ddac97a57f3aab6d916a061337bdd80a399938b0589588c66f3f6a7ed46d57c8

Sharing

Copy URL Twitter E-mail

General

Target

ddac97a57f3aab6d916a061337bdd80a399938b0589588c66f3f6a7ed46d57c8
Size

207KB
MD5

680ec03d7f2a35a2742be533508bb581
SHA1

c6e65aabcac9562c7da971878ed81910e60edf55
SHA256

ddac97a57f3aab6d916a061337bdd80a399938b0589588c66f3f6a7ed46d57c8
SHA512

267f4bc07926ea205c32ba3a62f75c479ac160feaa30deab45c5a9ce19dddd7e1b1023291ff8ae59bca16643ac007bad199217ec7eda69bec5ba39b7a75e371c
SSDEEP

3072:9TPVrG1SX8OVmt0CAI3DQt4YOUdA96A7fhSF/DJCHMoDaC8qfIMADP:5tR8rtIYQt3dAb7IF/DJCHTDb8qlG

Score

N/A

Malware Config

Signatures

Files

ddac97a57f3aab6d916a061337bdd80a399938b0589588c66f3f6a7ed46d57c8
.exe windows x86

3794aaf75342c055b63f3bdc0332e60b

Code Sign

01
Certificate

Issuer

CN=Valentine is here,OU=LOVE YOU,O=YOU ARE HERE,L=LOVE,ST=ADA,C=FF

Not Before

07/02/2014, 14:36

Not After

07/02/2016, 14:36

Subject

CN=AAAA,OU=LLL,O=DRUNK IN THE NIGHT ALONE,L=AHMED,ST=ASK ME,C=LO

ed:69:e6:1d:c2:1a:96:eb:cd:86:51:87:31:b9:f9:97:92:55:1b:6e
Signer

Actual PE Digest

ed:69:e6:1d:c2:1a:96:eb:cd:86:51:87:31:b9:f9:97:92:55:1b:6e

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=AAAA,OU=LLL,O=DRUNK IN THE NIGHT ALONE,L=AHMED,ST=ASK ME,C=LO

03/10/2022, 12:43
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
exit
fopen
fread
free
fseek
fwrite
printf
putchar
signal
vfprintf

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/61
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/73
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/87
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 512B - Virtual size: 271B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/123
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/134
Size: 169KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CBCnMEHu
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3794aaf75342c055b63f3bdc0332e60b

Code Sign

01Certificate

ed:69:e6:1d:c2:1a:96:eb:cd:86:51:87:31:b9:f9:97:92:55:1b:6eSigner

Signature Validations

Verification

03/10/2022, 12:43 Valid: false

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 144B

.rdata Size: 1024B - Virtual size: 764B

/4 Size: 512B - Virtual size: 228B

.bss Size: - Virtual size: 22KB

.idata Size: 1024B - Virtual size: 972B

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

/14 Size: 512B - Virtual size: 224B

/29 Size: 1024B - Virtual size: 904B

/45 Size: 1KB - Virtual size: 1KB

/61 Size: 10KB - Virtual size: 9KB

/73 Size: 2KB - Virtual size: 2KB

/87 Size: 2KB - Virtual size: 1KB

/99 Size: 1024B - Virtual size: 964B

/112 Size: 512B - Virtual size: 271B

/123 Size: 3KB - Virtual size: 2KB

/134 Size: 169KB - Virtual size: 173KB

CBCnMEHu Size: 512B - Virtual size: 3KB

01
Certificate

ed:69:e6:1d:c2:1a:96:eb:cd:86:51:87:31:b9:f9:97:92:55:1b:6e
Signer

03/10/2022, 12:43
Valid: false

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 144B

.rdata
Size: 1024B - Virtual size: 764B

/4
Size: 512B - Virtual size: 228B

.bss
Size: - Virtual size: 22KB

.idata
Size: 1024B - Virtual size: 972B

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

/14
Size: 512B - Virtual size: 224B

/29
Size: 1024B - Virtual size: 904B

/45
Size: 1KB - Virtual size: 1KB

/61
Size: 10KB - Virtual size: 9KB

/73
Size: 2KB - Virtual size: 2KB

/87
Size: 2KB - Virtual size: 1KB

/99
Size: 1024B - Virtual size: 964B

/112
Size: 512B - Virtual size: 271B

/123
Size: 3KB - Virtual size: 2KB

/134
Size: 169KB - Virtual size: 173KB

CBCnMEHu
Size: 512B - Virtual size: 3KB