183f03604e3dbea7a7db6454a9233ef7bb773c307bad2f48986f2079c310adc7

Sharing

Copy URL Twitter E-mail

General

Target

183f03604e3dbea7a7db6454a9233ef7bb773c307bad2f48986f2079c310adc7
Size

260KB
MD5

a38663b0847e73bb7ade0a9d95cdac84
SHA1

687b268c3c14bb03b6d4d4ea13efbb470337933a
SHA256

183f03604e3dbea7a7db6454a9233ef7bb773c307bad2f48986f2079c310adc7
SHA512

bed60fe6997572482cfbac4e08b7f20851a400b60a537d850e7e92c044791cb8d81ee51fa45cebf13d74c2fd147dc0f7b1ffbe713b02eb1bba919a9aa90d6d4b
SSDEEP

6144:9K9ZXqiLM+45op0aCFQnWjUCLENwXnY0VQpd81Q9/Rj:9K9ZXqkMTvQnULYwXUj9/t

Score

N/A

Malware Config

Signatures

Files

183f03604e3dbea7a7db6454a9233ef7bb773c307bad2f48986f2079c310adc7
.exe windows x86

00b1a6ca5ede45976e5e89266f4c609b

Code Sign

58:e7:88:5e:d1:66:15:88:4d:0a:17:00:d3:d2:cb:ce
Certificate

Issuer

CN=Ioru

Not Before

27/05/2012, 05:59

Not After

31/12/2039, 23:59

Subject

CN=Ioru

Extended Key Usages

ExtKeyUsageCodeSigning

8e:d4:4e:b8:41:8b:5e:53:4b:6e:44:53:fe:73:0b:ad:63:38:76:1f
Signer

Actual PE Digest

8e:d4:4e:b8:41:8b:5e:53:4b:6e:44:53:fe:73:0b:ad:63:38:76:1f

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ioru

28/10/2022, 15:17
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
LoadLibraryW
GetProcAddress
GetCommandLineW
GetCommandLineA
GetModuleHandleA
lstrcatW
CreateFileW

user32

GetDC
ReleaseDC
InvalidateRect
BeginPaint
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

GetStockObject
SelectObject
GetTextMetricsA
SetBkMode
TextOutA

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00b1a6ca5ede45976e5e89266f4c609b

Code Sign

58:e7:88:5e:d1:66:15:88:4d:0a:17:00:d3:d2:cb:ceCertificate

Extended Key Usages

8e:d4:4e:b8:41:8b:5e:53:4b:6e:44:53:fe:73:0b:ad:63:38:76:1fSigner

Signature Validations

Verification

28/10/2022, 15:17 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 248KB - Virtual size: 248KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 512B - Virtual size: 292B

58:e7:88:5e:d1:66:15:88:4d:0a:17:00:d3:d2:cb:ce
Certificate

8e:d4:4e:b8:41:8b:5e:53:4b:6e:44:53:fe:73:0b:ad:63:38:76:1f
Signer

28/10/2022, 15:17
Valid: false

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 248KB - Virtual size: 248KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 512B - Virtual size: 292B