1d0a4045354b0a8c287c4ae5dbcb0557967abc1d38ddfd8b6e69a0eea9dced64

Sharing

Copy URL Twitter E-mail

General

Target

1d0a4045354b0a8c287c4ae5dbcb0557967abc1d38ddfd8b6e69a0eea9dced64
Size

260KB
MD5

907ff7e8c0cfc20850b94538eb69e240
SHA1

4e7da2a21d8bb2a2a235784647df7f6f1c5a2b4f
SHA256

1d0a4045354b0a8c287c4ae5dbcb0557967abc1d38ddfd8b6e69a0eea9dced64
SHA512

ee13ef83c783d8ebe4ce14369a5235a74e29c222c33fbfb7d3378f29e99dafedf91c802df6c0f078602c610f265174847da81ea79c82378cb5f1ee27f200dbf3
SSDEEP

6144:jbbbybBQo3lKcC5ipMDjtqQbkumxAPa2E+kWM+0r3:jbbbybBTlKr5ipMDjtSumaPa20k0r3

Score

N/A

Malware Config

Signatures

Files

1d0a4045354b0a8c287c4ae5dbcb0557967abc1d38ddfd8b6e69a0eea9dced64
.exe windows x86

aab0d0e2e9c2eb198a3c9447529cfecf

Code Sign

1d:34:ac:86:6c:c1:82:af:48:9d:f4:fd:83:00:b3:85
Certificate

Issuer

CN=a

Not Before

05/03/2013, 15:51

Not After

31/12/2039, 23:59

Subject

CN=a

Extended Key Usages

ExtKeyUsageCodeSigning

07:34:ee:aa:5d:9b:95:5b:fd:78:e0:8b:ad:1e:39:11:89:1e:44:02
Signer

Actual PE Digest

07:34:ee:aa:5d:9b:95:5b:fd:78:e0:8b:ad:1e:39:11:89:1e:44:02

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=a

18/10/2022, 20:47
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetDesktopWindow
GetDlgItem
EndDialog
LoadStringW
MessageBoxW
SetFocus
EnableWindow
DialogBoxParamW
LoadIconA
IsDlgButtonChecked

gdi32

GetStockObject

advapi32

RegOpenKeyExA

msvcrt

memcpy

Sections

.text
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aab0d0e2e9c2eb198a3c9447529cfecf

Code Sign

1d:34:ac:86:6c:c1:82:af:48:9d:f4:fd:83:00:b3:85Certificate

Extended Key Usages

07:34:ee:aa:5d:9b:95:5b:fd:78:e0:8b:ad:1e:39:11:89:1e:44:02Signer

Signature Validations

Verification

18/10/2022, 20:47 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

Sections

.text Size: 237KB - Virtual size: 237KB

.text2 Size: 2KB - Virtual size: 1KB

.data Size: 10KB - Virtual size: 10KB

.bss2 Size: 512B - Virtual size: 100B

.bss Size: 512B - Virtual size: 136B

1d:34:ac:86:6c:c1:82:af:48:9d:f4:fd:83:00:b3:85
Certificate

07:34:ee:aa:5d:9b:95:5b:fd:78:e0:8b:ad:1e:39:11:89:1e:44:02
Signer

18/10/2022, 20:47
Valid: false

.text
Size: 237KB - Virtual size: 237KB

.text2
Size: 2KB - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 10KB

.bss2
Size: 512B - Virtual size: 100B

.bss
Size: 512B - Virtual size: 136B