458c544f90c581b6c008baafe3b8a7fd859ec8c058d116ed21c588045ad3fb47

Sharing

Copy URL Twitter E-mail

General

Target

458c544f90c581b6c008baafe3b8a7fd859ec8c058d116ed21c588045ad3fb47
Size

643KB
MD5

6a9565e39d748935f6b04816aac26cb0
SHA1

cd214cb0c99d7dea954c5e6a82e8077c788bea66
SHA256

458c544f90c581b6c008baafe3b8a7fd859ec8c058d116ed21c588045ad3fb47
SHA512

662921d86a5a8b85251ea753742c9f02e9d959a86be726cd743f15605013d500f4d99f6e8921e5f7b67a5462379b45f9fa0139c6bb026af2ab5b4efa8880febb
SSDEEP

12288:JPVoBHSI2uCZTWYc5RdK7mUGtCxiaIR6XkazrEVrRNu16fpPXYTqAmPvTZRw8co:JPeSI2y5XK7PGtCxiq0WM+kRf+pcAu

Score

N/A

Malware Config

Signatures

Files

458c544f90c581b6c008baafe3b8a7fd859ec8c058d116ed21c588045ad3fb47
.exe windows x86

c32b52a002052c2fa66ec54800d28988

Code Sign

41:79:ea:1b:ec:59:d4:ca:7e:66:86:28:32:55:54:80
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

24/09/2014, 00:00

Not After

24/09/2015, 23:59

Subject

CN=Evgen Kugitko,OU=Individual Developer,O=No Organization Affiliation,L=Kiev,ST=Kiev,C=UA

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

f2:7b:80:19:ce:5a:2e:8c:f9:a6:11:7d:9f:81:43:b7:93:95:b4:44
Signer

Actual PE Digest

f2:7b:80:19:ce:5a:2e:8c:f9:a6:11:7d:9f:81:43:b7:93:95:b4:44

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Evgen Kugitko,OU=Individual Developer,O=No Organization Affiliation,L=Kiev,ST=Kiev,C=UA

06/10/2022, 18:35
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

TerminateProcess
VirtualProtect
TerminateThread
LoadLibraryA
LeaveCriticalSection
GetVersion
GetProcessHeap
GetProcAddress
EnterCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

Sections

CODE
Size: - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 620KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c32b52a002052c2fa66ec54800d28988

Code Sign

41:79:ea:1b:ec:59:d4:ca:7e:66:86:28:32:55:54:80Certificate

Extended Key Usages

Key Usages

f2:7b:80:19:ce:5a:2e:8c:f9:a6:11:7d:9f:81:43:b7:93:95:b4:44Signer

Signature Validations

Verification

06/10/2022, 18:35 Valid: false

Headers

File Characteristics

Imports

kernel32

Sections

CODE Size: - Virtual size: 832KB

DATA Size: - Virtual size: 24KB

BSS Size: - Virtual size: 8KB

.idata Size: 12KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: - Virtual size: 220KB

.itext Size: 620KB - Virtual size: 624KB

.reloc Size: 512B - Virtual size: 4KB

.rsrc Size: 17KB - Virtual size: 18KB

41:79:ea:1b:ec:59:d4:ca:7e:66:86:28:32:55:54:80
Certificate

f2:7b:80:19:ce:5a:2e:8c:f9:a6:11:7d:9f:81:43:b7:93:95:b4:44
Signer

06/10/2022, 18:35
Valid: false

CODE
Size: - Virtual size: 832KB

DATA
Size: - Virtual size: 24KB

BSS
Size: - Virtual size: 8KB

.idata
Size: 12KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: - Virtual size: 220KB

.itext
Size: 620KB - Virtual size: 624KB

.reloc
Size: 512B - Virtual size: 4KB

.rsrc
Size: 17KB - Virtual size: 18KB