c1eae17666ecbfd7f368b11ab817c47479d9df59437d04664642f43e1e4154ea

Sharing

Copy URL Twitter E-mail

General

Target

c1eae17666ecbfd7f368b11ab817c47479d9df59437d04664642f43e1e4154ea
Size

45KB
MD5

83a102ce37abb22618211651b2e32886
SHA1

70397dc419916610d2ebe33d9299d744b5507917
SHA256

c1eae17666ecbfd7f368b11ab817c47479d9df59437d04664642f43e1e4154ea
SHA512

ae18c4f454bebfd721f6aa4945068b4148fef10e5843044382ef2b2707ed4c8697bf7c2656af4419e49dff6607486db2a7b89c690915ddcfc1e55b0604cc96f6
SSDEEP

768:Z5M3a7nHtvgXT30XpU6URhEVNMNd0gW/hJD0/RyphpKpSpfv4CkDr:ZnHJg4ZPCECWfD0/RGv+

Score

N/A

Malware Config

Signatures

Files

c1eae17666ecbfd7f368b11ab817c47479d9df59437d04664642f43e1e4154ea
.exe windows x86

f03133bdaf4cce0d38f9db8c7a9c6f5b

Code Sign

48:a8:43:d4:ca:72:fa:88:4a:e0:47:5b:2b:d2:d3:42
Certificate

Issuer

CN=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 ys5jrworq5kq ys5jrworq5kq

Not Before

03/12/2012, 15:08

Not After

31/12/2039, 23:59

Subject

CN=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 ys5jrworq5kq ys5jrworq5kq

Extended Key Usages

ExtKeyUsageCodeSigning

5c:38:7a:a8:76:66:66:f2:c5:5b:a4:cd:0e:a4:1e:88:9f:5a:83:c7
Signer

Actual PE Digest

5c:38:7a:a8:76:66:66:f2:c5:5b:a4:cd:0e:a4:1e:88:9f:5a:83:c7

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=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 ys5jrworq5kq ys5jrworq5kq

28/10/2022, 15:07
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
ExitProcess
CreateFileW
ReadFile
LoadLibraryW
GetProcAddress
GetVersionExA
UnhandledExceptionFilter
CloseHandle
ReleaseMutex
GetFileAttributesA
GetLastError
FreeLibrary
LoadLibraryA
lstrlenW
WaitForSingleObject
CreateMutexA
GetModuleHandleA
GetStartupInfoA
SetErrorMode
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
lstrcpynA
SetUnhandledExceptionFilter
lstrlenA
GetEnvironmentVariableA
GetModuleFileNameA
lstrcpyW
SetCurrentDirectoryW
GetFullPathNameW
HeapFree
HeapAlloc
GetProcessHeap
lstrcatW
GetSystemDirectoryW
GetFileAttributesW
GetSystemInfo
GetVersionExW
GetCurrentDirectoryW
lstrcmpW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesExW
GetDateFormatW
CompareStringW
CompareFileTime
SystemTimeToFileTime
DeleteFileW
LocalFree
FormatMessageW
WriteFile
GetTimeFormatW
GetFileSize
SetEndOfFile
SetFilePointer
MulDiv
CreateThread
FlushFileBuffers
FindClose
FindNextFileW
GetShortPathNameW
FindFirstFileW

user32

GetWindowThreadProcessId
SetForegroundWindow
SendMessageTimeoutA
LoadStringA
MessageBoxA
SetFocus
CreateWindowExW
MoveWindow
GetClientRect
GetWindowRect
wsprintfW
GetDlgItem
EndDialog
DestroyWindow
SetWindowLongW
EndPaint
GetSysColor
GetParent
BeginPaint
GetWindowLongW
DefWindowProcW
RegisterClassW
LoadCursorW
LoadStringW
MessageBoxW
PostMessageW
ShowWindow
WinHelpW
ChildWindowFromPoint
ScreenToClient
DestroyIcon
DialogBoxParamW
LoadIconW
FindWindowW
CharUpperBuffW
CharLowerBuffW
IsDlgButtonChecked
GetDlgItemTextW
CheckRadioButton
InvalidateRect
SetDlgItemTextW
EnableWindow
SendMessageW
SetClassLongW
CheckDlgButton

gdi32

GetStockObject
SetTextAlign
SelectObject
SetTextColor
SetBkColor
GetTextExtentPoint32W
ExtTextOutW

msvcrt

memcpy
_vsnprintf
_XcptFilter
_exit
_cexit
wcsstr
_wcsnicmp
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_c_exit
_wcsicmp
wcschr
_mbsrchr
_mbslen
__lconv_init
setlocale
_mbsinc
_strnicmp
_stricmp
strtoul
_ftol
strncpy
strchr
strrchr
_mbschr
isleadbyte
memmove
towlower
atoi
isspace
free
wcsncpy
strncmp

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
LookupPrivilegeValueA
OpenProcessToken
LookupAccountSidA
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegSetValueExA
AdjustTokenPrivileges

shlwapi

SHGetValueA
StrCmpIW
SHSetValueA
StrStrIA
PathRemoveFileSpecA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f03133bdaf4cce0d38f9db8c7a9c6f5b

Code Sign

48:a8:43:d4:ca:72:fa:88:4a:e0:47:5b:2b:d2:d3:42Certificate

Extended Key Usages

5c:38:7a:a8:76:66:66:f2:c5:5b:a4:cd:0e:a4:1e:88:9f:5a:83:c7Signer

Signature Validations

Verification

28/10/2022, 15:07 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

shlwapi

Sections

.text Size: 22KB - Virtual size: 22KB

.data Size: 6KB - Virtual size: 6KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 964B

48:a8:43:d4:ca:72:fa:88:4a:e0:47:5b:2b:d2:d3:42
Certificate

5c:38:7a:a8:76:66:66:f2:c5:5b:a4:cd:0e:a4:1e:88:9f:5a:83:c7
Signer

28/10/2022, 15:07
Valid: false

.text
Size: 22KB - Virtual size: 22KB

.data
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 964B