e0439e87c68fec78ac2e7cb60ee9daace737fbf0458c9be3c903fcef3ef5f76a

Sharing

Copy URL Twitter E-mail

General

Target

e0439e87c68fec78ac2e7cb60ee9daace737fbf0458c9be3c903fcef3ef5f76a
Size

414KB
MD5

497f923a5d633bd0381d8dd4e4f3c293
SHA1

89b720987e3b9f32df1dac4fb85e56306728678a
SHA256

e0439e87c68fec78ac2e7cb60ee9daace737fbf0458c9be3c903fcef3ef5f76a
SHA512

33d59920145f74356e30bbedb04ef21626bcd843fa598f305d2a5a897461180a247cabfa9234baf32650760e2304af3d2884dba2428a194aed3bff70cbac08d1
SSDEEP

6144:SPGLo/2+nW4hBh59CnTsMnGnNNIZatpTtiopASGOuzbgwu2TfwVfhPKxq9:Se8/2+W4jh5OTsMmNNIiTQuA8unn6Cx8

Score

N/A

Malware Config

Signatures

Files

e0439e87c68fec78ac2e7cb60ee9daace737fbf0458c9be3c903fcef3ef5f76a
.exe windows x86

6a3e69f98ce51d1033b8534b92278a9c

Code Sign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29/10/2015, 11:30

Not After

09/06/2027, 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

05/10/2020, 22:00

Not After

05/10/2022, 22:00

Subject

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29/10/2015, 11:30

Not After

09/06/2027, 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

05/10/2020, 22:00

Not After

05/10/2022, 22:00

Subject

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9e:cd:64:b2:a5:e8:e4:e6:c0:5e:16:fc:5d:c4:9a:2c:b9:17:78:c1:f4:52:c2:6e:ab:02:45:6c:d1:66:33:c8
Signer

Actual PE Digest

9e:cd:64:b2:a5:e8:e4:e6:c0:5e:16:fc:5d:c4:9a:2c:b9:17:78:c1:f4:52:c2:6e:ab:02:45:6c:d1:66:33:c8

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

03/10/2022, 12:52
Valid: true

Chain 1

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

a2:f0:cc:99:c4:4f:a5:04:dd:7b:d4:78:1b:56:48:d1:98:b8:61:4b
Signer

Actual PE Digest

a2:f0:cc:99:c4:4f:a5:04:dd:7b:d4:78:1b:56:48:d1:98:b8:61:4b

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

03/10/2022, 12:52
Valid: true

Chain 1

CN=Vyacheslav Burlakov,O=Vyacheslav Burlakov,L=Togliatti,C=RU,1.2.840.113549.1.9.1=#0c19737570706f72744067726170686963726567696f6e2e636f6d

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
OpenWaitableTimerW
CreateEventW
ReadConsoleInputW
WaitNamedPipeA
SetVolumeMountPointW
SetSystemTimeAdjustment
FindNextFileW
FindResourceExW
AddVectoredExceptionHandler
BeginUpdateResourceW
GetConsoleTitleW
TransmitCommChar
GetCPInfoExA
GetModuleFileNameA
IsBadHugeWritePtr
GetConsoleAliasExesLengthA
WriteConsoleW
EnumCalendarInfoExW
LoadLibraryW
DeleteFileW
SearchPathA
VirtualAlloc
WriteConsoleOutputCharacterA
GetConsoleAliasA
GetModuleHandleA
GetPrivateProfileStringW
PeekConsoleInputA
GlobalGetAtomNameA
EnumResourceTypesW
GetProcAddress
SetFileShortNameA
SetCalendarInfoW
SetComputerNameA
GetFileAttributesA
GetVolumePathNameA
GetConsoleAliasW
FindFirstChangeNotificationW
GetFileType
SetFileShortNameW
AddAtomW
GetProfileIntA
SetFileAttributesA
AllocConsole
SetConsoleCtrlHandler
CreateJobObjectA
CreateMutexA
GetNumaHighestNodeNumber
GetBinaryTypeA
GetLongPathNameA
FoldStringW
FindNextFileA
ResetEvent
GlobalUnfix
GetComputerNameA
GetVersionExW
VirtualProtect
GlobalAlloc
GetSystemDefaultLCID
GetLastError
GetShortPathNameW
LoadLibraryA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetStartupInfoW
HeapAlloc
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
Sleep
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
ReadFile
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
FlushFileBuffers
CreateFileA
CloseHandle

gdi32

GetCharWidthFloatW

ole32

OleQueryLinkFromData

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a3e69f98ce51d1033b8534b92278a9c

Code Sign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2Certificate

Extended Key Usages

Key Usages

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2Certificate

Extended Key Usages

Key Usages

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43Certificate

Extended Key Usages

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

9e:cd:64:b2:a5:e8:e4:e6:c0:5e:16:fc:5d:c4:9a:2c:b9:17:78:c1:f4:52:c2:6e:ab:02:45:6c:d1:66:33:c8Signer

Signature Validations

Verification

03/10/2022, 12:52 Valid: true

Chain 1

a2:f0:cc:99:c4:4f:a5:04:dd:7b:d4:78:1b:56:48:d1:98:b8:61:4bSigner

Signature Validations

Verification

03/10/2022, 12:52 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

ole32

Sections

.text Size: 88KB - Virtual size: 88KB

.data Size: 212KB - Virtual size: 222KB

.rsrc Size: 86KB - Virtual size: 85KB

.reloc Size: 8KB - Virtual size: 7KB

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

0e:94:71:bb:c0:a1:54:f9:50:fb:b9:7c:88:67:d0:43
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

9e:cd:64:b2:a5:e8:e4:e6:c0:5e:16:fc:5d:c4:9a:2c:b9:17:78:c1:f4:52:c2:6e:ab:02:45:6c:d1:66:33:c8
Signer

03/10/2022, 12:52
Valid: true

a2:f0:cc:99:c4:4f:a5:04:dd:7b:d4:78:1b:56:48:d1:98:b8:61:4b
Signer

03/10/2022, 12:52
Valid: true

.text
Size: 88KB - Virtual size: 88KB

.data
Size: 212KB - Virtual size: 222KB

.rsrc
Size: 86KB - Virtual size: 85KB

.reloc
Size: 8KB - Virtual size: 7KB