99415ba5f42e97491bc627748747ca67fd9786ed82297f71f42540083600c12f

Sharing

Copy URL

Twitter E-mail

Reason

scan timeout

General

Target

99415ba5f42e97491bc627748747ca67fd9786ed82297f71f42540083600c12f
Size

275KB
MD5

a0ea761272519c0be72e169c5ea35bda
SHA1

2b5dab951752425e7736ea5a20df9866eb35e0e4
SHA256

99415ba5f42e97491bc627748747ca67fd9786ed82297f71f42540083600c12f
SHA512

572699868c941277f79dd54f7af12f0e2adf3c941b0cd1444ed9cbc89b850af82d00468bde1bf5724d6248fb4e9c3c5498a9061146b0825112a6e89bbb59d7a5
SSDEEP

3072:+E0QjAzXSjGPzsF7tV/2IChsTdwBYOIPPjoZanwMaySfBSrvz/RFD:h06AzXSjGAJVODhsTyw7unyS5SrLZR

Score

N/A

Malware Config

Signatures

Files

99415ba5f42e97491bc627748747ca67fd9786ed82297f71f42540083600c12f
.exe windows x86

073439831b7d73ccfbf712377003af81

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12-05-1997 00:00

Not After

07-01-2004 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28-02-2001 00:00

Not After

06-01-2004 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-12-2000 08:00

Not After

12-11-2005 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:07:11:43:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-05-2002 00:55

Not After

25-11-2003 01:05

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

bf:32:be:cf:c1:2b:60:34:b5:a8:02:ec:df:8d:2e:cb:1b:0c:bf:1d
Signer

Actual PE Digest

bf:32:be:cf:c1:2b:60:34:b5:a8:02:ec:df:8d:2e:cb:1b:0c:bf:1d

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

28-10-2022 15:10
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryW
FreeLibrary
OpenProcess
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetWindowsDirectoryW
GetTempPathW
CompareStringW
SetCurrentDirectoryW
LoadLibraryW
CreateProcessW
lstrlenA
GetEnvironmentVariableW
SearchPathW
GetStartupInfoA
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
GetCommandLineW
LocalAlloc
lstrcmpA
GetTickCount
CreateDirectoryW
CloseHandle
GetTempFileNameW
LocalFree
GetVersionExA
SetErrorMode
GetFileAttributesW
DeleteFileW
GetModuleFileNameW
GlobalFree
FindResourceW
LoadResource
SizeofResource
GlobalAlloc
GetLocaleInfoW
GetVersionExW
GetSystemDefaultLangID
IsDBCSLeadByte
MultiByteToWideChar
lstrlenW
WriteFile
ReadFile
SetFileAttributesW
CreateFileW
GetFileSize
ExpandEnvironmentStringsW
SetFilePointer

user32

DialogBoxIndirectParamW
LoadStringW
GetDC
ReleaseDC
GetKeyboardLayout
SystemParametersInfoW
EnumChildWindows
EndDialog
GetDlgItemTextW
SetDlgItemTextW
MessageBeep
SetWindowLongW
SetWindowTextW
ScreenToClient
GetClassNameW
CreateWindowExW
LoadBitmapW
GetWindowRect
DialogBoxParamW
GetClientRect
SetWindowPos
CharNextW
GetParent
PostMessageW
BeginPaint
GetWindowTextW
IsWindowEnabled
DrawTextW
EndPaint
CallWindowProcW
GetDlgItem
SendMessageW
EnableWindow
ShowWindow
InvalidateRect
CreateDialogIndirectParamW
IsWindowVisible
CharPrevW
MessageBoxA
EnableMenuItem
CharUpperA
CharUpperW
MessageBoxW
CharNextA
LoadCursorW
SetCursor
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
LoadIconW
GetSystemMetrics
LoadImageW
CreateDialogParamW
ClientToScreen
MoveWindow
GetWindowTextLengthA
MapWindowPoints
UpdateWindow
IsDlgButtonChecked
SendDlgItemMessageW
GetSysColor
SetFocus
DestroyWindow
GetWindowLongW
SetParent
GetDesktopWindow

gdi32

GetDeviceCaps
CreateFontIndirectW
GetTextExtentPoint32W
SetBkMode
SetTextColor
CreateSolidBrush
Rectangle
GetObjectW
CreateCompatibleDC
SelectObject
SetStretchBltMode
StretchBlt
DeleteDC
EnumFontFamiliesExW
DeleteObject

comdlg32

CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW

comctl32

ImageList_Destroy

advapi32

RegOpenKeyExA
RegDeleteKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryValueExA

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation

msvcrt

_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
wcschr
_wfullpath
memmove
_vsnwprintf
_controlfp

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

073439831b7d73ccfbf712377003af81

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9dCertificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6Certificate

Extended Key Usages

Key Usages

61:07:11:43:00:00:00:00:00:34Certificate

Extended Key Usages

Key Usages

bf:32:be:cf:c1:2b:60:34:b5:a8:02:ec:df:8d:2e:cb:1b:0c:bf:1dSigner

Signature Validations

Verification

28-10-2022 15:10 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

comctl32

advapi32

shell32

msvcrt

Sections

.text Size: 65KB - Virtual size: 65KB

.data Size: 1KB - Virtual size: 15KB

.rsrc Size: 35KB - Virtual size: 35KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

61:07:11:43:00:00:00:00:00:34
Certificate

bf:32:be:cf:c1:2b:60:34:b5:a8:02:ec:df:8d:2e:cb:1b:0c:bf:1d
Signer

28-10-2022 15:10
Valid: false

.text
Size: 65KB - Virtual size: 65KB

.data
Size: 1KB - Virtual size: 15KB

.rsrc
Size: 35KB - Virtual size: 35KB