90ea15210095efaf781e166a8391d5c1bc18fbac315595f85597f225c0a25d68

Sharing

Copy URL Twitter E-mail

General

Target

90ea15210095efaf781e166a8391d5c1bc18fbac315595f85597f225c0a25d68
Size

124KB
MD5

0f5dabe4bf0746d76e66a76dd4dd4a75
SHA1

5d750c000dd236abdd04732015fa9fb22215b83b
SHA256

90ea15210095efaf781e166a8391d5c1bc18fbac315595f85597f225c0a25d68
SHA512

81f0655d958b2311d647d010ab3f6ffb7c117b2c774d05f1c6e79f5ba6ce8a8dfb5e230f775ae76cc911bd3983255e5bf473b90c810fdb570dfd1e234a773891
SSDEEP

1536:0oQ8jv+SEqWq9vMsEIWCcm7sLKzw9jUPxxXIh0FCVNG3Q/qIh0FCVNG3Q/hcR:0oQ86SE0MsEJjm7uY5xXzoG3QCzoG3QG

Score

N/A

Malware Config

Signatures

Files

90ea15210095efaf781e166a8391d5c1bc18fbac315595f85597f225c0a25d68
.dll windows x86

a12d4b1de9187baad879c2276d0717fd

Code Sign

36:35:08:95:64:52:5f:6f:b1:1f:52:d0:9d:06:c0:80
Certificate

Issuer

CN=nn inc

Not Before

12/01/2012, 10:07

Not After

31/12/2039, 23:59

Subject

CN=nn inc

Extended Key Usages

ExtKeyUsageCodeSigning

6d:a2:5b:e2:82:d9:49:37:b3:d2:1b:87:0e:9a:93:5d:44:00:a8:50
Signer

Actual PE Digest

6d:a2:5b:e2:82:d9:49:37:b3:d2:1b:87:0e:9a:93:5d:44:00:a8:50

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=nn inc

28/10/2022, 15:07
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteTapemark
_lclose
_llseek
WritePrivateProfileSectionW
lstrcmpW
lstrcmpi
WritePrivateProfileSectionA
WriteFileGather
WriteFileEx
WriteFile
WriteConsoleOutputCharacterA
WriteConsoleOutputA
VirtualFreeEx
VerifyVersionInfoW
UpdateResourceW
UnlockFile
TryEnterCriticalSection
SystemTimeToTzSpecificLocalTime
Sleep
SignalObjectAndWait
SetWaitableTimer
SetVolumeMountPointW
SetTapeParameters
SetLocalTime
SetHandleCount
SetFileAttributesW
SetErrorMode
SetConsoleTitleW
SetConsoleDisplayMode
SetConsoleActiveScreenBuffer
ResetEvent
ReleaseMutex
ReadConsoleW
QueryPerformanceCounter
QueryInformationJobObject
QueryDosDeviceW
Process32NextW
PeekConsoleInputW
PeekConsoleInputA
OpenSemaphoreA
OpenEventA
LocalHandle
LocalFileTimeToFileTime
IsDBCSLeadByteEx
HeapDestroy
GlobalHandle
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameA
GetTapePosition
GetSystemTimeAdjustment
GetSystemTime
GetSystemInfo
GetStartupInfoW
GetProcessVersion
GetProcessShutdownParameters
GetPrivateProfileStringA
GetPrivateProfileSectionW
GetDriveTypeW
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentDirectoryW
GetCurrencyFormatA
GetComputerNameW
GetComputerNameExA
GetCompressedFileSizeA
GetAtomNameW
FindFirstVolumeMountPointW
FindFirstVolumeA
FindFirstFileExA
FindAtomW
EscapeCommFunction
EnumTimeFormatsA
EnumResourceNamesA
CreateFileW
EnumCalendarInfoA
DnsHostnameToComputerNameW
DisableThreadLibraryCalls
DeleteFileA
DefineDosDeviceW
CreateTimerQueue
CreateNamedPipeA
CreateEventW
CreateEventA
CreateDirectoryExW
ContinueDebugEvent
CompareStringW
CommConfigDialogA
CallNamedPipeW
Beep
AreFileApisANSI
AllocConsole
GetStartupInfoA
GetProcAddress
LoadLibraryA
GetProcessHeap
GetWindowsDirectoryW
lstrcatW
_lopen

user32

DragDetect
DispatchMessageA
DestroyMenu
DefMDIChildProcW
DefFrameProcA
DdeSetQualityOfService
DdeQueryStringW
DdeNameService
DdeCreateStringHandleW
DdeAbandonTransaction
CreatePopupMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamW
CopyAcceleratorTableA
CheckRadioButton
CharUpperA
CharToOemBuffA
CharLowerBuffW
CallWindowProcW
CallWindowProcA
CallMsgFilterA
BroadcastSystemMessageW
BroadcastSystemMessageA
BeginPaint
DragObject
DrawFocusRect
DrawStateA
DrawTextA
EnableMenuItem
EndDialog
EnumClipboardFormats
EnumDesktopsA
EnumPropsA
FlashWindow
GetCapture
GetCaretPos
GetClassInfoW
GetClassLongW
GetClassNameA
GetClipCursor
GetClipboardFormatNameA
GetClipboardViewer
GetCursor
GetFocus
GetListBoxInfo
GetMenuItemCount
GetMenuItemRect
GetMenuStringA
GetScrollPos
GetThreadDesktop
GetWindowDC
GetWindowPlacement
GetWindowThreadProcessId
IMPQueryIMEW
InflateRect
InsertMenuW
IsWindow
KillTimer
LoadCursorFromFileW
LoadIconW
LoadImageA
LoadKeyboardLayoutA
LoadMenuA
MapVirtualKeyExA
MapVirtualKeyW
MapWindowPoints
MsgWaitForMultipleObjects
OpenInputDesktop
PackDDElParam
PeekMessageA
RedrawWindow
RegisterClassExA
RegisterHotKey
SendInput
SendMessageA
SetActiveWindow
SetCaretPos
SetClassWord
SetKeyboardState
SetMenu
VkKeyScanExA
UnregisterDeviceNotification
UnregisterClassW
UnhookWindowsHook
TranslateMDISysAccel
TrackMouseEvent
SystemParametersInfoA
SwitchToThisWindow
SetWindowPos
SetPropA
SetMenuItemInfoA

gdi32

FlattenPath
AbortPath
AngleArc
Arc
CheckColorsInGamut
ColorCorrectPalette
CreateBitmap
CreateBitmapIndirect
CreateColorSpaceA
CreatePolyPolygonRgn
EngAssociateSurface
EngCreateBitmap
EngDeletePath
EngFillPath
EngStretchBlt
EngStrokePath
EngUnlockSurface
EnumObjects
ExcludeClipRect
ExtEscape
ExtFloodFill
FONTOBJ_pvTrueTypeFontFile
FONTOBJ_pxoGetXform
FixBrushOrgEx
GdiAddGlsRecord
GdiCleanCacheDC
GdiConsoleTextOut
GdiConvertMetaFilePict
GdiConvertPalette
GdiConvertRegion
GdiCreateLocalMetaFilePict
GdiEntry3
GdiEntry7
GdiGetLocalBrush
GdiGetSpoolMessage
GdiPrinterThunk
GdiProcessSetup
GdiQueryFonts
GdiQueryTable
GdiReleaseLocalDC
GdiSwapBuffers
GetBrushOrgEx
GetCharABCWidthsI
GetColorSpace
GetDCOrgEx
GetDIBits
GetDeviceGammaRamp
GetEnhMetaFilePixelFormat
GetGlyphIndicesA
GetGlyphOutline
GetLogColorSpaceW
GetMetaFileBitsEx
GetMetaRgn
GetMiterLimit
GetObjectType
GetStockObject
GetTextCharsetInfo
GetTextExtentPointA
GetTextExtentPointI
GetTextMetricsA
IntersectClipRect
InvertRgn
NamedEscape
PATHOBJ_bEnum
PaintRgn
PlayMetaFile
PolyBezier
PolyTextOutA
PolyTextOutW
QueryFontAssocStatus
RealizePalette
Rectangle
RemoveFontMemResourceEx
RemoveFontResourceA
RemoveFontResourceExW
RemoveFontResourceTracking
ResetDCA
STROBJ_dwGetCodePage
SetBitmapDimensionEx
SetEnhMetaFileBits
SetMapMode
SetMapperFlags
SetMiterLimit
SetTextColor
SetWinMetaFileBits
SetWindowOrgEx
SwapBuffers
UpdateColors
UpdateICMRegKeyA
WidenPath
XLATEOBJ_cGetPalette
XLATEOBJ_iXlate
AbortDoc

shell32

SHGetDiskFreeSpaceExA
ShellExecuteW
ShellExecuteExW
ShellExecuteExA
ShellExecuteEx
ShellAboutW
ShellAboutA
SHQueryRecycleBinW
SHPathPrepareForWriteA
SHLoadNonloadedIconOverlayIdentifiers
SHLoadInProc
SHInvokePrinterCommandA
CheckEscapesW
CommandLineToArgvW
DoEnvironmentSubstA
DragAcceptFiles
DragFinish
DragQueryFileA
DragQueryFileAorW
DragQueryFileW
DuplicateIcon
ExtractAssociatedIconExA
ExtractAssociatedIconExW
ExtractIconA
ExtractIconExA
ExtractIconExW
FindExecutableW
SHAppBarMessage
SHBindToParent
SHBrowseForFolder
SHBrowseForFolderA
SHCreateDirectoryExW
SHCreateProcessAsUserW
SHEmptyRecycleBinA
SHEmptyRecycleBinW
SHFileOperationA
SHFileOperationW
SHGetDataFromIDListA
SHGetDataFromIDListW
SHGetSpecialFolderPathW
SHGetFileInfo
SHGetFileInfoA
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathW
SHGetIconOverlayIndexA
SHGetIconOverlayIndexW
SHGetInstanceExplorer
SHGetMalloc
SHGetPathFromIDList
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
Shell_NotifyIcon

ole32

CoMarshalInterThreadInterfaceInStream
CoMarshalInterface
CoQueryReleaseObject
CoRegisterMessageFilter
CoResumeClassObjects
CoSetCancelObject
CoSuspendClassObjects
CoTaskMemFree
CoUninitialize
CreateBindCtx
CreateDataAdviseHolder
CreateOleAdviseHolder
CreateStdProgressIndicator
DllGetClassObjectWOW
FreePropVariantArray
GetClassFile
GetConvertStg
GetHGlobalFromILockBytes
GetHGlobalFromStream
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserSize
HBRUSH_UserFree
HBRUSH_UserMarshal
HDC_UserMarshal
HDC_UserSize
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HICON_UserUnmarshal
HMENU_UserMarshal
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HWND_UserFree
HWND_UserSize
OleCreate
OleCreateEmbeddingHelper
OleCreateFromFile
OleCreateFromFileEx
OleCreateLinkFromData
OleCreateLinkToFile
OleCreateStaticFromData
OleDoAutoConvert
OleGetAutoConvert
OleIsRunning
OleLoad
OleLoadFromStream
OleMetafilePictFromIconAndLabel
OleRegEnumFormatEtc
OleRegEnumVerbs
OleRegGetMiscStatus
OleSetClipboard
OleUninitialize
ProgIDFromCLSID
PropStgNameToFmtId
PropVariantCopy
ReadFmtUserTypeStg
ReleaseStgMedium
SNB_UserMarshal
SetConvertStg
StgConvertPropertyToVariant
StgConvertVariantToProperty
StgGetIFillLockBytesOnFile
UtGetDvtd32Info
WriteOleStg
CoLoadLibrary
CoIsOle1Class
CoInitializeWOW
CoImpersonateClient
CoGetObject
CoGetMarshalSizeMax
CoEnableCallCancellation
CoDosDateTimeToFileTime
CoDeactivateObject
CoCreateInstanceEx
CLIPFORMAT_UserUnmarshal
CoGetCallContext

shlwapi

StrChrIA
StrChrIW
StrChrW
StrCmpNA
StrCmpNIA
StrCmpNW
StrRChrA
StrRChrIA
StrRStrIW
StrStrIA
StrStrIW

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a12d4b1de9187baad879c2276d0717fd

Code Sign

36:35:08:95:64:52:5f:6f:b1:1f:52:d0:9d:06:c0:80Certificate

Extended Key Usages

6d:a2:5b:e2:82:d9:49:37:b3:d2:1b:87:0e:9a:93:5d:44:00:a8:50Signer

Signature Validations

Verification

28/10/2022, 15:07 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

shlwapi

Sections

.text Size: 38KB - Virtual size: 37KB

.data Size: 512B - Virtual size: 588B

.rsrc Size: 82KB - Virtual size: 81KB

.reloc Size: 2KB - Virtual size: 2KB

36:35:08:95:64:52:5f:6f:b1:1f:52:d0:9d:06:c0:80
Certificate

6d:a2:5b:e2:82:d9:49:37:b3:d2:1b:87:0e:9a:93:5d:44:00:a8:50
Signer

28/10/2022, 15:07
Valid: false

.text
Size: 38KB - Virtual size: 37KB

.data
Size: 512B - Virtual size: 588B

.rsrc
Size: 82KB - Virtual size: 81KB

.reloc
Size: 2KB - Virtual size: 2KB