380958eacd65f27369932b97559c79bb6856ef68e88f9bf56b480830546b5800

Sharing

Copy URL Twitter E-mail

General

Target

380958eacd65f27369932b97559c79bb6856ef68e88f9bf56b480830546b5800
Size

83KB
MD5

06f5ba0ea65a8ba278e9692017306f36
SHA1

90d295b00ba9095f9c8184b267b363b5c6a554a4
SHA256

380958eacd65f27369932b97559c79bb6856ef68e88f9bf56b480830546b5800
SHA512

64b98ce50aaa47af7fa8cb61ef57d979a81f3130b2aed3c1d6f41ae2fbd84e837ff8f56a5f0b78ebfd576d8c18c606f17684ef09c8127ef07d0709bc65a0cdf3
SSDEEP

384:qLQHdJuXeWiJh8tJrkzVM/i8WPmWWZ/fbCD21Lo:sJXeWimd+yi4tbCqL

Score

N/A

Malware Config

Signatures

Files

380958eacd65f27369932b97559c79bb6856ef68e88f9bf56b480830546b5800
.exe windows x86

e9f50fb0ef76f6e87065ee6d7886cd7f

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

67:24:34:0d:db:c7:25:2f:7f:b7:14:b8:12:a5:c0:4d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

27/11/2009, 00:00

Not After

27/11/2011, 23:59

Subject

CN=YNK JAPAN Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=YNK JAPAN Inc,L=\ Nihonbashi Kodenmachou10-6,ST=Chuo-ku,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f8:48:1f:d9:e0:a1:0a:12:29:ad:80:1f:09:e9:13:0a:97:6c:ac:fb
Signer

Actual PE Digest

f8:48:1f:d9:e0:a1:0a:12:29:ad:80:1f:09:e9:13:0a:97:6c:ac:fb

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=YNK JAPAN Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=YNK JAPAN Inc,L=\ Nihonbashi Kodenmachou10-6,ST=Chuo-ku,C=JP

03/10/2022, 12:43
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitNamedPipeA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemDirectoryA
DeleteFileA
VirtualFree
ReadFile
VirtualAlloc
GetFileSize
Sleep
GetTempFileNameA
GetTempPathA
SetFilePointer
CreateProcessA
WinExec
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetModuleHandleA
VirtualFreeEx
GetProcAddress
WriteProcessMemory
VirtualAllocEx
CreateMutexA
DisconnectNamedPipe
PeekNamedPipe
ConnectNamedPipe
CreateNamedPipeA
TerminateThread
OpenMutexA
GetShortPathNameA
CopyFileA
GetWindowsDirectoryA
GetModuleFileNameA
CreateThread
SetFileAttributesA
GetFileAttributesA
GetDriveTypeA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
ExitProcess
WaitForSingleObject
CreateEventA
SetEvent
OpenEventA
GetLastError
CreateFileA
WriteFile
OpenProcess
CloseHandle

user32

GetWindowThreadProcessId
PostMessageA
EnumWindows
wsprintfA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA

msvcrt

_stricmp

Sections

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nrsrc
Size: 71KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e9f50fb0ef76f6e87065ee6d7886cd7f

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bfCertificate

67:24:34:0d:db:c7:25:2f:7f:b7:14:b8:12:a5:c0:4dCertificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

f8:48:1f:d9:e0:a1:0a:12:29:ad:80:1f:09:e9:13:0a:97:6c:ac:fbSigner

Signature Validations

Verification

03/10/2022, 12:43 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

msvcrt

Sections

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 1KB - Virtual size: 1KB

.nrsrc Size: 71KB - Virtual size: 128KB

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

67:24:34:0d:db:c7:25:2f:7f:b7:14:b8:12:a5:c0:4d
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

f8:48:1f:d9:e0:a1:0a:12:29:ad:80:1f:09:e9:13:0a:97:6c:ac:fb
Signer

03/10/2022, 12:43
Valid: false

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 1KB - Virtual size: 1KB

.nrsrc
Size: 71KB - Virtual size: 128KB