19c5899b04ec8cb6e615815f958c1712e64561de85a349a588f9d1c88c6ef850

Sharing

Copy URL Twitter E-mail

General

Target

19c5899b04ec8cb6e615815f958c1712e64561de85a349a588f9d1c88c6ef850
Size

633KB
MD5

72b405d4ae98db2fd74bae558f6bad50
SHA1

e54200bf42c5217747dedf8d68d710ba4ab11d76
SHA256

19c5899b04ec8cb6e615815f958c1712e64561de85a349a588f9d1c88c6ef850
SHA512

5daaa8a1e5f4fb9ae7cf0ed53c1114307f7baf5b255067745981ae795c7264a556a0f3bd49b7ef343634653330f7d2469e91fff0d1cd20611f87585996922918
SSDEEP

12288:4Zo6dATJoDh1Beouad2MkTIzvdHsFuec/ktSggPq:U6TJorBjuqFwc8tSggPq

Score

N/A

Malware Config

Signatures

Files

19c5899b04ec8cb6e615815f958c1712e64561de85a349a588f9d1c88c6ef850
.exe windows x86

d14c6e2ccaa69f8587156ba59228a9ea

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:b2:90:d0:c3:90:ad:32:7d:54:f1:21:3b:6d:41:d0
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07/08/2015, 00:00

Not After

06/08/2016, 23:59

Subject

CN=OOO \"K-SERVIS\",O=OOO \"K-SERVIS\",POSTALCODE=199178,STREET=d. 54 korp. 4\, prospekt Maly Vo,L=Saint-Petersburg,ST=Saint-Petersburg,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

34:16:91:41:7e:9c:8c:4b:cc:59:44:ad:d8:ff:42:0a:0f:cc:44:e1
Signer

Actual PE Digest

34:16:91:41:7e:9c:8c:4b:cc:59:44:ad:d8:ff:42:0a:0f:cc:44:e1

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=OOO \"K-SERVIS\",O=OOO \"K-SERVIS\",POSTALCODE=199178,STREET=d. 54 korp. 4\, prospekt Maly Vo,L=Saint-Petersburg,ST=Saint-Petersburg,C=RU

29/09/2022, 18:51
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
LocalLock
GetModuleHandleA
DeleteFileA
VirtualAlloc
GetLastError
VirtualFree
FindClose
ExitProcess
VirtualProtect
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ResetEvent
Sleep
CloseHandle
TerminateThread
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
GetProcAddress
TerminateProcess
GetCurrentProcess
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
SetFilePointer
SetEndOfFile
ReadFile
HeapSize
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetSystemInfo

user32

SetWindowTextA
LoadBitmapA
ShowWindow
PostMessageA
LoadCursorA
GetWindowTextA

gdi32

GetPixel

advapi32

RegEnumKeyA

winscard

SCardGetCardTypeProviderNameW

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 400KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d14c6e2ccaa69f8587156ba59228a9ea

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

27:b2:90:d0:c3:90:ad:32:7d:54:f1:21:3b:6d:41:d0Certificate

Extended Key Usages

Key Usages

34:16:91:41:7e:9c:8c:4b:cc:59:44:ad:d8:ff:42:0a:0f:cc:44:e1Signer

Signature Validations

Verification

29/09/2022, 18:51 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

winscard

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 140KB - Virtual size: 137KB

.data Size: 400KB - Virtual size: 412KB

.rsrc Size: 52KB - Virtual size: 52KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

27:b2:90:d0:c3:90:ad:32:7d:54:f1:21:3b:6d:41:d0
Certificate

34:16:91:41:7e:9c:8c:4b:cc:59:44:ad:d8:ff:42:0a:0f:cc:44:e1
Signer

29/09/2022, 18:51
Valid: false

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 140KB - Virtual size: 137KB

.data
Size: 400KB - Virtual size: 412KB

.rsrc
Size: 52KB - Virtual size: 52KB