8c7d919d27d0d3d702f44cef090299473226b3294c9b2e05b00df625529e32b3

Sharing

Copy URL Twitter E-mail

General

Target

8c7d919d27d0d3d702f44cef090299473226b3294c9b2e05b00df625529e32b3
Size

874KB
MD5

6c0c760a0f8289d80067cb506ee4a1d0
SHA1

a0baf03e8c2ef61d11c1c331b3b38edf93b27246
SHA256

8c7d919d27d0d3d702f44cef090299473226b3294c9b2e05b00df625529e32b3
SHA512

869cc5e3525ac772fd5b3e2c2e0af12d6c89dafe3fc4bca198da9ed4aa314f237f3eb3f9bab07095866f52b165d05680fa0c9038e9687b4cf781f237d9c23c3e
SSDEEP

12288:v4N3ndc+g3G+bwinu569ln83wUy2XH/yyoTM4qXmW49Izf8RZufRd:v0dc+PSwp6kAg3boTQXF49M8e3

Score

N/A

Malware Config

Signatures

Files

8c7d919d27d0d3d702f44cef090299473226b3294c9b2e05b00df625529e32b3
.exe windows x86

14d2fbc0c1938af64d1eeedbcc6ef15c

Code Sign

31:8a:9e:74:f8:76:e9:a6:ff:96:b0:d6:6f:a0:6b:9d
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/02/2015, 00:00

Not After

04/02/2016, 23:59

Subject

CN=Consortium Group ltd.,O=Consortium Group ltd.,POSTALCODE=00152,STREET=CORNER OF GR.MARLBOROUGH UN GR.GEORGE STR+STREET=3RD FLOOR\, C&h TOWERS,L=ROSEAU,ST=ROSEAU,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8e:cc:db:b5:46:3b:6f:8b:3e:d1:de:c8:f5:57:df:42:08:3e:0f:79
Signer

Actual PE Digest

8e:cc:db:b5:46:3b:6f:8b:3e:d1:de:c8:f5:57:df:42:08:3e:0f:79

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Consortium Group ltd.,O=Consortium Group ltd.,POSTALCODE=00152,STREET=CORNER OF GR.MARLBOROUGH UN GR.GEORGE STR+STREET=3RD FLOOR\, C&h TOWERS,L=ROSEAU,ST=ROSEAU,C=DM

03/10/2022, 12:53
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetDragImage
ImageList_Read
ImageList_Write
ImageList_GetIconSize
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_SetIconSize

kernel32

GetStringTypeExA
FreeResource
InterlockedIncrement
FreeLibrary
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
CreateEventA
CompareStringA
CreateFileMappingA
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetSystemInfo
HeapReAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetTempPathA
VirtualAlloc
ExitProcess
GetCommandLineA
FlushFileBuffers
WriteFile
GetVersion
GetVersionExA
GetProcAddress
GetStartupInfoA
QueryPerformanceCounter
TlsGetValue
CreateFileA
GetSystemTimeAsFileTime
CloseHandle
CreateThread
GetTickCount
GetLastError
CreateDirectoryW
LCMapStringW
SetFilePointer
SetStdHandle
LoadLibraryA

user32

SetRect
GetSystemMetrics
GetCapture
GetClassInfoA
CreateWindowExA
SetPropA
SetMenuItemInfoA
SetMenu
RemovePropA
SetWindowPos
SetWindowPlacement
SetWindowLongA
SetScrollRange
SetScrollInfo
GetClassNameA
GetSystemMenu
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
WindowFromPoint
SetScrollPos

gdi32

SetDIBColorTable
SetEnhMetaFileBits
SetPixel
SetROP2
StretchBlt
SetBrushOrgEx
DeleteObject
CreatePen
CreatePenIndirect
GetClipBox
TextOutW
OffsetWindowOrgEx
DeleteMetaFile
GetLogColorSpaceW
SetAbortProc
SetBkMode
SetBkColor
SelectPalette
DeleteEnhMetaFile
CreateFontIndirectA
UnrealizeObject
ExcludeClipRect

comdlg32

GetOpenFileNameA
GetSaveFileNameA
FindTextW
ChooseFontA
ReplaceTextW

advapi32

RegCreateKeyExA
AllocateAndInitializeSid

shell32

StrStrIA

oleaut32

VarDecRound
VariantInit
VarRound
VarNumFromParseNum
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayPutElement
VariantChangeType
SafeArrayCreate

Sections

.text
Size: 612KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ABSS
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14d2fbc0c1938af64d1eeedbcc6ef15c

Code Sign

31:8a:9e:74:f8:76:e9:a6:ff:96:b0:d6:6f:a0:6b:9dCertificate

Extended Key Usages

Key Usages

8e:cc:db:b5:46:3b:6f:8b:3e:d1:de:c8:f5:57:df:42:08:3e:0f:79Signer

Signature Validations

Verification

03/10/2022, 12:53 Valid: false

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

Sections

.text Size: 612KB - Virtual size: 610KB

ABSS Size: 84KB - Virtual size: 83KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 144KB - Virtual size: 140KB

.reloc Size: 8KB - Virtual size: 4KB

31:8a:9e:74:f8:76:e9:a6:ff:96:b0:d6:6f:a0:6b:9d
Certificate

8e:cc:db:b5:46:3b:6f:8b:3e:d1:de:c8:f5:57:df:42:08:3e:0f:79
Signer

03/10/2022, 12:53
Valid: false

.text
Size: 612KB - Virtual size: 610KB

ABSS
Size: 84KB - Virtual size: 83KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 144KB - Virtual size: 140KB

.reloc
Size: 8KB - Virtual size: 4KB