessMemory
EndUpdateResourceA
SetCommBreak
GetTempPathA
ClearCommError
GetComputerNameW
SetConsoleTitleA
WriteProfileStringW
SetFilePointerEx
InterlockedCompareExchange
GlobalGetAtomNameA
lstrlenA
OutputDebugStringA
Heap32First
GetCurrentDirectoryW
GlobalAlloc
GetNumberOfConsoleMouseButtons
ReadConsoleOutputA
OpenProcess
GetSystemInfo
PeekConsoleInputA
SetVolumeMountPointA
GetTempFileNameW
SetProcessWorkingSetSize
GlobalHandle
GetLogicalDriveStringsA
SetDefaultCommConfigA
Process32Next
FindNextVolumeMountPointW
IsDebuggerPresent
AllocConsole
GetConsoleScreenBufferInfo
UnmapViewOfFile
Process32NextW
EnumSystemCodePagesA
GetCommandLineA
GetLogicalDriveStringsW
WritePrivateProfileStructW
GetPrivateProfileStringW
GetVolumePathNameW
FindCloseChangeNotification
CreateEventA
GetConsoleTitleW

user32

CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
SetScrollRange
SetScrollPos
ScrollWindow
SendMessageA
BeginPaint
GetSystemMetrics
wsprintfA
EndPaint
PostQuitMessage
DefWindowProcA
DdeQueryStringA
SetCaretPos
ReuseDDElParam
IsChild
SetDeskWallpaper
WaitForInputIdle
OemToCharBuffA
EnumClipboardFormats
MsgWaitForMultipleObjectsEx
DlgDirSelectExW
AppendMenuW
SetPropA
DestroyIcon
TrackMouseEvent
GetMenuItemID
DefWindowProcW
MessageBoxExW
InsertMenuItemW
RemovePropW
IsCharLowerW
InternalGetWindowText
PeekMessageW
ExitWindowsEx
ReplyMessage
CharLowerBuffW
RedrawWindow
EnumDesktopsA
LoadAcceleratorsA
RegisterShellHookWindow
EnableScrollBar
InflateRect
ReleaseCapture
LoadCursorFromFileA
SetLayeredWindowAttributes
MessageBoxExA
ClientToScreen
DdePostAdvise
WINNLSGetEnableStatus
GetScrollBarInfo
EqualRect
InvalidateRect
SendMessageW
SetDlgItemTextW
DeregisterShellHookWindow
IsRectEmpty
EnumThreadWindows
DrawEdge
GetWindowThreadProcessId
CopyIcon
GetCursorPos
GetClassInfoW
GetAltTabInfoA
CheckMenuItem
CreateCursor
SetClipboardViewer
DdeUnaccessData
GetWindowTextA
SetActiveWindow
GetClassNameW
GetAltTabInfo
PeekMessageA
DefFrameProcA
RegisterDeviceNotificationA
GrayStringW
GetKeyboardType
GetWindowTextW
GetWindowDC
GetClassWord
ReleaseDC
GetKeyState
GetScrollPos
TileWindows
SetWindowsHookExW
wsprintfW
IsDialogMessage
SetWindowTextA
IsWindowUnicode
SetClipboardData
GetGUIThreadInfo
DlgDirSelectExA
ModifyMenuW
IsCharAlphaNumericW
SwitchToThisWindow
MapDialogRect
IMPGetIMEA
DdeQueryNextServer
SetMenuDefaultItem
GetDlgCtrlID
DdeConnectList
CopyAcceleratorTableA
GetMenuBarInfo
DdeCreateStringHandleW

gdi32

GetStockObject
TextOutA
SetTextAlign

msvcrt

strlen
memset

advapi32

RegOpenKeyExW

shell32

DragQueryFile
SHIsFileAvailableOffline
DragQueryFileAorW
SHLoadInProc
SHGetFileInfoW
SHBrowseForFolderA
DragQueryFileW
SHGetDesktopFolder
ExtractIconW
SHLoadNonloadedIconOverlayIdentifiers
FindExecutableW
SHGetDataFromIDListA
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
ShellExecuteA
SHEmptyRecycleBinA
ShellExecuteEx
Shell_NotifyIconW
SHGetSettings
SHCreateDirectoryExW
SHGetFolderLocation
SHCreateDirectoryExA
ExtractAssociatedIconW
WOWShellExecute
ShellExecuteExA
SHGetDiskFreeSpaceA
ExtractIconExA
SHFileOperationA
SHInvokePrinterCommandA
DuplicateIcon
SHFileOperationW
SHAddToRecentDocs
Shell_NotifyIcon
SHGetPathFromIDList
ExtractAssociatedIconA
DoEnvironmentSubstA
SHQueryRecycleBinW
DragQueryPoint
ShellAboutA
SHGetFolderPathA
SHBindToParent
SHQueryRecycleBinA
SHGetIconOverlayIndexW
SHGetFileInfo
SHGetInstanceExplorer
ShellHookProc
DragAcceptFiles
SHGetPathFromIDListA
SHBrowseForFolder
SHGetIconOverlayIndexA
ExtractAssociatedIconExA
ExtractIconA
SHFileOperation
ExtractIconExW
SHChangeNotify
SHGetPathFromIDListW

shlwapi

StrRChrW
StrCmpNIA
StrRChrIA
StrCmpNIW
StrRChrIW
StrStrIW
StrChrW
StrChrIW
StrChrA
StrCmpNW
StrRStrIW
StrCmpNA

Sections

.text
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df557c95dbcdd2e5d2ff950b4e3ab191

Code Sign

39:ec:3d:9a:40:fd:54:64:b0:6e:f6:79:b4:6c:28:deCertificate

Extended Key Usages

30:d4:3d:4b:cf:45:37:9c:8f:8f:b5:9a:27:ef:8a:9b:16:d7:3c:01Signer

Signature Validations

Verification

29/09/2022, 18:51 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

shell32

shlwapi

Sections

.text Size: 309KB - Virtual size: 309KB

.data Size: 8KB - Virtual size: 8KB

.data2 Size: 4KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

39:ec:3d:9a:40:fd:54:64:b0:6e:f6:79:b4:6c:28:de
Certificate

30:d4:3d:4b:cf:45:37:9c:8f:8f:b5:9a:27:ef:8a:9b:16:d7:3c:01
Signer

29/09/2022, 18:51
Valid: false

.text
Size: 309KB - Virtual size: 309KB

.data
Size: 8KB - Virtual size: 8KB

.data2
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB