7da58be3aca05b82aa53698767c26840a09db56ad8de584a702ab640f8ee39e5

Sharing

Copy URL Twitter E-mail

General

Target
7da58be3aca05b82aa53698767c26840a09db56ad8de584a702ab640f8ee39e5
Size 444KB
Sample221019-2dqvzsbbf3
SHA256 7da58be3aca05b82aa53698767c26840a09db56ad8de584a702ab640f8ee39e5
MD5 821d6fee9e229e7481e533e89f16aa50
SHA1 c8be2a9fe9548527ca0caee94598630bf9e861e7
SHA512 659e05514d26f5a105f1872f4acbe3334d7065f1a4b3278da401dbd079ee4cb7ee8602508efefa718bd801e0db08b052f19af6bba18027ceb1c48c5ee0e32e8b
SSDEEP 12288:qBlWJRQJ/D+iJIicarPZM6YZbDYDKCIrBBz6Ff0:qBQRQJ/ilAd3YYBIl1n
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

7da58be3aca05b82aa53698767c26840a09db56ad8de584a702ab640f8ee39e5

.exe 444KB

7da58be3aca05b82aa53698767c26840a09db56ad8de584a702ab640f8ee39e5

IMPHASH caded722b6132b2fcd4971ac70c82b56
SHA256 7da58be3aca05b82aa53698767c26840a09db56ad8de584a702ab640f8ee39e5
MD5 821d6fee9e229e7481e533e89f16aa50
SHA1 c8be2a9fe9548527ca0caee94598630bf9e861e7
SHA512 659e05514d26f5a105f1872f4acbe3334d7065f1a4b3278da401dbd079ee4cb7ee8602508efefa718bd801e0db08b052f19af6bba18027ceb1c48c5ee0e32e8b
SSDEEP 12288:qBlWJRQJ/D+iJIicarPZM6YZbDYDKCIrBBz6Ff0:qBQRQJ/ilAd3YYBIl1n
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

54:ba:67:5f:d1:5c:4d:ae:00:2a:20:13:80:0c:86:da:e9:c0:c1:0d

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 10, 2010 - May 10, 2015

Subject

CN=Oleksandr Mikhta,O=Oleksandr Mikhta,POSTALCODE=61000,STREET=prospekt pobedy 68g - 169,L=Kharkov,ST=Ukraine,C=UA

Serial Number

b9:97:36:2f:ea:93:c4:f2:85:74:d8:dd:fa:50:9d:33

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 9, 2014 - Dec 9, 2015

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 30, 2000 - May 30, 2020

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 9, 2013 - May 8, 2028

Minor OS version

Major OS version

Entry point

15664

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

PDB paths

kernel32

MultiByteToWideChar lstrlenW GlobalUnlock GetLastError GlobalFree LoadLibraryA Process32Next CreateToolhelp32Snapshot GetCurrentThreadId CloseHandle GetCurrentProcessId SetStdHandle SetFilePointer GetConsoleMode GetConsoleCP FlushFileBuffers IsProcessorFeaturePresent RtlUnwind LoadLibraryW OutputDebugStringW WriteConsoleW OutputDebugStringA HeapFree HeapQueryInformation HeapSize lstrcatA RaiseException WriteFile GetFileType GetStdHandle SetHandleCount GetEnvironmentStringsW GlobalLock GetModuleFileNameA ExitProcess GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter GetLocaleInfoW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoA GetStringTypeW SetLastError GetModuleHandleW GetProcAddress TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetCPInfo GetOEMCP GetACP LCMapStringW MulDiv HeapCreate GlobalAlloc HeapReAlloc GetUserGeoID IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess DecodePointer EncodePointer GetModuleFileNameW CreateFileW IsBadReadPtr HeapValidate LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetStartupInfoW Process32First HeapAlloc FreeEnvironmentStringsW FreeLibrary HeapSetInformation GetCommandLineA InterlockedIncrement InterlockedDecrement WideCharToMultiByte

user32

SetDlgItemTextA GetDialogBaseUnits GetWindow FindWindowA UpdateWindow LoadImageA GetWindowRect OpenIcon SetActiveWindow InsertMenuItemA RegisterClassExA IsIconic SetForegroundWindow GetFocus FindWindowExA SendMessageA GetForegroundWindow GetWindowTextA SetWindowLongA GetWindowLongA DefWindowProcA GetDesktopWindow EnumWindowStationsW ShowWindow CreatePopupMenu GetSystemMetrics IsWindowVisible

gdi32

ResetDCA GetStockObject CreateDCA

comdlg32

PrintDlgA

shell32

SHGetInstanceExplorer

ole32

CoInitialize CoUninitialize CoCreateInstance

oleaut32

SysFreeString VariantInit SysAllocStringLen

netapi32

NetServerGetInfo

shlwapi

PathUnquoteSpacesA

comctl32

ord17 CreatePropertySheetPageW

gdiplus

GdiplusStartup

dbghelp

GetTimestampForLoadedLibrary

Name

.text

Size

152KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

191KB

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ