15ab3935563e68205f69c8a4b382a47f8fe76b3561a18e900b2d256e75322cbf

Sharing

Copy URL

Twitter E-mail

General

Target

15ab3935563e68205f69c8a4b382a47f8fe76b3561a18e900b2d256e75322cbf
Size

311KB
MD5

73e8dd97420294fffd004eeb08cafc70
SHA1

7e3ddb4d196b9daffbffcfc3463cddb3a8c54fbf
SHA256

15ab3935563e68205f69c8a4b382a47f8fe76b3561a18e900b2d256e75322cbf
SHA512

d033707a12963bf8fab7d16490181e2f919ce2af9fb738e1c4aec640f50f703d1634e6d485326aa03f684a0e815336316321e7d5899f6ee6eb5368cb11976692
SSDEEP

6144:8JGp34q6go6LCehEJbZIxnk++aBqHvoC5syZ1:8Ep345gKbZkr+aBywkXZ1

Score

N/A

Malware Config

Signatures

Files

15ab3935563e68205f69c8a4b382a47f8fe76b3561a18e900b2d256e75322cbf
.exe windows x86

d07fb96015556de95da3a968982c138b

Code Sign

3c:2e:38:1a:0d:d6:90:4d:b2:08:3f:7a:98:f9:34:36
Certificate

Issuer

CN=T-Install

Not Before

06-04-2014 13:54

Not After

31-12-2039 23:59

Subject

CN=T-Installer

c9:ad:3c:88:f1:38:f9:a1:8b:91:55:34:01:9b:af:f7:56:3b:5f:bf
Signer

Actual PE Digest

c9:ad:3c:88:f1:38:f9:a1:8b:91:55:34:01:9b:af:f7:56:3b:5f:bf

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=T-Installer

18-10-2022 21:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
HeapAlloc
HeapFree
GetProcessHeap
GetModuleHandleA
GetFileSize
MapViewOfFile
GetTickCount
Sleep
GetLastError
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
GetModuleHandleW
GetVersionExW
GetFullPathNameW
CloseHandle
VirtualAlloc
GetProcAddress
VirtualFree
FreeLibrary
GetTempPathA
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
SetStdHandle
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
GetOEMCP
GetACP
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineW
RaiseException
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
IsDebuggerPresent
GetConsoleMode
GetCurrentThreadId
IsValidCodePage
VirtualQuery

gdi32

CreateBitmap
SelectObject
CreateCompatibleDC
GetObjectW
DeleteDC

user32

MessageBoxW
UpdateLayeredWindow
SetTimer
GetWindowRect
MonitorFromPoint
LoadCursorW
GetDC
TranslateMessage
PeekMessageW
ReleaseDC
GetDesktopWindow
ShowWindow
CreateWindowExW
RegisterClassW
UpdateWindow
GetMonitorInfoW
DefWindowProcW
DispatchMessageW
DestroyWindow

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d07fb96015556de95da3a968982c138b

Code Sign

3c:2e:38:1a:0d:d6:90:4d:b2:08:3f:7a:98:f9:34:36Certificate

c9:ad:3c:88:f1:38:f9:a1:8b:91:55:34:01:9b:af:f7:56:3b:5f:bfSigner

Signature Validations

Verification

18-10-2022 21:00 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

Sections

.text Size: 210KB - Virtual size: 210KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 14KB - Virtual size: 22KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 35KB - Virtual size: 34KB

3c:2e:38:1a:0d:d6:90:4d:b2:08:3f:7a:98:f9:34:36
Certificate

c9:ad:3c:88:f1:38:f9:a1:8b:91:55:34:01:9b:af:f7:56:3b:5f:bf
Signer

18-10-2022 21:00
Valid: false

.text
Size: 210KB - Virtual size: 210KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 14KB - Virtual size: 22KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 35KB - Virtual size: 34KB