c9e9c07503a5f8dadefa48ebda328a6b7a175e270127fbe43c113d7520cd01fc

Sharing

Copy URL Twitter E-mail

General

Target

c9e9c07503a5f8dadefa48ebda328a6b7a175e270127fbe43c113d7520cd01fc
Size

315KB
MD5

a3adf5cb276d9d546e4ffc13490c1590
SHA1

1baa10611366078fb464a27e9c5609c49981d930
SHA256

c9e9c07503a5f8dadefa48ebda328a6b7a175e270127fbe43c113d7520cd01fc
SHA512

3b22d9428b33b7e58d91fbb0e6355c79f2c8b56679be11f22f4c5a487a1f770c245a273e508f2c1042e88a1689fbb519ca4e02652516a624442fb13a193b91b1
SSDEEP

6144:TGp/QX4DbvOcP7ZDW+k4flSBP+Ttyu/Dvc:B4DHj24flSd+TN/Dvc

Score

N/A

Malware Config

Signatures

Files

c9e9c07503a5f8dadefa48ebda328a6b7a175e270127fbe43c113d7520cd01fc
.exe windows x86

dbaa3b1345027c20ed49bf029bad353c

Code Sign

3c:2e:38:1a:0d:d6:90:4d:b2:08:3f:7a:98:f9:34:36
Certificate

Issuer

CN=T-Install

Not Before

06/04/2014, 13:54

Not After

31/12/2039, 23:59

Subject

CN=T-Installer

8c:82:f6:2d:fc:2a:b7:2b:8b:24:0e:ab:41:73:9e:01:cb:07:57:0d
Signer

Actual PE Digest

8c:82:f6:2d:fc:2a:b7:2b:8b:24:0e:ab:41:73:9e:01:cb:07:57:0d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=T-Installer

28/10/2022, 15:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualProtect
LoadLibraryA
GetTempPathA
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
LockResource
LoadResource
SizeofResource
GetModuleHandleA
GetModuleHandleW
FindResourceW
VirtualAlloc
GetFileSize
MapViewOfFile
FindClose
CloseHandle
GetFullPathNameW
CreateFileA
FindFirstFileA
HeapAlloc
HeapFree
GetProcessHeap
GetProcAddress
FreeLibrary
GetVersionExW
GetTickCount
GetLastError
Sleep
SetEndOfFile
CreateFileW
WriteConsoleW
SetFilePointerEx
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
LoadLibraryExW
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
VirtualQuery
SetFilePointer
ReadConsoleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineW
InitializeCriticalSectionAndSpinCount
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsProcessorFeaturePresent
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCurrentThreadId
ReadFile
GetConsoleMode

gdi32

SelectObject
DeleteDC
CreateCompatibleDC
CreateBitmap
GetObjectW

user32

DestroyWindow
GetMonitorInfoW
MonitorFromPoint
LoadCursorW
GetDesktopWindow
GetWindowRect
ReleaseDC
GetDC
UpdateWindow
SetTimer
UpdateLayeredWindow
ShowWindow
CreateWindowExW
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
MessageBoxW

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dbaa3b1345027c20ed49bf029bad353c

Code Sign

3c:2e:38:1a:0d:d6:90:4d:b2:08:3f:7a:98:f9:34:36Certificate

8c:82:f6:2d:fc:2a:b7:2b:8b:24:0e:ab:41:73:9e:01:cb:07:57:0dSigner

Signature Validations

Verification

28/10/2022, 15:04 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

Sections

.text Size: 207KB - Virtual size: 207KB

.rdata Size: 47KB - Virtual size: 47KB

.data Size: 14KB - Virtual size: 22KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 42KB - Virtual size: 42KB

3c:2e:38:1a:0d:d6:90:4d:b2:08:3f:7a:98:f9:34:36
Certificate

8c:82:f6:2d:fc:2a:b7:2b:8b:24:0e:ab:41:73:9e:01:cb:07:57:0d
Signer

28/10/2022, 15:04
Valid: false

.text
Size: 207KB - Virtual size: 207KB

.rdata
Size: 47KB - Virtual size: 47KB

.data
Size: 14KB - Virtual size: 22KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 42KB - Virtual size: 42KB