0231f45ad4dc8147b5a63e1b82be6d72cef56ef6fa7b5c0276a239f1497831bc

Sharing

Copy URL Twitter E-mail

General

Target

0231f45ad4dc8147b5a63e1b82be6d72cef56ef6fa7b5c0276a239f1497831bc
Size

130KB
MD5

417e5d438e6bfdf0b7c891da251d59a0
SHA1

b5ed1236a4a88f26dc5790960232d92199096e17
SHA256

0231f45ad4dc8147b5a63e1b82be6d72cef56ef6fa7b5c0276a239f1497831bc
SHA512

50fa53d5ca1bf76571c29fb01e5b20acff4efa62fc0d5d72b3bf341afcde588706e128290bcf895c2e93ae8c8993f07ad9d94c0b2edddf2d9e5b37d05df03aa4
SSDEEP

3072:D99B3B9oS6KmcZ/3z/tRkqq4M8M7HoiC3q9XralBry4:13BVN3RSsqB0y4

Score

N/A

Malware Config

Signatures

Files

0231f45ad4dc8147b5a63e1b82be6d72cef56ef6fa7b5c0276a239f1497831bc
.exe windows x86

59add57608bc3b65703e3c499bca59e9

Code Sign

d3:6c:24:77:9d:29:44:f4
Certificate

Issuer

CN=Honest Achmed's Root CA,OU=Root CA,O=Honest Achmed's Used Cars and Certificates.,L=Tehran,ST=Tehran,C=IR,1.2.840.113549.1.9.1=#0c0f61646d696e40736d7470732e6e6574

Not Before

22/02/2015, 01:31

Not After

22/02/2020, 01:31

Subject

CN=Honest Achmed's Root CA,OU=Root CA,O=Honest Achmed's Used Cars and Certificates.,L=Tehran,ST=Tehran,C=IR,1.2.840.113549.1.9.1=#0c0f61646d696e40736d7470732e6e6574

a5:b5:99:10:be:ad:7d:60:a8:24:38:6b:dd:09:9a:63:0d:3d:26:71
Signer

Actual PE Digest

a5:b5:99:10:be:ad:7d:60:a8:24:38:6b:dd:09:9a:63:0d:3d:26:71

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Honest Achmed's Root CA,OU=Root CA,O=Honest Achmed's Used Cars and Certificates.,L=Tehran,ST=Tehran,C=IR,1.2.840.113549.1.9.1=#0c0f61646d696e40736d7470732e6e6574

29/09/2022, 18:53
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetStartupInfoA
CreatePipe
ReadFile
TerminateProcess
GetProcAddress
GetModuleFileNameA
GetShortPathNameA
MultiByteToWideChar
GetLastError
WideCharToMultiByte
CloseHandle
CreateThread
WriteFile
Sleep
CreateFileW
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
CreateFileA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
RtlUnwind
ExitProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
HeapFree
RaiseException
HeapAlloc
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
HeapSize
GetModuleHandleA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetEndOfFile

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA

wininet

InternetSetCookieW
InternetOpenW
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
HttpEndRequestA
InternetWriteFile
HttpSendRequestExW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetCrackUrlW
InternetSetOptionW
InternetCloseHandle

ws2_32

WSAStartup
gethostname

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

59add57608bc3b65703e3c499bca59e9

Code Sign

d3:6c:24:77:9d:29:44:f4Certificate

a5:b5:99:10:be:ad:7d:60:a8:24:38:6b:dd:09:9a:63:0d:3d:26:71Signer

Signature Validations

Verification

29/09/2022, 18:53 Valid: false

Headers

File Characteristics

Imports

kernel32

advapi32

wininet

ws2_32

Sections

.text Size: 96KB - Virtual size: 94KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 16KB - Virtual size: 18KB

d3:6c:24:77:9d:29:44:f4
Certificate

a5:b5:99:10:be:ad:7d:60:a8:24:38:6b:dd:09:9a:63:0d:3d:26:71
Signer

29/09/2022, 18:53
Valid: false

.text
Size: 96KB - Virtual size: 94KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 18KB