42cfb48f5375209f6b4b94759396f246edf58403d5f59d99b6acf244f978f39d

Sharing

Copy URL Twitter E-mail

General

Target

42cfb48f5375209f6b4b94759396f246edf58403d5f59d99b6acf244f978f39d
Size

874KB
MD5

402cfeb99b884cbcc0731bc0fbe9c980
SHA1

c192020c7a8266c6f42c0e0be566a10141032e68
SHA256

42cfb48f5375209f6b4b94759396f246edf58403d5f59d99b6acf244f978f39d
SHA512

157cbce19bdf5e95f472238b8732117f911f28284ec9716b986e08493f4e48bc9604dc7e89f1e68a5c7829d9c44d40593ced98a2bd365b9769efbcfed1151308
SSDEEP

12288:E4N3ndc+g3G+bwinu569ln83wUy2XH/yyoTM4qXmW49Izf8LZuv70r9RD:E0dc+PSwp6kAg3boTQXF49M80789F

Score

N/A

Malware Config

Signatures

Files

42cfb48f5375209f6b4b94759396f246edf58403d5f59d99b6acf244f978f39d
.exe windows x86

14d2fbc0c1938af64d1eeedbcc6ef15c

Code Sign

31:8a:9e:74:f8:76:e9:a6:ff:96:b0:d6:6f:a0:6b:9d
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/02/2015, 00:00

Not After

04/02/2016, 23:59

Subject

CN=Consortium Group ltd.,O=Consortium Group ltd.,POSTALCODE=00152,STREET=CORNER OF GR.MARLBOROUGH UN GR.GEORGE STR+STREET=3RD FLOOR\, C&h TOWERS,L=ROSEAU,ST=ROSEAU,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

cd:18:08:fe:f8:8c:a7:b3:ea:37:6e:21:3e:de:0a:a7:3c:88:59:aa
Signer

Actual PE Digest

cd:18:08:fe:f8:8c:a7:b3:ea:37:6e:21:3e:de:0a:a7:3c:88:59:aa

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Consortium Group ltd.,O=Consortium Group ltd.,POSTALCODE=00152,STREET=CORNER OF GR.MARLBOROUGH UN GR.GEORGE STR+STREET=3RD FLOOR\, C&h TOWERS,L=ROSEAU,ST=ROSEAU,C=DM

06/10/2022, 18:38
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetDragImage
ImageList_Read
ImageList_Write
ImageList_GetIconSize
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_SetIconSize

kernel32

GetStringTypeExA
FreeResource
InterlockedIncrement
FreeLibrary
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
CreateEventA
CompareStringA
CreateFileMappingA
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetSystemInfo
HeapReAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetTempPathA
VirtualAlloc
ExitProcess
GetCommandLineA
FlushFileBuffers
WriteFile
GetVersion
GetVersionExA
GetProcAddress
GetStartupInfoA
QueryPerformanceCounter
TlsGetValue
CreateFileA
GetSystemTimeAsFileTime
CloseHandle
CreateThread
GetTickCount
GetLastError
CreateDirectoryW
LCMapStringW
SetFilePointer
SetStdHandle
LoadLibraryA

user32

SetRect
GetSystemMetrics
GetCapture
GetClassInfoA
CreateWindowExA
SetPropA
SetMenuItemInfoA
SetMenu
RemovePropA
SetWindowPos
SetWindowPlacement
SetWindowLongA
SetScrollRange
SetScrollInfo
GetClassNameA
GetSystemMenu
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
WindowFromPoint
SetScrollPos

gdi32

SetDIBColorTable
SetEnhMetaFileBits
SetPixel
SetROP2
StretchBlt
SetBrushOrgEx
DeleteObject
CreatePen
CreatePenIndirect
GetClipBox
TextOutW
OffsetWindowOrgEx
DeleteMetaFile
GetLogColorSpaceW
SetAbortProc
SetBkMode
SetBkColor
SelectPalette
DeleteEnhMetaFile
CreateFontIndirectA
UnrealizeObject
ExcludeClipRect

comdlg32

GetOpenFileNameA
GetSaveFileNameA
FindTextW
ChooseFontA
ReplaceTextW

advapi32

RegCreateKeyExA
AllocateAndInitializeSid

shell32

StrStrIA

oleaut32

VarDecRound
VariantInit
VarRound
VarNumFromParseNum
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayPutElement
VariantChangeType
SafeArrayCreate

Sections

.text
Size: 612KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ABSS
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14d2fbc0c1938af64d1eeedbcc6ef15c

Code Sign

31:8a:9e:74:f8:76:e9:a6:ff:96:b0:d6:6f:a0:6b:9dCertificate

Extended Key Usages

Key Usages

cd:18:08:fe:f8:8c:a7:b3:ea:37:6e:21:3e:de:0a:a7:3c:88:59:aaSigner

Signature Validations

Verification

06/10/2022, 18:38 Valid: false

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

Sections

.text Size: 612KB - Virtual size: 610KB

ABSS Size: 84KB - Virtual size: 83KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 144KB - Virtual size: 140KB

.reloc Size: 8KB - Virtual size: 4KB

31:8a:9e:74:f8:76:e9:a6:ff:96:b0:d6:6f:a0:6b:9d
Certificate

cd:18:08:fe:f8:8c:a7:b3:ea:37:6e:21:3e:de:0a:a7:3c:88:59:aa
Signer

06/10/2022, 18:38
Valid: false

.text
Size: 612KB - Virtual size: 610KB

ABSS
Size: 84KB - Virtual size: 83KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 144KB - Virtual size: 140KB

.reloc
Size: 8KB - Virtual size: 4KB