d7f29c14c1e02e59045bf4a94e0c7c834f2b9e4d77c65ce02f79f4a63b96a7a4

Sharing

Copy URL Twitter E-mail

General

Target

d7f29c14c1e02e59045bf4a94e0c7c834f2b9e4d77c65ce02f79f4a63b96a7a4
Size

536KB
MD5

471d948528fcdc951b9ecf9033577480
SHA1

f0c68d2a1db61899adf22fdfdc39b38102d59192
SHA256

d7f29c14c1e02e59045bf4a94e0c7c834f2b9e4d77c65ce02f79f4a63b96a7a4
SHA512

e924cd5d1b3c5f8e6e57262f98096433b17576d3305176f3e12695f2c7504218e0c90b4f8f77c380f6c381dc6dc618a83846830a78661ac46a962c6d42821c7d
SSDEEP

12288:CZEHVp5qFV4j9ouUDcTKKVacMik8O4+LS5bYy5M3sJ4O1t1:QwVpMFV42umwKNf/8O4Gok04O1b

Score

N/A

Malware Config

Signatures

Files

d7f29c14c1e02e59045bf4a94e0c7c834f2b9e4d77c65ce02f79f4a63b96a7a4
.exe windows x86

5eae39a2664aafda4077c913d66c95f0

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

e4:28:e5:15:10:5d:c0:bf:7b:1f:c4:38:42:3f:e8:cf
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

20/11/2014, 00:00

Not After

20/11/2015, 23:59

Subject

CN=Computer-service OOO,O=Computer-service OOO,POSTALCODE=188320,STREET=Area Gatchina\, 36,L=Kommunar,ST=Leningradskaya oblast,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

17:03:43:92:4b:6e:cf:55:cb:4d:f3:f3:0f:2c:cb:df:14:22:e3:bf
Signer

Actual PE Digest

17:03:43:92:4b:6e:cf:55:cb:4d:f3:f3:0f:2c:cb:df:14:22:e3:bf

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Computer-service OOO,O=Computer-service OOO,POSTALCODE=188320,STREET=Area Gatchina\, 36,L=Kommunar,ST=Leningradskaya oblast,C=RU

20/10/2022, 18:39
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAllocEx
GetTickCount
VirtualFree
GetFileAttributesA
LocalLock
VirtualAlloc
CloseHandle
CreateFileA
GetConsoleMode
SetConsoleMode
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapAlloc
HeapReAlloc
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
HeapSize
ReadConsoleInputA

gdi32

CreateCompatibleDC

oleaut32

SysAllocString

secur32

SetContextAttributesA

ws2_32

setsockopt

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 464KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ISYX
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5eae39a2664aafda4077c913d66c95f0

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

e4:28:e5:15:10:5d:c0:bf:7b:1f:c4:38:42:3f:e8:cfCertificate

Extended Key Usages

Key Usages

17:03:43:92:4b:6e:cf:55:cb:4d:f3:f3:0f:2c:cb:df:14:22:e3:bfSigner

Signature Validations

Verification

20/10/2022, 18:39 Valid: false

Headers

File Characteristics

Imports

kernel32

gdi32

oleaut32

secur32

ws2_32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 464KB - Virtual size: 462KB

.ISYX Size: 8KB - Virtual size: 5KB

.rsrc Size: 28KB - Virtual size: 26KB

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

e4:28:e5:15:10:5d:c0:bf:7b:1f:c4:38:42:3f:e8:cf
Certificate

17:03:43:92:4b:6e:cf:55:cb:4d:f3:f3:0f:2c:cb:df:14:22:e3:bf
Signer

20/10/2022, 18:39
Valid: false

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 464KB - Virtual size: 462KB

.ISYX
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 28KB - Virtual size: 26KB