dd8cebc8aa0f55129111847cb4d6d475f98235b311b5c7fefe6fb8bdbff21361

Sharing

Copy URL Twitter E-mail

General

Target

dd8cebc8aa0f55129111847cb4d6d475f98235b311b5c7fefe6fb8bdbff21361
Size

93KB
MD5

81854a47249b3f6fb5664f07ead46381
SHA1

db4075fe263a9d719389989aa8652f3be28dcc23
SHA256

dd8cebc8aa0f55129111847cb4d6d475f98235b311b5c7fefe6fb8bdbff21361
SHA512

eb7ab894ef9273ea5ec902f677b375e244b2c39e60ec65dbac1a362daa7f4acbf71a9ce0ab0735d2274236e10e9cd6f0977a01ff89294cf9b99c808287332ef2
SSDEEP

1536:b50eW4Z56/EDZXaD4J1eZXdmaXNWLJayCGZY7BvZ/G5ruAkGlOwb4isKldl:tWosEDZXFMoioCLUuAv/bdZ

Score

N/A

Malware Config

Signatures

Files

dd8cebc8aa0f55129111847cb4d6d475f98235b311b5c7fefe6fb8bdbff21361
.exe windows x86

8e8023743f4fdb3a00a744846cfe0001

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:07:11:43:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/05/2002, 00:55

Not After

25/11/2003, 01:05

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8e:22:34:00:56:4b:31:ab:28:da:6a:8a:e9:d6:92:f7:82:36:27:94
Signer

Actual PE Digest

8e:22:34:00:56:4b:31:ab:28:da:6a:8a:e9:d6:92:f7:82:36:27:94

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

18/10/2022, 20:49
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA

gdi32

ExtTextOutA
SetBkColor
ExtTextOutW
GetTextExtentPoint32W
CreateSolidBrush
DeleteObject
BitBlt
SetTextColor
DeleteDC
CreateBitmap
SelectObject
CreateCompatibleDC
GetBitmapBits
GetObjectA
PatBlt
CreateFontIndirectA
GetDeviceCaps

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
LocalAlloc
GetLastError
LocalFree
GlobalAlloc
GlobalFree
InterlockedDecrement
GetCurrentThreadId
GetCommandLineA
InterlockedIncrement
lstrlenW
GetModuleHandleA
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetProcAddress
LoadLibraryA
lstrcmpA
GetSystemDefaultLCID
LockResource
GetSystemDefaultLangID
MulDiv
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess

shlwapi

wvnsprintfW
wvnsprintfA

msvcrt

_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_c_exit
_onexit
__dllonexit
realloc
memset
malloc
atoi
??2@YAPAXI@Z
??3@YAXPAX@Z
free
_except_handler3
_exit

user32

SetTimer
PostMessageA
IsWindowEnabled
EnumWindows
PostQuitMessage
DestroyWindow
DefWindowProcA
GetWindowLongA
SetWindowLongA
CreateWindowExA
RegisterClassA
MessageBoxA
LoadStringA
DispatchMessageA
TranslateMessage
GetMessageA
IsWindow
CharNextA
GetSystemMetrics
GetWindowRect
SystemParametersInfoA
OffsetRect
SetWindowPos
SetWindowTextA
SetWindowTextW
IsWindowUnicode
SetRect
GetClientRect
GetMessagePos
GetAsyncKeyState
IsWindowVisible
FindWindowA
GetSysColor
GetClassNameA
InvalidateRect
EndPaint
ReleaseDC
BeginPaint
ReleaseCapture
SetCapture
GetIconInfo
InflateRect
GetDC
GetCursorPos
GetCursor
ClientToScreen
EnumChildWindows
GetActiveWindow
RegisterClassExA
LoadCursorA
GetCapture
CharUpperA
CharLowerA
RegisterWindowMessageA
LoadBitmapA
LoadIconA
GetWindowDC
KillTimer
IsZoomed
SendMessageTimeoutA
SendMessageA
SetFocus
FindWindowExA
GetWindow
GetForegroundWindow
ShowWindow
GetWindowPlacement
UpdateWindow
SetWindowPlacement
SetRectEmpty
IsRectEmpty
IsIconic
GetClassNameW
GetParent
SetForegroundWindow
GetWindowThreadProcessId

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoRegisterClassObject
CoRevokeClassObject

oleaut32

VarUI4FromStr
VariantInit

Exports

Exports

_resetstkoflw

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8e8023743f4fdb3a00a744846cfe0001

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9dCertificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6Certificate

Extended Key Usages

Key Usages

61:07:11:43:00:00:00:00:00:34Certificate

Extended Key Usages

Key Usages

8e:22:34:00:56:4b:31:ab:28:da:6a:8a:e9:d6:92:f7:82:36:27:94Signer

Signature Validations

Verification

18/10/2022, 20:49 Valid: false

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

shlwapi

msvcrt

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 41KB

.data Size: 512B - Virtual size: 592B

.rsrc Size: 49KB - Virtual size: 49KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

61:07:11:43:00:00:00:00:00:34
Certificate

8e:22:34:00:56:4b:31:ab:28:da:6a:8a:e9:d6:92:f7:82:36:27:94
Signer

18/10/2022, 20:49
Valid: false

.text
Size: 42KB - Virtual size: 41KB

.data
Size: 512B - Virtual size: 592B

.rsrc
Size: 49KB - Virtual size: 49KB