7d565658d31eb30a32e1b45e3c90489f6fbdccb5e5ec7dd8f06a3ece0d5fa0fa

Sharing

Copy URL Twitter E-mail

General

Target

7d565658d31eb30a32e1b45e3c90489f6fbdccb5e5ec7dd8f06a3ece0d5fa0fa
Size

117KB
MD5

9372f32151e7983a4a5168f3b4bdb040
SHA1

cce57c9b9945a248382a5545eb46fbba494903be
SHA256

7d565658d31eb30a32e1b45e3c90489f6fbdccb5e5ec7dd8f06a3ece0d5fa0fa
SHA512

7b507734e02aaecf20b19aa12e1a89e40e1b5190babb4f7e4546f4dcb30230ac2a6990c90c5ea2791597df393970f643aab5a118f6bbbfd1a732bfc47f86ffb4
SSDEEP

1536:B35DS8UYZbwZpo+rUAxoMxffV1kVr9Kk8/y97uCCC+69ci8Fau6BtknvVTskgxMP:BJD9UY1KoAxoMpHkhTL+69cr6TkhWWS2

Score

N/A

Malware Config

Signatures

Files

7d565658d31eb30a32e1b45e3c90489f6fbdccb5e5ec7dd8f06a3ece0d5fa0fa
.exe windows x86

f20736c3df0a11477747506b4bbcca6e

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:26:10:ca:66:0b:da:5b:05:75:3b:55:69:9d:f1:10
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/02/2014, 00:00

Not After

19/02/2015, 23:59

Subject

CN=GRADIENT COMPANY,O=GRADIENT COMPANY,POSTALCODE=117630,STREET=akademika Chelomeya\, 4,L=Moscow,ST=Mockovskaya oblast,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

87:0e:d2:9e:e9:99:da:c0:f0:b6:c6:8f:40:64:18:f8:28:75:3a:d3
Signer

Actual PE Digest

87:0e:d2:9e:e9:99:da:c0:f0:b6:c6:8f:40:64:18:f8:28:75:3a:d3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=GRADIENT COMPANY,O=GRADIENT COMPANY,POSTALCODE=117630,STREET=akademika Chelomeya\, 4,L=Moscow,ST=Mockovskaya oblast,C=RU

28/10/2022, 15:02
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
HeapCreate
GetVersionExW
GetFileAttributesW
TlsSetValue
QueryPerformanceCounter
LocalAlloc
LCMapStringA
GetCommandLineA
CreateFileW
CopyFileExA
CreateHardLinkW
Sleep
HeapFree
ExitProcess
LoadLibraryExW
GlobalAlloc
GetModuleHandleA
LCMapStringW
EnterCriticalSection
FindClose
GetProcessHeap
GetStartupInfoA

user32

MessageBoxA
IsWindowVisible
GetWindowRect
UpdateWindow
CallWindowProcW
SetWindowPos
SetTimer
CharUpperW
SetWindowTextW
GetFocus
UnregisterClassW
LoadStringW
SendMessageW
IsWindow
PostQuitMessage
OffsetRect
SetFocus
SetWindowLongW

gdi32

CloseMetaFile
GetPaletteEntries
GetCharWidthA
DeleteDC
SetROP2
CreatePatternBrush
GetTextFaceW

advapi32

SetTokenInformation
FlushTraceW
OpenThreadToken
GetSecurityDescriptorDacl
GetSecurityDescriptorLength
GetSidSubAuthorityCount
RegEnumKeyW
CryptGetProvParam
CryptGenKey
StartServiceW
GetTokenInformation
RegQueryValueExW
GetSidSubAuthority
AddAccessAllowedAce
RegCreateKeyA
RegSetValueExA
CryptSetHashParam

ole32

OleIsCurrentClipboard
StgOpenStorage
StgCreateDocfile
PropVariantClear
HBITMAP_UserFree
StringFromCLSID
CoGetMarshalSizeMax
CoUninitialize
StringFromGUID2

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

rpcrt4

RpcImpersonateClient
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_IsIIDSupported
NdrStubCall2
RpcStringBindingParseW
RpcBindingToStringBindingW
UuidToStringW
UuidToStringA
CStdStubBuffer_Disconnect

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bss
Size: 7KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f20736c3df0a11477747506b4bbcca6e

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

55:26:10:ca:66:0b:da:5b:05:75:3b:55:69:9d:f1:10Certificate

Extended Key Usages

Key Usages

87:0e:d2:9e:e9:99:da:c0:f0:b6:c6:8f:40:64:18:f8:28:75:3a:d3Signer

Signature Validations

Verification

28/10/2022, 15:02 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

msvcrt

rpcrt4

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 13KB - Virtual size: 13KB

bss Size: 7KB - Virtual size: 4KB

.rsrc Size: 18KB - Virtual size: 18KB

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

55:26:10:ca:66:0b:da:5b:05:75:3b:55:69:9d:f1:10
Certificate

87:0e:d2:9e:e9:99:da:c0:f0:b6:c6:8f:40:64:18:f8:28:75:3a:d3
Signer

28/10/2022, 15:02
Valid: false

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 13KB - Virtual size: 13KB

bss
Size: 7KB - Virtual size: 4KB

.rsrc
Size: 18KB - Virtual size: 18KB