e9f33115063695f76b9c97b83caf89583eb3ec0dae2bba606723d743a42a203d

Sharing

Copy URL Twitter E-mail

General

Target

e9f33115063695f76b9c97b83caf89583eb3ec0dae2bba606723d743a42a203d
Size

242KB
MD5

48063a7332c92e08a041d782b383f710
SHA1

ef545c4d5be9516ea6a0326184c4003a65aaed8c
SHA256

e9f33115063695f76b9c97b83caf89583eb3ec0dae2bba606723d743a42a203d
SHA512

16996c279c099c0c7d9bef1c5090fdbdc2d08d36f755b0263c0a1890b71618731c8ea916a147b0519618881a3db80ad137dad751835eb231e4d0985bfdd4f6c9
SSDEEP

6144:aGxQ0xDw4ESJdDo/CT5pnHNh+IMeA2OW3:Tu+dXHHNh+IUjW3

Score

N/A

Malware Config

Signatures

Files

e9f33115063695f76b9c97b83caf89583eb3ec0dae2bba606723d743a42a203d
.exe windows x86

a34f5007d6bfb3237846cb0bd161ede9

Code Sign

01
Certificate

Issuer

CN=HERE,OU=YOU,O=LLLLOVE,L=DASTA,ST=RRAS,C=TT

Not Before

11/03/2014, 20:18

Not After

10/03/2016, 20:18

Subject

CN=I LOVE YOU,OU=THANK YOU,O=SHARE YOUR LOVE,L=LOVE IS HERE,ST=FAST,C=DD

85:99:61:ab:f9:18:e8:68:5c:43:30:e8:e1:14:f8:6a:c3:61:c8:63
Signer

Actual PE Digest

85:99:61:ab:f9:18:e8:68:5c:43:30:e8:e1:14:f8:6a:c3:61:c8:63

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=I LOVE YOU,OU=THANK YOU,O=SHARE YOUR LOVE,L=LOVE IS HERE,ST=FAST,C=DD

03/10/2022, 12:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetLastError
MoveFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
CloseHandle
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
WriteConsoleA

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a34f5007d6bfb3237846cb0bd161ede9

Code Sign

01Certificate

85:99:61:ab:f9:18:e8:68:5c:43:30:e8:e1:14:f8:6a:c3:61:c8:63Signer

Signature Validations

Verification

03/10/2022, 12:52 Valid: false

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 192KB - Virtual size: 189KB

01
Certificate

85:99:61:ab:f9:18:e8:68:5c:43:30:e8:e1:14:f8:6a:c3:61:c8:63
Signer

03/10/2022, 12:52
Valid: false

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 192KB - Virtual size: 189KB