General

Malware Config

Signatures

Files

• e5e4272f9a129cfdd3f7ec1a0c0adad1791b6e6c9e16e780a4d0e15e907b0a50

  .exe windows x86

  bf66d79f6fb87389af4df75f0380b1c5

  
  

  Code Sign

  01:00:20

  Certificate

  Issuer

  CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

  Not Before

  11-06-2002 10:46

  Not After

  11-06-2027 10:46

  Subject

  CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

  64:fe:29:dc:cf:38:e0:30:dc:ff:e3:4d:05:68:96:61

  Certificate

  Issuer

  CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

  Not Before

  03-03-2009 12:53

  Not After

  03-03-2024 12:53

  Subject

  CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  56:e2:2b:99:2b:4c:7f:1a:fe:ac:1d:63:b4:92:bf:54

  Certificate

  Issuer

  CN=Certum Level III CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  28-06-2015 10:38

  Not After

  27-06-2016 10:38

  Subject

  CN=Open Source Developer\, Hetem Ramadani,O=Open Source Developer,C=SI,1.2.840.113549.1.9.1=#0c18686574656d72616d6164616e693540676d61696c2e636f6d

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  bc:bd:2a:63:73:9a:01:71:43:c9:9c:21:23:79:ed:3e:0b:7d:7d:34

  Signer

  Actual PE Digest

  bc:bd:2a:63:73:9a:01:71:43:c9:9c:21:23:79:ed:3e:0b:7d:7d:34

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Open Source Developer\, Hetem Ramadani,O=Open Source Developer,C=SI,1.2.840.113549.1.9.1=#0c18686574656d72616d6164616e693540676d61696c2e636f6d

  28-10-2022 15:06

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Imports

  oleaut32

  SysFreeString

  SysReAllocStringLen

  advapi32

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  user32

  GetKeyboardType

  DestroyWindow

  MessageBoxA

  CreateWindowExA

  RegisterClassA

  MessageBoxA

  LoadIconA

  LoadCursorA

  GetSystemMetrics

  DestroyWindow

  DefWindowProcA

  kernel32

  GetACP

  Sleep

  VirtualFree

  VirtualAlloc

  GetTickCount

  QueryPerformanceCounter

  GetCurrentThreadId

  VirtualQuery

  GetStartupInfoA

  GetCommandLineA

  FreeLibrary

  ExitProcess

  WriteFile

  UnhandledExceptionFilter

  RtlUnwind

  RaiseException

  GetStdHandle

  TlsSetValue

  TlsGetValue

  LocalAlloc

  GetModuleHandleA

  Sleep

  FreeLibrary

  gdi32

  DeleteObject

  Sections

  .text

  Size: 23KB - Virtual size: 22KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 512B - Virtual size: 504B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 10KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: - Virtual size: 8B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 61KB - Virtual size: 61KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ