0ef03fc1cd2fcdc9098ed96f736c8f9fe885659e545db76e798165dc713ea417

Sharing

Copy URL Twitter E-mail

General

Target

0ef03fc1cd2fcdc9098ed96f736c8f9fe885659e545db76e798165dc713ea417
Size

211KB
MD5

6f4b08b7cfa8e0971ba99227f2bf52f0
SHA1

52376ef61b686309fd1cfa8e22fa6ed5e0b30233
SHA256

0ef03fc1cd2fcdc9098ed96f736c8f9fe885659e545db76e798165dc713ea417
SHA512

a1a48ec2eede4b9d1ca7109cead8fff08ea284703b4eb341837b7b5c0aaa4e6a7d990bb9b3b020419f0b849a5fa255ea028f3c8e5c68eec3080498ea6dbd3d7e
SSDEEP

3072:GoQZp2yMCluKVAYO5RsNT4/hfRZkYyFI+qS3P1LxHxiUTJ/vBcj:byMHbfRGYaIM/1LxRiGS

Score

N/A

Malware Config

Signatures

Files

0ef03fc1cd2fcdc9098ed96f736c8f9fe885659e545db76e798165dc713ea417
.exe windows x86

183ba05ec82764d6a0d71b097952b586

Code Sign

1a:03:cc:d1:77:63:fb:9d:42:11:c4:7d:11:b3:b9:60
Certificate

Issuer

CN=fffff

Not Before

31/05/2013, 19:26

Not After

31/12/2039, 23:59

Subject

CN=fffff

Extended Key Usages

ExtKeyUsageCodeSigning

f7:05:68:1d:df:72:8d:ab:b9:d4:5a:fd:4e:0d:67:da:55:f8:0f:a0
Signer

Actual PE Digest

f7:05:68:1d:df:72:8d:ab:b9:d4:5a:fd:4e:0d:67:da:55:f8:0f:a0

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=fffff

29/09/2022, 18:51
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
VirtualAlloc
CreateFileW

user32

LoadIconW

advapi32

RegOpenKeyExA

msvcrt

memcpy
_XcptFilter
__argc
__argv
__dllonexit
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_onexit
exit
strncpy
toupper
wcscmp

Sections

.text
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

183ba05ec82764d6a0d71b097952b586

Code Sign

1a:03:cc:d1:77:63:fb:9d:42:11:c4:7d:11:b3:b9:60Certificate

Extended Key Usages

f7:05:68:1d:df:72:8d:ab:b9:d4:5a:fd:4e:0d:67:da:55:f8:0f:a0Signer

Signature Validations

Verification

29/09/2022, 18:51 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 195KB - Virtual size: 195KB

.text2 Size: 2KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 790B

.data Size: 512B - Virtual size: 432B

.text4 Size: 2KB - Virtual size: 1KB

.text3 Size: 2KB - Virtual size: 1KB

1a:03:cc:d1:77:63:fb:9d:42:11:c4:7d:11:b3:b9:60
Certificate

f7:05:68:1d:df:72:8d:ab:b9:d4:5a:fd:4e:0d:67:da:55:f8:0f:a0
Signer

29/09/2022, 18:51
Valid: false

.text
Size: 195KB - Virtual size: 195KB

.text2
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 790B

.data
Size: 512B - Virtual size: 432B

.text4
Size: 2KB - Virtual size: 1KB

.text3
Size: 2KB - Virtual size: 1KB