c3ba1b44bef2fe4046c3f320a58e3f472f9bb0500ec804b696aab96d1dc25da1

Sharing

Copy URL Twitter E-mail

General

Target

c3ba1b44bef2fe4046c3f320a58e3f472f9bb0500ec804b696aab96d1dc25da1
Size

76KB
MD5

841ddd608dfcd8600c0ec2e028b86bb0
SHA1

9fce4aa67dc828fe4c5eccffb015efd7f894c59a
SHA256

c3ba1b44bef2fe4046c3f320a58e3f472f9bb0500ec804b696aab96d1dc25da1
SHA512

84d63b13da85c9d30d336cd2fcb4ba025b798c1a85442280012aed200c0ca886c62dff033a4bc6403194b49c08e00172175d8fef44aebf7ec36290b96cf4e153
SSDEEP

1536:qE15b2h1WJasNcSVQbYUfRr7AOW4wsxUS1RHrbiupqy5QcS:qO1V0DfRrcOWpGtZqWQcS

Score

N/A

Malware Config

Signatures

Files

c3ba1b44bef2fe4046c3f320a58e3f472f9bb0500ec804b696aab96d1dc25da1
.exe windows x64

bc848ef67267e4b960c972b2ffbf89d7

Code Sign

5a:70:84:21:50:61:10:7e:b3:04:c1:77:0a:3a:81:e1
Certificate

Issuer

CN=Ixicyazouudytyxak

Not Before

11/04/2014, 03:30

Not After

31/12/2039, 23:59

Subject

CN=Ixicyazouudytyxak

38:9e:79:05:d7:89:60:92:35:e3:b1:3b:e1:e1:dc:f9:13:9c:fa:72
Signer

Actual PE Digest

38:9e:79:05:d7:89:60:92:35:e3:b1:3b:e1:e1:dc:f9:13:9c:fa:72

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ixicyazouudytyxak

28/10/2022, 15:16
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
KeQueryActiveProcessors
ExFreePoolWithTag
RtlCopyLuid
RtlValidSecurityDescriptor
RtlInitUnicodeString
ExGetSharedWaiterCount
MmGetPhysicalAddress
KeQueryTimeIncrement
ExGetExclusiveWaiterCount
FsRtlNormalizeNtstatus
FsRtlDoesNameContainWildCards
KeBugCheckEx

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc848ef67267e4b960c972b2ffbf89d7

Code Sign

5a:70:84:21:50:61:10:7e:b3:04:c1:77:0a:3a:81:e1Certificate

38:9e:79:05:d7:89:60:92:35:e3:b1:3b:e1:e1:dc:f9:13:9c:fa:72Signer

Signature Validations

Verification

28/10/2022, 15:16 Valid: false

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 23KB - Virtual size: 23KB

.pdata Size: 512B - Virtual size: 348B

INIT Size: 1024B - Virtual size: 616B

.reloc Size: 10KB - Virtual size: 10KB

5a:70:84:21:50:61:10:7e:b3:04:c1:77:0a:3a:81:e1
Certificate

38:9e:79:05:d7:89:60:92:35:e3:b1:3b:e1:e1:dc:f9:13:9c:fa:72
Signer

28/10/2022, 15:16
Valid: false

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 23KB - Virtual size: 23KB

.pdata
Size: 512B - Virtual size: 348B

INIT
Size: 1024B - Virtual size: 616B

.reloc
Size: 10KB - Virtual size: 10KB