b4054aab23c0c4d007bb47a4e43aaf0ddc12c9a22f9efd7f8d2be20af9ee682f

Sharing

Copy URL

Twitter E-mail

General

Target

b4054aab23c0c4d007bb47a4e43aaf0ddc12c9a22f9efd7f8d2be20af9ee682f
Size

329KB
MD5

692f9f5b71c33df42692341c8384ab80
SHA1

67f8a0c26a7665c1f79c2109c06865240d3e2938
SHA256

b4054aab23c0c4d007bb47a4e43aaf0ddc12c9a22f9efd7f8d2be20af9ee682f
SHA512

bd0a39e66f5d07a03289c02b67369f7e71b21f40de88c3631bd7cb6f5a2f539d840aeebb6b7a31c7bce264b0fdec34e6ef72dae34456ddd33f0780fe7d71b0a3
SSDEEP

6144:26hrCeeeeeeleeeeeeeeeeeee6eeeeeeeeeeeeeeeeeee2eeebeeeeeeeeeeeeeV:2Crk+GVhQxBgq7GPjTFWNA

Score

N/A

Malware Config

Signatures

Files

b4054aab23c0c4d007bb47a4e43aaf0ddc12c9a22f9efd7f8d2be20af9ee682f
.exe windows x86

df557c95dbcdd2e5d2ff950b4e3ab191

Code Sign

39:ec:3d:9a:40:fd:54:64:b0:6e:f6:79:b4:6c:28:de
Certificate

Issuer

CN=BzokDEUZbtuuSIvHtWkqhmCYuCmKikslQCfMCxQcrQVHNXRk zuDLbBue x YEmoePHlDIfEzgeHHXyutkUap DsceBpyEjuvyDRnKJfjneYVASIIlNQuliFlIEmCMTPizlSfoGFEbPnYTLgBtGp e

Not Before

02-07-2012 12:48

Not After

31-12-2039 23:59

Subject

CN=BzokDEUZbtuuSIvHtWkqhmCYuCmKikslQCfMCxQcrQVHNXRk zuDLbBue x YEmoePHlDIfEzgeHHXyutkUap DsceBpyEjuvyDRnKJfjneYVASIIlNQuliFlIEmCMTPizlSfoGFEbPnYTLgBtGp e

Extended Key Usages

ExtKeyUsageCodeSigning

a4:cf:76:41:f6:37:15:f4:83:be:16:93:ed:87:44:82:6a:38:54:15
Signer

Actual PE Digest

a4:cf:76:41:f6:37:15:f4:83:be:16:93:ed:87:44:82:6a:38:54:15

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=BzokDEUZbtuuSIvHtWkqhmCYuCmKikslQCfMCxQcrQVHNXRk zuDLbBue x YEmoePHlDIfEzgeHHXyutkUap DsceBpyEjuvyDRnKJfjneYVASIIlNQuliFlIEmCMTPizlSfoGFEbPnYTLgBtGp e

06-10-2022 18:41
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetWindowsDirectoryW
LoadLibraryA
GetProcAddress
lstrcatW
CreateFileW
GetCommProperties
SetHandleCount
SetThreadExecutionState
IsBadWritePtr
EraseTape
GetConsoleAliasExesW
IsBadReadPtr
GetDiskFreeSpaceW
CreateJobObjectW
lstrcpyA
UnlockFile
SetConsoleActiveScreenBuffer
ScrollConsoleScreenBufferW
GlobalMemoryStatus
SetHandleInformation
BuildCommDCBAndTimeoutsW
SizeofResource
Module32FirstW
SetConsoleCursorInfo
HeapFree
GetHandleInformation
PurgeComm
CreateMutexA
GetPrivateProfileStructW
LockFile
LCMapStringA
SetCalendarInfoW
CancelDeviceWakeupRequest
MoveFileWithProgressW
WritePrivateProfileSectionW
GlobalAddAtomA
BackupRead
GlobalDeleteAtom
AssignProcessToJobObject
GetConsoleAliasesLengthA
FoldStringW
FreeLibraryAndExitThread
GetSystemPowerStatus
GetOEMCP
GetCurrentThread
BuildCommDCBAndTimeoutsA
PeekNamedPipe
IsBadStringPtrA
GenerateConsoleCtrlEvent
GetThreadLocale
GetDriveTypeW
SetFileAttributesW
ReadProcessMemory
EndUpdateResourceA
SetCommBreak
GetTempPathA
ClearCommError
GetComputerNameW
SetConsoleTitleA
WriteProfileStringW
SetFilePointerEx
InterlockedCompareExchange
GlobalGetAtomNameA
lstrlenA
OutputDebugStringA
Heap32First
GetCurrentDirectoryW
GlobalAlloc
GetNumberOfConsoleMouseButtons
ReadConsoleOutputA
OpenProcess
GetSystemInfo
PeekConsoleInputA
SetVolumeMountPointA
GetTempFileNameW
SetProcessWorkingSetSize
GlobalHandle
GetLogicalDriveStringsA
SetDefaultCommConfigA
Process32Next
FindNextVolumeMountPointW
IsDebuggerPresent
AllocConsole
GetConsoleScreenBufferInfo
UnmapViewOfFile
Process32NextW
EnumSystemCodePagesA
GetCommandLineA
GetLogicalDriveStringsW
WritePrivateProfileStructW
GetPrivateProfileStringW
GetVolumePathNameW
FindCloseChangeNotification
CreateEventA
GetConsoleTitleW

user32

CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
SetScrollRange
SetScrollPos
ScrollWindow
SendMessageA
BeginPaint
GetSystemMetrics
wsprintfA
EndPaint
PostQuitMessage
DefWindowProcA
DdeQueryStringA
SetCaretPos
ReuseDDElParam
IsChild
SetDeskWallpaper
WaitForInputIdle
OemToCharBuffA
EnumClipboardFormats
MsgWaitForMultipleObjectsEx
DlgDirSelectExW
AppendMenuW
SetPropA
DestroyIcon
TrackMouseEvent
GetMenuItemID
DefWindowProcW
MessageBoxExW
InsertMenuItemW
RemovePropW
IsCharLowerW
InternalGetWindowText
PeekMessageW
ExitWindowsEx
ReplyMessage
CharLowerBuffW
RedrawWindow
EnumDesktopsA
LoadAcceleratorsA
RegisterShellHookWindow
EnableScrollBar
InflateRect
ReleaseCapture
LoadCursorFromFileA
SetLayeredWindowAttributes
MessageBoxExA
ClientToScreen
DdePostAdvise
WINNLSGetEnableStatus
GetScrollBarInfo
EqualRect
InvalidateRect
SendMessageW
SetDlgItemTextW
DeregisterShellHookWindow
IsRectEmpty
EnumThreadWindows
DrawEdge
GetWindowThreadProcessId
CopyIcon
GetCursorPos
GetClassInfoW
GetAltTabInfoA
CheckMenuItem
CreateCursor
SetClipboardViewer
DdeUnaccessData
GetWindowTextA
SetActiveWindow
GetClassNameW
GetAltTabInfo
PeekMessageA
DefFrameProcA
RegisterDeviceNotificationA
GrayStringW
GetKeyboardType
GetWindowTextW
GetWindowDC
GetClassWord
ReleaseDC
GetKeyState
GetScrollPos
TileWindows
SetWindowsHookExW
wsprintfW
IsDialogMessage
SetWindowTextA
IsWindowUnicode
SetClipboardData
GetGUIThreadInfo
DlgDirSelectExA
ModifyMenuW
IsCharAlphaNumericW
SwitchToThisWindow
MapDialogRect
IMPGetIMEA
DdeQueryNextServer
SetMenuDefaultItem
GetDlgCtrlID
DdeConnectList
CopyAcceleratorTableA
GetMenuBarInfo
DdeCreateStringHandleW

gdi32

GetStockObject
TextOutA
SetTextAlign

msvcrt

strlen
memset

advapi32

RegOpenKeyExW

shell32

DragQueryFile
SHIsFileAvailableOffline
DragQueryFileAorW
SHLoadInProc
SHGetFileInfoW
SHBrowseForFolderA
DragQueryFileW
SHGetDesktopFolder
ExtractIconW
SHLoadNonloadedIconOverlayIdentifiers
FindExecutableW
SHGetDataFromIDListA
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
ShellExecuteA
SHEmptyRecycleBinA
ShellExecuteEx
Shell_NotifyIconW
SHGetSettings
SHCreateDirectoryExW
SHGetFolderLocation
SHCreateDirectoryExA
ExtractAssociatedIconW
WOWShellExecute
ShellExecuteExA
SHGetDiskFreeSpaceA
ExtractIconExA
SHFileOperationA
SHInvokePrinterCommandA
DuplicateIcon
SHFileOperationW
SHAddToRecentDocs
Shell_NotifyIcon
SHGetPathFromIDList
ExtractAssociatedIconA
DoEnvironmentSubstA
SHQueryRecycleBinW
DragQueryPoint
ShellAboutA
SHGetFolderPathA
SHBindToParent
SHQueryRecycleBinA
SHGetIconOverlayIndexW
SHGetFileInfo
SHGetInstanceExplorer
ShellHookProc
DragAcceptFiles
SHGetPathFromIDListA
SHBrowseForFolder
SHGetIconOverlayIndexA
ExtractAssociatedIconExA
ExtractIconA
SHFileOperation
ExtractIconExW
SHChangeNotify
SHGetPathFromIDListW

shlwapi

StrRChrW
StrCmpNIA
StrRChrIA
StrCmpNIW
StrRChrIW
StrStrIW
StrChrW
StrChrIW
StrChrA
StrCmpNW
StrRStrIW
StrCmpNA

Sections

.text
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df557c95dbcdd2e5d2ff950b4e3ab191

Code Sign

39:ec:3d:9a:40:fd:54:64:b0:6e:f6:79:b4:6c:28:deCertificate

Extended Key Usages

a4:cf:76:41:f6:37:15:f4:83:be:16:93:ed:87:44:82:6a:38:54:15Signer

Signature Validations

Verification

06-10-2022 18:41 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

shell32

shlwapi

Sections

.text Size: 309KB - Virtual size: 309KB

.data Size: 8KB - Virtual size: 8KB

.data2 Size: 4KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

39:ec:3d:9a:40:fd:54:64:b0:6e:f6:79:b4:6c:28:de
Certificate

a4:cf:76:41:f6:37:15:f4:83:be:16:93:ed:87:44:82:6a:38:54:15
Signer

06-10-2022 18:41
Valid: false

.text
Size: 309KB - Virtual size: 309KB

.data
Size: 8KB - Virtual size: 8KB

.data2
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB