d3118b8fbc80634efb3b76d53d1ff94c4ec75ad345bda67ab1693b4fb39267e1

Sharing

Copy URL Twitter E-mail

General

Target

d3118b8fbc80634efb3b76d53d1ff94c4ec75ad345bda67ab1693b4fb39267e1
Size

256KB
MD5

69443ed9f0a166880a048b24a645092e
SHA1

83ce15625b3a9dbfc2668df869df90291dc1b93c
SHA256

d3118b8fbc80634efb3b76d53d1ff94c4ec75ad345bda67ab1693b4fb39267e1
SHA512

7a6dd7acf99125d5079e41ff911d6b60b0cdb20d85155dfd340b1b7257e23896e77fbcaff2c40262c7381dee23ef84734fe03e2c61c54c92a5998b8753b67d4b
SSDEEP

3072:8rnwCtbz1Z64ldyFr/dvq2zqZTm6XVGP0lxWr/xknGwfJmIp01iY6KALiWIq0VY2:unwCtfD64lwVFvq2eZTs0+kjs05Dpc

Score

N/A

Malware Config

Signatures

Files

d3118b8fbc80634efb3b76d53d1ff94c4ec75ad345bda67ab1693b4fb39267e1
.dll windows x86

a593267f8ebe249773de02eb7532aef4

Code Sign

0e:5c:8c:7c:a6:06:6a:8f:48:70:5e:ff:7a:d2:d0:fd
Certificate

Issuer

CN=XtnG

Not Before

11/06/2012, 07:23

Not After

31/12/2039, 23:59

Subject

CN=XtnG

Extended Key Usages

ExtKeyUsageCodeSigning

63:bb:b0:a0:2f:e4:81:cc:80:8b:1a:62:59:36:a6:7a:57:c6:ad:84
Signer

Actual PE Digest

63:bb:b0:a0:2f:e4:81:cc:80:8b:1a:62:59:36:a6:7a:57:c6:ad:84

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=XtnG

12/10/2022, 19:53
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetPrivateProfileStringA
GetProfileStringA
GetShortPathNameA
GetStartupInfoA
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameA
GetTempPathA
GetVersionExA
GetFileAttributesA
SetLastError
WriteFile
WritePrivateProfileStringA
WriteProfileStringA
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GetCurrentDirectoryA
GetCommandLineA
ExpandEnvironmentStringsA
DeleteFileA
CreateFileA
CompareStringA
CloseHandle
VirtualAllocEx
GetModuleHandleW
MultiByteToWideChar
GetProcAddress

user32

EndPaint
GetClientRect
BeginPaint
AllowSetForegroundWindow
AnimateWindow
BroadcastSystemMessageW
CallNextHookEx
ChangeDisplaySettingsExA
CharUpperW
ChildWindowFromPoint
CloseClipboard
CopyImage
CreateCursor
CreateMDIWindowW
CreateMenu
DdeEnableCallback
DdeInitializeA
DestroyCaret
DialogBoxIndirectParamW
DialogBoxParamA
DialogBoxParamW
DlgDirListA
DlgDirListComboBoxA
DlgDirListComboBoxW
DragObject
DrawAnimatedRects
DrawIcon
DrawStateA
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
PostQuitMessage
EnumClipboardFormats
ExitWindowsEx
FindWindowW
GetCapture
GetClassInfoW
GetClassNameW
GetClipboardOwner
GetDCEx
GetDesktopWindow
GetDoubleClickTime
GetIconInfo
GetKBCodePage
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetListBoxInfo
GetMenuItemID
GetPriorityClipboardFormat
GetProcessWindowStation
GetScrollInfo
GetScrollPos
GetScrollRange
GetTabbedTextExtentW
GetUserObjectInformationW
GetUserObjectSecurity
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowTextLengthW
InflateRect
InsertMenuItemW
InsertMenuW
IsIconic
LoadCursorFromFileW
LoadIconW
LockWindowUpdate
MapVirtualKeyExW
MapVirtualKeyW
MessageBoxIndirectW
OemToCharA
OpenDesktopW
OpenWindowStationW
RegisterDeviceNotificationA
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageTimeoutA
SetClassWord
SetDlgItemTextW
SetDoubleClickTime
SetParent
SetScrollInfo
SetThreadDesktop
SetUserObjectInformationW
SetWindowLongW
SetWindowWord
SetWindowsHookA
ShowCaret
ShowWindowAsync
SystemParametersInfoA
ToAscii
UnregisterHotKey
wsprintfA
DefWindowProcA
LoadCursorA
LoadIconA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
EnumChildWindows

gdi32

MoveToEx
Rectangle
CloseEnhMetaFile
DeleteEnhMetaFile
PlayEnhMetaFile
CreateEnhMetaFileA
LineTo
GetStockObject

advapi32

RegOpenKeyExA

Sections

.text
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a593267f8ebe249773de02eb7532aef4

Code Sign

0e:5c:8c:7c:a6:06:6a:8f:48:70:5e:ff:7a:d2:d0:fdCertificate

Extended Key Usages

63:bb:b0:a0:2f:e4:81:cc:80:8b:1a:62:59:36:a6:7a:57:c6:ad:84Signer

Signature Validations

Verification

12/10/2022, 19:53 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 238KB - Virtual size: 238KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 10KB - Virtual size: 10KB

.reloc Size: 1KB - Virtual size: 1KB

0e:5c:8c:7c:a6:06:6a:8f:48:70:5e:ff:7a:d2:d0:fd
Certificate

63:bb:b0:a0:2f:e4:81:cc:80:8b:1a:62:59:36:a6:7a:57:c6:ad:84
Signer

12/10/2022, 19:53
Valid: false

.text
Size: 238KB - Virtual size: 238KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 10KB - Virtual size: 10KB

.reloc
Size: 1KB - Virtual size: 1KB