1cc95dbb4588d89fb4b6dbdf132a02127728882052d21e696828c3b4420a2035

Sharing

Copy URL Twitter E-mail

General

Target

1cc95dbb4588d89fb4b6dbdf132a02127728882052d21e696828c3b4420a2035
Size

936KB
MD5

51c550a0d0e3a945474cb254236a72ec
SHA1

6252b00cfcd0f9fc64fbca8c546a9218f4d3cf32
SHA256

1cc95dbb4588d89fb4b6dbdf132a02127728882052d21e696828c3b4420a2035
SHA512

1ab00091060f81d6ef27a5eb01237ebb74d55895e40e157f94bca3e4c55f7fd04f2096db495d0267fed29e184e4e3ec18551afadaf46a6574449e8b1177ce77c
SSDEEP

12288:GPKeOjrO5Dfd6UPPsmgAIU5KM5m7qSfAvgB4ynpQR:ZQB4rVfpB4ySR

Score

N/A

Malware Config

Signatures

Files

1cc95dbb4588d89fb4b6dbdf132a02127728882052d21e696828c3b4420a2035
.exe windows x86

c73caa5a7e7c5fc6ef7d639a74bfd461

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d4:2d:08:59:e3:9d:03:e5:f1:ef:45:bf:dc:91:00:f5
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

24/07/2015, 00:00

Not After

23/07/2016, 23:59

Subject

CN=\"ITIS\" OOO,O=\"ITIS\" OOO,POSTALCODE=194100,STREET=LESNOY PROSPEKT\, 65\, K.1 L.A\, 10N,L=Saint Petersburg,ST=Saint Petersburg REGOIN,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

bd:d2:97:1d:5a:04:47:fd:1b:e5:51:f0:38:a7:5b:89:73:93:58:72
Signer

Actual PE Digest

bd:d2:97:1d:5a:04:47:fd:1b:e5:51:f0:38:a7:5b:89:73:93:58:72

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=\"ITIS\" OOO,O=\"ITIS\" OOO,POSTALCODE=194100,STREET=LESNOY PROSPEKT\, 65\, K.1 L.A\, 10N,L=Saint Petersburg,ST=Saint Petersburg REGOIN,C=RU

28/10/2022, 15:06
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

SetMenu
ToAscii
wvsprintfW
DrawFrameControl
EndPaint
DlgDirSelectExW
SendDlgItemMessageW
LockWorkStation
BroadcastSystemMessageW
HideCaret
DrawFrame
CloseWindow
SendMessageA
ChangeDisplaySettingsExW
GetMessageA
ShowScrollBar
EnumPropsExA
OemToCharBuffA
IsDlgButtonChecked
EditWndProc
PostMessageW
CharLowerBuffA
OpenWindowStationW
CopyAcceleratorTableW
SetWindowsHookW
GetCursor
wsprintfW
ToAsciiEx
GetWindowModuleFileNameW
AnimateWindow
SetThreadDesktop
GetLastActivePopup
GetMessagePos
UnlockWindowStation
CreateAcceleratorTableA
MessageBoxW
LoadImageA
TileWindows
GetWindowTextA
SetDoubleClickTime
GetWindowLongW
WinHelpW
CascadeChildWindows
SendMessageCallbackW
IsWindowVisible
SetClipboardData
DlgDirListW
ShowStartGlass
ReleaseCapture
SetActiveWindow
GetDialogBaseUnits
GetPropW
EnumDisplaySettingsExW
EqualRect
CreateCursor
GetWindowInfo
GetRawInputDeviceInfoA
IsWindowUnicode
DefFrameProcA
CreateIconIndirect
GetScrollPos
InflateRect
GetDlgItemTextA
CharPrevExA
EnumPropsW
EnumDisplayMonitors
MapVirtualKeyA
GetScrollInfo
IsCharUpperW
SetDlgItemTextA
GetThreadDesktop
IsCharLowerA
GetKeyboardType
SetCursorPos
GetMenuInfo
CreateDialogParamW
SetScrollPos
EndMenu
GetUpdateRect
ValidateRgn
OemKeyScan
BroadcastSystemMessageA
IsCharAlphaNumericA
MenuItemFromPoint
EnumPropsExW
GetMenu
CharLowerW
GetDlgItemInt
WindowFromPoint
IsIconic
LoadAcceleratorsW
DrawStateW
GetTitleBarInfo
SetPropA
CopyRect
DialogBoxIndirectParamW
EndTask
SendMessageW
SetWindowContextHelpId
CopyAcceleratorTableA
CharUpperA
CharUpperBuffW
GetMessageExtraInfo
SetParent
RegisterWindowMessageW
WaitMessage
DialogBoxParamA
LoadAcceleratorsA
SetClassWord
DrawTextA
GetClassNameW
TabbedTextOutA
SetWindowsHookA
DrawIconEx
PrintWindow
CreateIconFromResource
GetAltTabInfoA
SetWindowTextW
MessageBoxExW
ShowWindow
CharToOemA
DestroyMenu
GetInputDesktop
PrivateExtractIconsW
GetNextDlgTabItem
DrawAnimatedRects
GetPropA
CreateDialogIndirectParamA
SetDlgItemTextW
GetMenuItemInfoA
SetLastErrorEx
GetFocus
GetKeyboardLayoutNameA
AppendMenuW
GetDlgCtrlID
SetProcessWindowStation
SetMessageExtraInfo
SendNotifyMessageW
CallNextHookEx
DrawTextExA
GetMenuState
UnregisterClassW
SetCaretPos
GetWindowTextW
GetClassInfoW
GetUserObjectInformationA
LoadIconW
MessageBoxA
MessageBoxIndirectW
MonitorFromRect
EnableMenuItem
AttachThreadInput
SetMenuItemInfoA
SetWindowTextA
CreateDialogIndirectParamW
OffsetRect
EnumDesktopsA
SendMessageCallbackA
DrawCaptionTempW
LoadMenuW
IsCharAlphaW
SetPropW
GetWindowRect
LoadMenuIndirectA
DestroyIcon
GetMenuItemID
CallWindowProcA
OemToCharA
ArrangeIconicWindows
IntersectRect
GetMenuStringA
SetSysColors
SetProgmanWindow
LoadCursorW
IsCharAlphaNumericW
MapWindowPoints
GetKeyState
SwapMouseButton
CreateDialogParamA
KillTimer
SendInput
GetMenuItemRect
GetDlgItem
SetCaretBlinkTime
IsCharUpperA
GetClassInfoA
MapDialogRect
GetSysColor
MessageBoxExA
FillRect
GetWindowDC
GetMenuItemInfoW
SetDlgItemInt
BroadcastSystemMessageExA
RegisterClipboardFormatA
LoadStringA
GetWindowRgnBox
GetMenuItemCount
DispatchMessageW
PrivateExtractIconsA
ToUnicodeEx
MenuWindowProcA
wsprintfA
TileChildWindows
GetClassInfoExW
CheckDlgButton
GetClassLongA
SetWindowRgn
OpenDesktopA
CreateMenu
ModifyMenuA
CreateMDIWindowA
RealChildWindowFromPoint
ChangeDisplaySettingsW
IsDialogMessage
DrawMenuBar
GetClipCursor
GetSystemMetrics
ModifyMenuW
GrayStringW
IsCharAlphaA
EndDialog
BroadcastSystemMessageExW
CreateIcon
ReleaseDC
RegisterClipboardFormatW
InsertMenuItemW
InvalidateRect
DlgDirSelectExA
MessageBoxIndirectA
GetDesktopWindow
GetKeyNameTextW
EnumDisplaySettingsW
RegisterClassExW
DialogBoxIndirectParamA
ChangeDisplaySettingsA
MessageBoxTimeoutW
AlignRects
GetGUIThreadInfo
IsWindow
IsRectEmpty
EnumDesktopsW
DragDetect
DragObject
SetWindowsHookExA
IsMenu
ChildWindowFromPointEx
RegisterDeviceNotificationA
DeleteMenu
EnableWindow
GetClipboardOwner
LoadKeyboardLayoutEx
CreateMDIWindowW
MapVirtualKeyW
GetDlgItemTextW
ShowOwnedPopups
DispatchMessageA
DefWindowProcA
GetMessageTime
EnumDesktopWindows
GetUserObjectSecurity
GetProgmanWindow
SetSystemMenu
GetCapture
EnableScrollBar
CheckRadioButton
SystemParametersInfoA
InsertMenuItemA
RegisterClassA
CloseWindowStation
PtInRect
EnumThreadWindows
DestroyCaret
SetCursor
LoadStringW
GetSystemMenu
GetClipboardFormatNameW
GetMenuBarInfo
FlashWindowEx
SetScrollInfo
FindWindowExW
OpenDesktopW
ShowCaret
RegisterClassW
GetWindowPlacement
CharToOemW
WindowFromDC
DlgDirListA
GetForegroundWindow
ShowWindowAsync
GetUpdateRgn
CopyIcon
RedrawWindow
SetWindowWord
FindWindowExA
GetScrollRange
CopyImage
TabbedTextOutW
GetAltTabInfoW
CharUpperW
SetWindowPlacement
GetLastInputInfo
DefWindowProcW
ChangeMenuW
MenuWindowProcW
LoadKeyboardLayoutW
EmptyClipboard
MapVirtualKeyExW
SetClipboardViewer
SetCapture
TranslateMessageEx
IsChild
GetClientRect
GetTabbedTextExtentA
GetShellWindow
SetCursorContents
LoadImageW
IsWindowEnabled
GetWindowTextLengthA
CreatePopupMenu
GetUserObjectInformationW
GetTopWindow
SetRectEmpty
DrawIcon
RegisterDeviceNotificationW
GetCaretPos
GetAsyncKeyState

kernel32

SetLastError
GetThreadPriority
FillConsoleOutputCharacterA
SetTapeParameters
CommConfigDialogA
VerifyVersionInfoA
GetMailslotInfo
UnregisterWait
InitializeCriticalSectionAndSpinCount
GetProfileIntA
SetComputerNameW
GetDiskFreeSpaceW
InterlockedDecrement
UnlockFile
GetDriveTypeW
GetPrivateProfileStructA
GetPrivateProfileStructW
RemoveDirectoryA
GetPrivateProfileSectionW
Heap32ListFirst
PeekNamedPipe
HeapUnlock
OpenSemaphoreW
ReadConsoleInputA
SetFilePointer
GenerateConsoleCtrlEvent
WaitCommEvent
CreatePipe
LZCopy
SetThreadPriority
lstrcmpW
CopyLZFile
ReplaceFileA
CreateWaitableTimerA
EnumResourceNamesA
DeactivateActCtx
LZCloseFile
CreateProcessA
GlobalFlags
EraseTape
SetFileAttributesW
ReadConsoleInputExA
DebugBreak
GlobalUnfix
RegisterWaitForSingleObject
ReadConsoleInputExW
GetDiskFreeSpaceA
LocalHandle
OpenMutexA
LZRead
FindFirstFileA
ConnectNamedPipe
GetConsoleHardwareState
CreateTimerQueueTimer
WritePrivateProfileStructA
GetSystemTime
CopyFileExW
SetThreadExecutionState
GetThreadLocale
SetVolumeLabelA
CreateSemaphoreA
BuildCommDCBAndTimeoutsA
TransactNamedPipe
MapViewOfFile
SetComputerNameA
GetConsoleInputExeNameA
AddConsoleAliasW
WaitForSingleObject
PeekConsoleInputA
CreateFileW
SetCommMask
GetLogicalDrives
RestoreLastError
GetCommState
GetPrivateProfileSectionA
ReadConsoleOutputCharacterA
SetDefaultCommConfigA
CreateTapePartition
CreateThread
FileTimeToSystemTime
GetFileSize
FindFirstChangeNotificationA
FormatMessageA
HeapSetInformation
SetDefaultCommConfigW
FindNextFileA
GetNamedPipeInfo
GetExpandedNameW
SetLocalTime
WriteProfileStringA
lstrlen
LoadResource
SetProcessAffinityMask
lstrcmpA
ExpandEnvironmentStringsA
GetModuleFileNameW
FindResourceW
SearchPathA
GetProcessHeap
RtlCaptureContext
GlobalAlloc
SwitchToThread
LocalAlloc
IsValidLanguageGroup
GetConsoleAliasesW
CreateJobSet
HeapWalk
GetConsoleWindow
MulDiv
GetTimeFormatA
lstrcpynA
ClearCommBreak
QueryInformationJobObject
GlobalCompact
BeginUpdateResourceA
GetCalendarInfoA
FindFirstVolumeW
GlobalUnlock
OpenEventW
GetDefaultCommConfigW
FreeEnvironmentStringsW
IsBadStringPtrA
PrivCopyFileExW
AddAtomW
GetDriveTypeA
FlushInstructionCache
SetUnhandledExceptionFilter
SetFileTime
EndUpdateResourceA
GetFileInformationByHandle
HeapValidate
BackupWrite
SetProcessPriorityBoost
lstrcatW
CancelTimerQueueTimer
SetInformationJobObject
HeapFree
DeleteTimerQueueEx
GetDateFormatA
DefineDosDeviceA
EnumCalendarInfoW
GetPrivateProfileIntA
GetTickCount
SetErrorMode
GetConsoleKeyboardLayoutNameW
SetTimerQueueTimer
WriteProfileSectionW
VerLanguageNameA
OutputDebugStringW
GetStartupInfoW
GetFullPathNameA
GetNumberOfConsoleMouseButtons
InterlockedCompareExchange
MoveFileExA
OpenJobObjectW
SetFilePointerEx
LCMapStringW
InitAtomTable
ReadConsoleW
GetConsoleDisplayMode
FindResourceExW
GetUserGeoID
WriteFile
SetCurrentDirectoryA
FindNextVolumeA
SetComputerNameExW
GetFileType
SetProcessWorkingSetSize
DisableThreadLibraryCalls
IsBadHugeReadPtr
GetEnvironmentVariableW
AddAtomA
OpenFileMappingA
RtlCaptureStackBackTrace
ResetWriteWatch
TlsFree
GetDiskFreeSpaceExW
GetNativeSystemInfo
CopyFileW
EnumSystemLanguageGroupsA
SetTimeZoneInformation
WaitForSingleObjectEx
EnumDateFormatsA
GetModuleHandleExW
SetVolumeMountPointA
GetCompressedFileSizeW
FindNextVolumeW
EnumCalendarInfoExW
SetCommBreak
OpenEventA
UnmapViewOfFile
GetTimeZoneInformation
SetCriticalSectionSpinCount
SystemTimeToTzSpecificLocalTime
CopyFileA
AddConsoleAliasA
CommConfigDialogW
SizeofResource
GetLogicalDriveStringsW
CreateDirectoryW
CloseHandle
GetLocalTime
WritePrivateProfileSectionA
OpenMutexW
GlobalReAlloc
FindActCtxSectionGuid
GetModuleHandleExA
InterlockedIncrement
GetVolumeInformationA
lstrcpyn
GetComputerNameA
AllocateUserPhysicalPages
FindCloseChangeNotification
CreateNamedPipeA
WriteConsoleInputW
FindActCtxSectionStringW
CreateDirectoryA
UpdateResourceA
LCMapStringA
GetConsoleTitleA
GetCurrencyFormatW
GetGeoInfoW
GetVersionExW
ResetEvent
CallNamedPipeW
WriteProfileSectionA
SearchPathW
GetHandleContext
GetProcessPriorityBoost
SleepEx
FindNextChangeNotification
LoadModule
FreeEnvironmentStringsA
RtlUnwind
DelayLoadFailureHook
DosPathToSessionPathA
LZOpenFileW
WriteConsoleInputA
GetCurrentDirectoryA
GetConsoleOutputCP
EnumResourceNamesW
SetCalendarInfoA
LocalSize
lstrcpyA
GetNamedPipeHandleStateW
FreeConsole
GetCPInfo
PeekConsoleInputW
GetCPInfoExA
VerifyConsoleIoHandle
SignalObjectAndWait
LocalFree
OpenFile
PrivMoveFileIdentityW
LockResource
EnumSystemLocalesA
Heap32Next
EnumTimeFormatsW
IsDBCSLeadByte
MoveFileWithProgressW
GlobalDeleteAtom
GetCommandLineW
ClearCommError
IsBadReadPtr
FreeUserPhysicalPages
GetCommConfig
GetComPlusPackageInstallStatus
GetVolumeInformationW
CreateNamedPipeW
GetDevicePowerState
GetSystemDefaultLCID
GetLongPathNameW
EnumCalendarInfoA
WaitForMultipleObjects
CopyFileExA
GetConsoleCP
HeapDestroy
SetUserGeoID
WritePrivateProfileStructW
GetProcessTimes
GetProcessShutdownParameters
GetEnvironmentStrings
ReadConsoleOutputW
lstrlenA
GetEnvironmentStringsA
GetSystemInfo
RegisterWaitForInputIdle
CreateSocketHandle
GetVolumePathNameA
GetACP
GlobalGetAtomNameA
IsBadStringPtrW
SetCommState
GlobalUnWire
TerminateProcess
EnumResourceTypesW
IsProcessorFeaturePresent
GetPrivateProfileIntW
EnumResourceLanguagesA
FindAtomA
OpenSemaphoreA
CreateDirectoryExW
QueryDosDeviceW
PrepareTape
GetCommandLineA
FlushFileBuffers
EndUpdateResourceW
InterlockedExchangeAdd
CallNamedPipeA
lstrcmpiA
EnumSystemLocalesW
TryEnterCriticalSection
GetVersion
GlobalLock
CancelIo
RtlMoveMemory
GetTapeStatus
GlobalFindAtomA
SetFileShortNameA
TlsSetValue
GlobalAddAtomA
GetProfileIntW
SetComputerNameExA
DeleteFileA
FindVolumeClose
VirtualQueryEx
EnumLanguageGroupLocalesA
ExitThread
GetProcessHeaps
SetThreadContext
WriteFileGather
SetSystemTimeAdjustment
EnumDateFormatsExW
GetCurrencyFormatA
IsBadCodePtr
SetFileApisToOEM
ScrollConsoleScreenBufferA
WriteConsoleW
FileTimeToDosDateTime
CreateJobObjectA
GetCommMask
SetThreadLocale
GetFullPathNameW
GetOverlappedResult
RequestDeviceWakeup
GetCurrentThread
GetUserDefaultUILanguage
GetCPInfoExW
SetWaitableTimer
DeleteVolumeMountPointA
ExitProcess
GetStdHandle
GetStartupInfoA
GetConsoleMode
GetCurrentThread
MapViewOfFileEx
LoadLibraryExA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

comdlg32

PrintDlgW
dwLBSubclass
ReplaceTextA
GetOpenFileNameW
FindTextA
ChooseColorA
PrintDlgExA
LoadAlterBitmap
ChooseFontA
ReplaceTextW
WantArrows
ChooseColorW
PageSetupDlgA
dwOKSubclass
GetFileTitleW
PageSetupDlgW
ChooseFontW
GetFileTitleA
CommDlgExtendedError
GetSaveFileNameW
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
FindTextW

oleaut32

VarUI2FromDec
SafeArrayCopy
VarDecRound
VarUI8FromStr
VarI8FromDate
VarCyFromI8
SafeArrayAllocDescriptor
VarCyMulI8
VarUI2FromDate
VarR8FromI4
SafeArrayUnlock
VarUI2FromStr
VarR8FromUI8
SysReAllocString
VarFormatFromTokens
CreateStdDispatch
VarDateFromUI2
VARIANT_UserUnmarshal
LPSAFEARRAY_UserUnmarshal
VarUI1FromUI2
VarI4FromDisp
VarCyFromUI8
VarParseNumFromStr
VarMonthName
VarUI1FromBool
VarR4CmpR8
VarWeekdayName
VarNeg
VarI4FromR4
VarR4FromUI4
VarCyFromI2
VarDateFromUI4
VarDateFromI2
VarDateFromBool
VarCyMul
GetActiveObject
VarNumFromParseNum
VarDecInt
VarI2FromStr
SafeArrayCopyData
CreateTypeLib2
VarUI4FromR8
VarI4FromBool
VarUI1FromR4
SysAllocString
VarR4FromDate
GetAltMonthNames
VarUI1FromDate
VarDateFromI8
VarDateFromCy
OleCreateFontIndirect
VarUI4FromI8
VarR8FromR4
VariantTimeToSystemTime
VarDecFromStr
VarUI4FromUI8
VarI2FromUI4
VarI8FromI2
BSTR_UserUnmarshal
OleCreatePropertyFrameIndirect
VarI8FromI1
VarI4FromUI2
VarUI2FromR8
SafeArrayGetUBound
BstrFromVector
SafeArrayAccessData
VariantCopy
VarDecDiv
VariantChangeTypeEx
VarR4FromDisp
VarDecAdd
VarI1FromR8
VarUI1FromCy
VarDecFromR4
VarUI1FromDisp
VarDateFromI4
OleLoadPictureFile
SafeArrayDestroyDescriptor
OleLoadPicture
VarCyFromDec

comctl32

CreateUpDownControl
ImageList_GetDragImage
ImageList_SetBkColor
ImageList_GetFlags
FlatSB_SetScrollRange
DrawStatusTextA
PropertySheetA
DrawInsert
UninitializeFlatSB
ImageList_LoadImage
ImageList_LoadImageW
ImageList_SetIconSize
CreateToolbar
FlatSB_SetScrollInfo
CreatePropertySheetPageA
ImageList_GetIconSize
ImageList_DrawIndirect
ImageList_Read
FlatSB_GetScrollPos
DllGetVersion
LBItemFromPt
CreateMappedBitmap
ImageList_Replace
ImageList_DragEnter
DestroyPropertySheetPage
ImageList_EndDrag
FlatSB_SetScrollPos
ImageList_GetImageCount
ImageList_DragLeave
ImageList_Draw
ImageList_DragMove
ImageList_Copy
ImageList_Write
ImageList_DragShowNolock
CreateToolbarEx
MenuHelp
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_GetIcon
FlatSB_GetScrollInfo
ImageList_Destroy
ImageList_SetDragCursorImage
InitializeFlatSB
ImageList_AddIcon
FlatSB_SetScrollProp
GetMUILanguage
ImageList_LoadImageA
DrawStatusText
ImageList_DrawEx
MakeDragList
ImageList_Duplicate
PropertySheet
ImageList_SetImageCount
ImageList_SetFlags
ShowHideMenuCtl
FlatSB_ShowScrollBar
ImageList_Create

gdi32

BRUSHOBJ_ulGetBrushColor
GdiDeleteLocalDC
GdiConvertBitmap
MoveToEx
XLATEOBJ_piVector
GetHFONT
CheckColorsInGamut
GdiCreateLocalMetaFilePict
EndPath
SetStretchBltMode
EngReleaseSemaphore
GdiGetBatchLimit
SetDeviceGammaRamp
GetDCPenColor
GdiSetServerAttr
GetGraphicsMode
AddFontResourceExA
DeleteMetaFile
GetMiterLimit
GdiAlphaBlend
CreateColorSpaceA
TranslateCharsetInfo
GetKerningPairsW
GetTextColor
GetMetaFileBitsEx
GetCharABCWidthsA
GetEnhMetaFileA
GdiConvertDC
CreateRectRgnIndirect
GdiReleaseDC
GdiGetSpoolFileHandle
GetCurrentPositionEx
GdiInitializeLanguagePack
RemoveFontResourceW
CreateBrushIndirect
Pie
EnumFontFamiliesExA
Ellipse
CreateMetaFileA
GetOutlineTextMetricsA
SetBoundsRect
GetGlyphOutlineA
FONTOBJ_pifi
GetPixelFormat
SetMapMode
GetEnhMetaFilePaletteEntries
CreateFontIndirectA
AddFontResourceA
EngCreateClip
EudcLoadLinkW
GetSystemPaletteEntries
GetMetaFileA
GetCharWidthInfo
GdiStartPageEMF
GdiIsMetaPrintDC
SetWindowExtEx
GetTextMetricsA
GetROP2
GetTextExtentPointA
GdiGradientFill
GetOutlineTextMetricsW
BitBlt
SetBrushOrgEx
GdiPlayPageEMF
GdiDllInitialize
GdiSwapBuffers
FillPath
SetEnhMetaFileBits
GetWinMetaFileBits
GetTextExtentExPointWPri
CancelDC
GdiAddGlsBounds
EngDeleteSemaphore
PolyDraw
GetBkColor
GdiArtificialDecrementDriver
GdiSetPixelFormat
CreateScalableFontResourceW
GdiAddFontResourceW
EndPage
GetDCOrgEx

Exports

Exports

��}��k nY�<Z�xԗ��O �ZM }��8=�dc�o��9:��J� ��X�F2j=�}��}�_�Jx��ܢD:�Û��W:Hyw갊栙�s��T��z�j`C�Rg �=<#F��P��K�-�4��{C��.��ou�S�n̢��9�`��l\��u?�ui6��6�k��/��<˱I�*;��&%'_�0+�y1Tt8�Sr�(ӄ=V��NQ�/��,�X��ȮF]��a��.��i|��O�S<<"��%��:ć嶪 ��o�:�q�RU �i)X�"��s�|yX5�0d}xh�_*�v��Gt�J$�q�'�\��S|vW��'vz��4m@ʩ�9R]��mIs��\��S��E��X��V��zG�|Q��-�4��H�A]�z��,.Uf4c_kb��|��ڛ�*۵��>��%��f�$ �� y��2 yҩUm�*'�P]�*�L��"�Nǎ��g�h�F�w��sPt��@}V<V�!v �1�4�� ܕ��tKdqr��GR{��0��7�c��A{V^^�_5G�3S_C-��?��'��A�� Y��IO>��R��5nwb�`@,-��z:�9V��-��D)C8<3�Ο?��XKS��h��:��o�$�ŧ��d��(�O��U�f�J��nD]1Iծ��2��#qU{>CF=W��S��<#&JMA�En��L ��Tz��9P�Ў��'��&Ƙ�(��s��[}�z!na;`��4��i��.K��7��=`��Qq��A��'�{�H5��R�մji]ʷ��K�&�� 'f�N��m(�L�{��X�7��=�ö�<~蟖�O�{��n��4�8 J�/�8k�Uc9�b��ǜ�|zu��k^�Ow ��gs�T>�(_��]Mk��D��P�ʿ��j�� *�b{�Z�W@O3ْ��R�5�y�&\�� g2��&�،ٍl��E޵��t�2��PG�eZB�/s!�"�$��V�/�<Fe9�N��`�r�y�#��q�=ު8�H�y��u ߱�.�]��t��J��;��S��\%�ވ� Y�4oG��ABC��0H�̚Whf7g��)��)[fѥ^�E��*�#H�r�u��V��k�1@]P@$%��"��Ǎ7Q��>;�n��rʝ�1��ZN�O`"^5Zϴ�2��w�xC7!�/�Ȅ�{x�o�=��"�WYcŒ�"�G=��M��ZÖ��vx��"��gq2@�p��f1�p,7�:�t��y��:q�j ˩ʬv��$@�,�U��lNݒ|z�:��:Dx��x� L�X��]�(�\=��koBv�L�+?��"�9i�t�/ pl2oG��_<��{'�?��Cjq��l{`^}�`�r&[�%�̶��h)�N��3q��{(�*��fU1�}A�8h��V��D�b��;�p�ʄTκ�A6��_U�Eѝٔ{2�S:~�d�zL�kN��+`�L��y��~�a��Z(��"�!� ��'j��]��̈́�cΕ��&�1-��j߃��Ȇ`n %H�O��HW��<Vui�N�kv�yT�Bx+��N�,j�od�1�g��;��I��m��?'��a)��J��&�Tg�Q�ISv��I��ƈ��f0g�*s�� T9��[�p��tɼ!-f �E��Y�S]*��%�1��H�Â �~Y�d:��|v�>!"0��e�)6�� 1�װe��}2� �ё�n�� <��ˉMٚ'�s�r�h��i��-n��N�~.�ZK&��~��$�o�D,ծ��hg�/� G�#��$��`�2�YQ��)�s6��O�]�0�qm��t�X[˳ԙ�#�,W�� 4/��]��C�ݫ1C�D�*�LV�g��"��WpcS*�.lA�d�<h1�C4��o-q��*��u��6��X+32ߑ��q�I�Ta��'f��M/��ög?Y�i1��j�7�=��K�羨��E(��mk(<H��f� (��byn��(%|ȹ�U��nǝ8e��t��5ƫ��y�xS҄R�@b{,�DpW��eD��x*��F3*��=��CKTõ�l��ss�|r��|N��TG�p��h��: clwh��(c:�j1�uCeb'�_|r��J�Ab^z_�!a��QK"��s��6��rlsx8>�K��c��0/پ��!��G�J��k��'ҫ�� i��m�1�Z,��w�qAEYS��m�N�} 4$�v$��>��Ɉ��@lOD��~k)�r�ᖟ?o.Љ�^��y�� $�%ܳ5aʋ��;]��C��O��(��.� �� N��xP��M��@g5g��`�+��n��k�i��C^�ޡuq-\�i�)��q��'��Z�s��8��W��1[�l��RD��(��R�6��s��?�� ߨg�iMS��\A��b�x ��n��L�j��_�_E:z!��j��O�#'*]�DyJ�T�7y�=+ �RF��O[��"P�B+��5y�{7�� *�)�V��զ�E��$��C�'�Ÿ_��6E��f�Y�;-ra΀%`��G��G�;I�@��0JY��tml4��9+��}��Ï��G'И=.jO�( )ʱ��Ď��(�w��h�wT��.��C�M�`�~��nekHs7��1[w��޳B�mG}�AaI�&,�$�M.u�hBYF�v$"+�Te�~��f�uĩ�K�a�� ST�0"�U` &�^��f��=B��5 �tѷ��M60R��Գ�K

Sections

CODE
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c73caa5a7e7c5fc6ef7d639a74bfd461

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

d4:2d:08:59:e3:9d:03:e5:f1:ef:45:bf:dc:91:00:f5Certificate

Extended Key Usages

Key Usages

bd:d2:97:1d:5a:04:47:fd:1b:e5:51:f0:38:a7:5b:89:73:93:58:72Signer

Signature Validations

Verification

28/10/2022, 15:06 Valid: false

Headers

File Characteristics

Imports

user32

kernel32

comdlg32

oleaut32

comctl32

gdi32

Exports

Exports

Sections

CODE Size: 457KB - Virtual size: 457KB

DATA Size: 10KB - Virtual size: 9KB

BSS Size: - Virtual size: 1KB

.idata Size: 21KB - Virtual size: 21KB

.text0 Size: 129KB - Virtual size: 129KB

.tls Size: 512B - Virtual size: 24B

.text1 Size: 82KB - Virtual size: 81KB

.reloc Size: 18KB - Virtual size: 18KB

.rsrc Size: 211KB - Virtual size: 210KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

d4:2d:08:59:e3:9d:03:e5:f1:ef:45:bf:dc:91:00:f5
Certificate

bd:d2:97:1d:5a:04:47:fd:1b:e5:51:f0:38:a7:5b:89:73:93:58:72
Signer

28/10/2022, 15:06
Valid: false

CODE
Size: 457KB - Virtual size: 457KB

DATA
Size: 10KB - Virtual size: 9KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 21KB - Virtual size: 21KB

.text0
Size: 129KB - Virtual size: 129KB

.tls
Size: 512B - Virtual size: 24B

.text1
Size: 82KB - Virtual size: 81KB

.reloc
Size: 18KB - Virtual size: 18KB

.rsrc
Size: 211KB - Virtual size: 210KB