b1f1636b6ab4db1c11f1fb3f68de01ac1eff4934b37e40c286f70da5f6a2e5b1

Sharing

Copy URL Twitter E-mail

General

Target

b1f1636b6ab4db1c11f1fb3f68de01ac1eff4934b37e40c286f70da5f6a2e5b1
Size

52KB
MD5

812be7ec8f6626ecfa383a8665299a9a
SHA1

de951a870dec3e4b00d2ebb8cda2ed4e5962d668
SHA256

b1f1636b6ab4db1c11f1fb3f68de01ac1eff4934b37e40c286f70da5f6a2e5b1
SHA512

76a3a001ed9a5809c26d0237c995c15cb1fefd857fbb9b40c9f172b4bb8fdf8a4c637df80fb02434a34f2abdb4a084244f2559e9146bc46e248ecb2cf8a87632
SSDEEP

768:wOwRYB7q9RE4EGwTi/cCqm2bB03NuRSnCpssO+wcSDPnGMEaXg:lq9REEki/cHm8yHC5GDvlE+g

Score

N/A

Malware Config

Signatures

Files

b1f1636b6ab4db1c11f1fb3f68de01ac1eff4934b37e40c286f70da5f6a2e5b1
.dll windows x86

57786ee4ddc086e658fb200f575d1862

Code Sign

28:20:01:7a:4a:72:db:56:b8:ce:01:c6:34:c1:d6:e9
Certificate

Issuer

CN=eryer

Not Before

05/02/2012, 09:13

Not After

31/12/2039, 23:59

Subject

CN=eryer

Extended Key Usages

ExtKeyUsageCodeSigning

12:0e:38:db:41:c5:97:cf:99:bc:2b:2e:bc:2a:60:a1:f2:cc:3e:24
Signer

Actual PE Digest

12:0e:38:db:41:c5:97:cf:99:bc:2b:2e:bc:2a:60:a1:f2:cc:3e:24

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=eryer

18/10/2022, 20:45
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetWindowsDirectoryW
lstrcatW
CreateFileW
GetSystemInfo
GetProcessHeap

user32

DefMDIChildProcW
DlgDirListW
DlgDirSelectExW
DrawFrameControl
DrawStateW
EnumDesktopsW
EnumPropsW
EnumWindowStationsA
FillRect
FindWindowExW
GetAltTabInfoW
GetClassInfoA
GetClassInfoExA
GetClipCursor
GetClipboardData
GetComboBoxInfo
GetCursor
GetDCEx
GetGuiResources
GetKeyboardLayoutList
GetKeyboardState
GetMenuCheckMarkDimensions
GetMenuItemInfoA
GetMenuStringA
GetMenuStringW
GetMessageA
GetWindowLongW
GetWindowModuleFileName
GetWindowModuleFileNameW
IMPSetIMEW
InSendMessage
DefFrameProcA
InvalidateRect
IsCharUpperW
IsDialogMessage
IsDialogMessageA
IsDialogMessageW
LoadAcceleratorsA
LoadBitmapA
LoadCursorA
LoadCursorFromFileA
LoadIconW
LoadMenuW
MonitorFromRect
OffsetRect
OpenClipboard
OpenDesktopW
OpenIcon
PackDDElParam
RealGetWindowClassW
RegisterClassW
RemovePropA
SendIMEMessageExW
SendMessageTimeoutA
SetCaretBlinkTime
SetClipboardData
SetDeskWallpaper
SetMenuItemBitmaps
SetMenuItemInfoA
SetScrollPos
SetUserObjectInformationA
SetWindowContextHelpId
SetWindowPos
SetWindowTextA
SetWindowsHookExA
SetWindowsHookExW
UnregisterClassW
UserHandleGrantAccess
ValidateRect
VkKeyScanExW
DefDlgProcA
DdeUninitialize
DdeSetQualityOfService
DdeReconnect
DdeNameService
DdeGetLastError
DdeFreeDataHandle
DdeCreateStringHandleW
DdeConnectList
DdeClientTransaction
CreateWindowExA
CreatePopupMenu
CreateMDIWindowW
CreateDesktopW
CloseWindowStation
ChildWindowFromPointEx
CheckMenuRadioItem
CharToOemBuffA
ChangeDisplaySettingsExA
AttachThreadInput
AllowSetForegroundWindow
InflateRect

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
ChooseColorA

msvcrt

memset

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57786ee4ddc086e658fb200f575d1862

Code Sign

28:20:01:7a:4a:72:db:56:b8:ce:01:c6:34:c1:d6:e9Certificate

Extended Key Usages

12:0e:38:db:41:c5:97:cf:99:bc:2b:2e:bc:2a:60:a1:f2:cc:3e:24Signer

Signature Validations

Verification

18/10/2022, 20:45 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 484B

.text2 Size: 23KB - Virtual size: 23KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 1KB - Virtual size: 1KB

28:20:01:7a:4a:72:db:56:b8:ce:01:c6:34:c1:d6:e9
Certificate

12:0e:38:db:41:c5:97:cf:99:bc:2b:2e:bc:2a:60:a1:f2:cc:3e:24
Signer

18/10/2022, 20:45
Valid: false

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 484B

.text2
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 1KB - Virtual size: 1KB