5214ade4ffff63753e3978b99928ede1d880f2b7fcf2d50633b0aedcb336b421

Sharing

Copy URL Twitter E-mail

General

Target

5214ade4ffff63753e3978b99928ede1d880f2b7fcf2d50633b0aedcb336b421
Size

47KB
MD5

84f2ae54f26eca01a90f7a8deebcfec4
SHA1

5a6fa3704ba2069a72f839e8c314db527d833740
SHA256

5214ade4ffff63753e3978b99928ede1d880f2b7fcf2d50633b0aedcb336b421
SHA512

a4b42f7dd0c367245b63119d6847893fce6c0ff4676b16136afbf3c24643cfd54003d1eba6c286c21c5adc9725a8d7bd72147fd2c6ad75fa7e867c10d9a317a1
SSDEEP

768:nm2/AEpzmoydCae5cyhmU4cfcr+BqIV142SfJ0T9nU0pisKl4qZ:m24EpfydCpK+BU5g4jfJ0RxpisKldZ

Score

N/A

Malware Config

Signatures

Files

5214ade4ffff63753e3978b99928ede1d880f2b7fcf2d50633b0aedcb336b421
.exe windows x86

cda4ea812b8e6129d98768160836cced

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:07:11:43:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/05/2002, 00:55

Not After

25/11/2003, 01:05

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

df:93:7d:a1:93:14:f7:d3:42:61:01:de:2f:ec:28:14:92:02:2f:6d
Signer

Actual PE Digest

df:93:7d:a1:93:14:f7:d3:42:61:01:de:2f:ec:28:14:92:02:2f:6d

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

28/10/2022, 15:04
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
GetFullPathNameW
GetCurrentThreadId
GetCommandLineW
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetSystemDirectoryW
LoadLibraryExW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
SetErrorMode
FindFirstFileW
FindClose
lstrlenA
GetTickCount
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
LoadLibraryW
LoadLibraryA
GetVersionExA
CreateFileW
GetLastError
SetFilePointer
ReadFile
CloseHandle

user32

PeekMessageA
TranslateMessage
CallWindowProcW
FillRect
GetWindowTextA
PostMessageA
GetParent
RegisterClassW
CreateWindowExW
DialogBoxParamW
MessageBoxW
ShowWindow
LoadStringW
EndPaint
GetClientRect
ReleaseDC
GetDC
CallNextHookEx
FindWindowW
LoadIconA
GetWindowPlacement
GetMessageA
RegisterWindowMessageA
SetWindowsHookExA
UnhookWindowsHookEx
DestroyWindow
PostQuitMessage
DefWindowProcW
IsIconic
GetClassInfoW
SendMessageW
EnableMenuItem
GetWindowLongW
SetWindowLongW
SetClassLongA
GetDlgItemTextW
LoadCursorA
SetCursor
EnableWindow
SetForegroundWindow
BeginPaint
DispatchMessageA
SendMessageA
GetSysColor
MapWindowPoints
InvalidateRect
UpdateWindow
SetDlgItemTextW
GetWindowLongA
WinHelpA
IsDlgButtonChecked
EndDialog
SetWindowLongA
SendDlgItemMessageA
GetDlgItem
SetFocus
GetWindowRect
SetWindowPos
GetSystemMetrics
LoadBitmapA

gdi32

SelectObject
DeleteObject
DeleteDC
GetPixel
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
SetBkColor
GetStockObject
CreateSolidBrush
GetObjectA
LineTo
MoveToEx
CreatePen
ExtTextOutA
SetTextColor
Rectangle

scnpst32

RCVR_Initialize32@8
RCVR_SetProgressCallbacks32@8
RCVR_Deinitialize32@0
RCVR_Scan32@28
RCVR_Repair32@8
RCVR_CountBlocks32@16

scnpst64

RCVR_SetProgressCallbacks64@8
RCVR_Deinitialize64@0
RCVR_Scan64@28
RCVR_Repair64@8
RCVR_CountBlocks64@16
RCVR_Initialize64@8

msvcrt

_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_except_handler3
_wtoi
iswspace
towupper
_vsnwprintf

advapi32

RegQueryValueExW
RegOpenKeyExW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cda4ea812b8e6129d98768160836cced

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9dCertificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6Certificate

Extended Key Usages

Key Usages

61:07:11:43:00:00:00:00:00:34Certificate

Extended Key Usages

Key Usages

df:93:7d:a1:93:14:f7:d3:42:61:01:de:2f:ec:28:14:92:02:2f:6dSigner

Signature Validations

Verification

28/10/2022, 15:04 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

scnpst32

scnpst64

msvcrt

advapi32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 512B - Virtual size: 19KB

.rsrc Size: 26KB - Virtual size: 26KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

61:07:11:43:00:00:00:00:00:34
Certificate

df:93:7d:a1:93:14:f7:d3:42:61:01:de:2f:ec:28:14:92:02:2f:6d
Signer

28/10/2022, 15:04
Valid: false

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 512B - Virtual size: 19KB

.rsrc
Size: 26KB - Virtual size: 26KB