f35bb692dbfc988e334ad7f01252b31f53359cdbd2975ca470fe60cdfa4f8c20

Sharing

Copy URL Twitter E-mail

General

Target

f35bb692dbfc988e334ad7f01252b31f53359cdbd2975ca470fe60cdfa4f8c20
Size

311KB
MD5

c624a624973bd3d93e101de28916d63a
SHA1

c6108cd43f096ed038f9e539bcdd2db07c9c0309
SHA256

f35bb692dbfc988e334ad7f01252b31f53359cdbd2975ca470fe60cdfa4f8c20
SHA512

ba2e644493a14517ea009494bb961deb225a4dc4fd209d9ed62d9b783a036797c55a4c9052a193f8d98d6b707e8923e4655dae44b0ea71ce14b888ff2d54c6a3
SSDEEP

6144:LyAtuBlo8dCyd1dUhAE74jvaG66xegV+/mJC63WXP+tN1JB5o:LzQdjaUq6QgV+OvCPG175o

Score

N/A

Malware Config

Signatures

Files

f35bb692dbfc988e334ad7f01252b31f53359cdbd2975ca470fe60cdfa4f8c20
.exe windows x86

f29672e1c514843a1df2c5873720bab6

Code Sign

6a:00:48:28:70:01:9e:6a:b0:eb:07:41:4f:31:65:7c
Certificate

Issuer

CN=fHyv

Not Before

06/06/2012, 07:29

Not After

31/12/2039, 23:59

Subject

CN=fHyv

Extended Key Usages

ExtKeyUsageCodeSigning

f6:ae:f7:58:e1:0c:8f:dd:54:b8:69:37:7e:b6:c6:60:15:19:98:a2
Signer

Actual PE Digest

f6:ae:f7:58:e1:0c:8f:dd:54:b8:69:37:7e:b6:c6:60:15:19:98:a2

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=fHyv

28/10/2022, 15:16
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAllocEx
CloseHandle

gdi32

GetStockObject

advapi32

RegCloseKey

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f29672e1c514843a1df2c5873720bab6

Code Sign

6a:00:48:28:70:01:9e:6a:b0:eb:07:41:4f:31:65:7cCertificate

Extended Key Usages

f6:ae:f7:58:e1:0c:8f:dd:54:b8:69:37:7e:b6:c6:60:15:19:98:a2Signer

Signature Validations

Verification

28/10/2022, 15:16 Valid: false

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 266KB - Virtual size: 266KB

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 192B

6a:00:48:28:70:01:9e:6a:b0:eb:07:41:4f:31:65:7c
Certificate

f6:ae:f7:58:e1:0c:8f:dd:54:b8:69:37:7e:b6:c6:60:15:19:98:a2
Signer

28/10/2022, 15:16
Valid: false

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 266KB - Virtual size: 266KB

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 192B