7497ccc9cf4949262e322ece7b2ec037d2764f10eae45713f1ddce4bed2807c5

Sharing

Copy URL Twitter E-mail

General

Target

7497ccc9cf4949262e322ece7b2ec037d2764f10eae45713f1ddce4bed2807c5
Size

219KB
MD5

7923f65e880aff79293079bfbe67d3b9
SHA1

70f949b66dd98fbf807b0ea4021ffdaeabe7cd22
SHA256

7497ccc9cf4949262e322ece7b2ec037d2764f10eae45713f1ddce4bed2807c5
SHA512

7d4b3512ba2bb8ecc6e851b4524afec74291198f7cbcabab07d2654d0a615e21aa66dd7d01900c48a11e0db1f6d17959e9d22967955451daf2d047a1e8cf47d2
SSDEEP

3072:d8qYI6meVNnlHWW0iM1ab8JoI6snmUujw8BPCyKTSh4nSk0vnJzN30Qab:etEeVNWiMIvI5BIfah+4nSPJ5Ra

Score

N/A

Malware Config

Signatures

Files

7497ccc9cf4949262e322ece7b2ec037d2764f10eae45713f1ddce4bed2807c5
.exe windows x86

6cab9a2eb49caf98faea38961d069510

Code Sign

27:1d:af:90:4f:a2:c0:ac:4b:f6:50:de:c0:42:0a:20
Certificate

Issuer

CN=LaYmbPFcbSVsmoT

Not Before

02/04/2012, 12:12

Not After

31/12/2039, 23:59

Subject

CN=LaYmbPFcbSVsmoT

Extended Key Usages

ExtKeyUsageCodeSigning

23:77:63:59:95:1c:db:83:d9:10:f7:0c:42:ac:8f:49:4e:3b:16:76
Signer

Actual PE Digest

23:77:63:59:95:1c:db:83:d9:10:f7:0c:42:ac:8f:49:4e:3b:16:76

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=LaYmbPFcbSVsmoT

12/10/2022, 19:53
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc
InterlockedCompareExchange
AddAtomA

advapi32

RegOpenKeyA

shlwapi

PathMakeSystemFolderW
SHRegSetPathW
SHRegEnumUSKeyA
UrlEscapeA
StrStrA
SHDeleteValueW
PathAddExtensionA
PathAppendA
StrToIntA
StrStrIA
UrlIsOpaqueA
StrNCatW
SHRegEnumUSValueA
SHCopyKeyA
PathIsRelativeW
UrlIsW
PathSearchAndQualifyA
PathIsFileSpecW
SHGetValueA
StrRChrA
PathRemoveArgsW
ChrCmpIA
PathBuildRootW
UrlCombineW
PathMatchSpecW
StrRetToStrW
PathRemoveFileSpecW
StrRChrW
StrIsIntlEqualW
PathCompactPathExW
PathUndecorateA
PathIsPrefixA
PathIsUNCServerShareW
PathCompactPathExA
PathFindExtensionW
StrCmpNA
StrFormatKBSizeW
PathAddExtensionW
SHSetValueA
SHSkipJunction
PathCombineW
PathRemoveBlanksW
UrlIsNoHistoryA
SHOpenRegStreamW
ord16
SHEnumValueA
SHRegWriteUSValueA
UrlGetPartA
StrCSpnA
StrCSpnW
PathQuoteSpacesW
UrlCreateFromPathW
PathIsUNCA
SHRegQueryInfoUSKeyW
ColorRGBToHLS
SHSetThreadRef
StrSpnA
UrlCompareA
ColorHLSToRGB
PathCreateFromUrlW
PathIsSameRootW
PathFileExistsW
StrFromTimeIntervalW
HashData
SHRegDeleteUSValueA
StrCSpnIW
SHRegDeleteEmptyUSKeyW
AssocQueryStringByKeyA
StrRetToBufA
PathUndecorateW
StrChrIA
ColorAdjustLuma
IntlStrEqWorkerA
UrlApplySchemeW
StrTrimW
PathGetCharTypeW
SHIsLowMemoryMachine
AssocQueryStringByKeyW
StrRetToBufW
UrlEscapeW
PathIsPrefixW
PathIsUNCServerW
SHGetInverseCMAP
StrDupW
PathIsRelativeA

Sections

.text
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cab9a2eb49caf98faea38961d069510

Code Sign

27:1d:af:90:4f:a2:c0:ac:4b:f6:50:de:c0:42:0a:20Certificate

Extended Key Usages

23:77:63:59:95:1c:db:83:d9:10:f7:0c:42:ac:8f:49:4e:3b:16:76Signer

Signature Validations

Verification

12/10/2022, 19:53 Valid: false

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

Sections

.text Size: 214KB - Virtual size: 213KB

.data Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 564B

27:1d:af:90:4f:a2:c0:ac:4b:f6:50:de:c0:42:0a:20
Certificate

23:77:63:59:95:1c:db:83:d9:10:f7:0c:42:ac:8f:49:4e:3b:16:76
Signer

12/10/2022, 19:53
Valid: false

.text
Size: 214KB - Virtual size: 213KB

.data
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 564B