5694db2d893509a9414f8008d82a7717c6c89b1398bbf63e3b9682cce58c3c48

Sharing

Copy URL Twitter E-mail

General

Target

5694db2d893509a9414f8008d82a7717c6c89b1398bbf63e3b9682cce58c3c48
Size

162KB
MD5

96e27e6273d03d0b73a6156f5a8ef5b0
SHA1

203826330ff78448ca07e00be10deedfb31486f7
SHA256

5694db2d893509a9414f8008d82a7717c6c89b1398bbf63e3b9682cce58c3c48
SHA512

c601148366b4a7b2f61835d8e7d26d59e0c2a81c0f578c3856e523c71f23a83ab4fdf5cc5073ea281800e8bff90f4ddac2a9a961c4024949754b2b9786dce6cd
SSDEEP

3072:zd977UO7qT3TFciqrHNqohuivtHw4bXv8lSujE9Iln56IL38:JF7UO7qT3TFciqrtDTvtHf7v8lSuX56h

Score

N/A

Malware Config

Signatures

Files

5694db2d893509a9414f8008d82a7717c6c89b1398bbf63e3b9682cce58c3c48
.exe windows x86

10f226b7af177fdc58215eb68b1342cd

Code Sign

01
Certificate

Issuer

O=Internet Widgits Pty Ltd,ST=FF,C=GG

Not Before

24/04/2013, 20:53

Not After

24/04/2015, 20:53

Subject

O=Internet Widgits Pty Ltd,ST=DF,C=GF

e3:e8:7b:9a:e8:69:bd:82:fa:f1:66:f8:96:80:0e:56:16:8c:ec:2e
Signer

Actual PE Digest

e3:e8:7b:9a:e8:69:bd:82:fa:f1:66:f8:96:80:0e:56:16:8c:ec:2e

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

O=Internet Widgits Pty Ltd,ST=DF,C=GF

20/10/2022, 18:39
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
LoadCursorA
UpdateWindow
LoadStringA
LoadAcceleratorsA
GetMessageA
ShowWindow
ReleaseCapture
SetCapture
LoadBitmapA
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
InvalidateRect
RegisterClassExA
CreateWindowExA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA

gdi32

DeleteObject
DeleteDC
BitBlt
Rectangle
CreateCompatibleDC
SelectObject
CreateSolidBrush

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetStartupInfoA
GetModuleHandleA

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10f226b7af177fdc58215eb68b1342cd

Code Sign

01Certificate

e3:e8:7b:9a:e8:69:bd:82:fa:f1:66:f8:96:80:0e:56:16:8c:ec:2eSigner

Signature Validations

Verification

20/10/2022, 18:39 Valid: false

Headers

File Characteristics

Imports

user32

gdi32

msvcrt

kernel32

Sections

.text Size: 10KB - Virtual size: 12KB

.rdata Size: 1KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 148KB - Virtual size: 148KB

01
Certificate

e3:e8:7b:9a:e8:69:bd:82:fa:f1:66:f8:96:80:0e:56:16:8c:ec:2e
Signer

20/10/2022, 18:39
Valid: false

.text
Size: 10KB - Virtual size: 12KB

.rdata
Size: 1KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 148KB - Virtual size: 148KB