f3f2aa2a4759e4e7713a626e7dc5d1dba7fcda0fbf1698d5f8f959f59613a3aa

Sharing

Copy URL Twitter E-mail

General

Target

f3f2aa2a4759e4e7713a626e7dc5d1dba7fcda0fbf1698d5f8f959f59613a3aa
Size

177KB
MD5

6f6917f5ff6f1a6c1170530c47e437ac
SHA1

d56c972b55c2dfeb4f4d7db4ea0a490d3bd4f5af
SHA256

f3f2aa2a4759e4e7713a626e7dc5d1dba7fcda0fbf1698d5f8f959f59613a3aa
SHA512

513bfa873a01ebcc4fcc7a283e5b7f839d557d39ca28258777927c10f5b09c9152d653d04b9230dd883fe2c52b791cf43f758841af52b5452cbe3b1b7f8b7563
SSDEEP

3072:z/vaq7tkDoR/jeyumob4sYdP56uHTcpxL4tFbT8ync3W3:z/i0ysjEfYdP3HTcnL4tFbnncG3

Score

N/A

Malware Config

Signatures

Files

f3f2aa2a4759e4e7713a626e7dc5d1dba7fcda0fbf1698d5f8f959f59613a3aa
.exe windows x86

ae5e6017d3a083f159f46bf185983e18

Code Sign

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16
Certificate

Issuer

CN=0osU

Not Before

19/06/2012, 07:13

Not After

31/12/2039, 23:59

Subject

CN=0osU

Extended Key Usages

ExtKeyUsageCodeSigning

a9:7d:20:44:f6:0e:d0:ef:94:5f:0e:22:e4:bf:b0:b3:27:99:f9:1b
Signer

Actual PE Digest

a9:7d:20:44:f6:0e:d0:ef:94:5f:0e:22:e4:bf:b0:b3:27:99:f9:1b

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=0osU

06/10/2022, 18:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
FileTimeToDosDateTime
lstrcatA
GetProcAddress
LoadLibraryW
GetCommandLineA
CreateFileA
CreateFileMappingA
EnumSystemCodePagesW
FindFirstFileExW
GetACP
GetComputerNameExW
GetConsoleAliasesLengthW
GetConsoleDisplayMode
QueueUserAPC
SignalObjectAndWait
TlsFree
WaitCommEvent
WriteProfileStringA

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.16
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data17
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data16
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data15
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data14
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data13
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data12
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae5e6017d3a083f159f46bf185983e18

Code Sign

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16Certificate

Extended Key Usages

a9:7d:20:44:f6:0e:d0:ef:94:5f:0e:22:e4:bf:b0:b3:27:99:f9:1bSigner

Signature Validations

Verification

06/10/2022, 18:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 165KB - Virtual size: 165KB

.rdata Size: 1024B - Virtual size: 568B

.data Size: 512B - Virtual size: 372B

.16 Size: 1KB - Virtual size: 1KB

.data17 Size: 1024B - Virtual size: 1000B

.data16 Size: 1024B - Virtual size: 1000B

.data15 Size: 1024B - Virtual size: 1000B

.data14 Size: 1024B - Virtual size: 1000B

.data13 Size: 1024B - Virtual size: 1000B

.data12 Size: 1024B - Virtual size: 1000B

.reloc Size: 1024B - Virtual size: 1.2MB

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16
Certificate

a9:7d:20:44:f6:0e:d0:ef:94:5f:0e:22:e4:bf:b0:b3:27:99:f9:1b
Signer

06/10/2022, 18:34
Valid: false

.text
Size: 165KB - Virtual size: 165KB

.rdata
Size: 1024B - Virtual size: 568B

.data
Size: 512B - Virtual size: 372B

.16
Size: 1KB - Virtual size: 1KB

.data17
Size: 1024B - Virtual size: 1000B

.data16
Size: 1024B - Virtual size: 1000B

.data15
Size: 1024B - Virtual size: 1000B

.data14
Size: 1024B - Virtual size: 1000B

.data13
Size: 1024B - Virtual size: 1000B

.data12
Size: 1024B - Virtual size: 1000B

.reloc
Size: 1024B - Virtual size: 1.2MB