81c902b1c7ff54787e39414c1cdb70e9de106744413a22e1f1c732b39999783b

Sharing

Copy URL Twitter E-mail

General

Target

81c902b1c7ff54787e39414c1cdb70e9de106744413a22e1f1c732b39999783b
Size

1.1MB
MD5

30c33108c8f0a7d3948440349d436d10
SHA1

5f83426ee6ecc996bab7c595523171dbc02f59b1
SHA256

81c902b1c7ff54787e39414c1cdb70e9de106744413a22e1f1c732b39999783b
SHA512

f4b8313b4973303da2b49ddc11b9e4b851ad4e25adee05d1b276b3f2eafff8846439884ca6e3c75a09a6d01f5e05257dfedefc212fb66c208f263c190c6ec7a9
SSDEEP

24576:Ov4EhXkSF7USHCH9sPjeEQ0aMVv1U71djGQwuR5UNG+VEDzPO:ux3F7HPjO0tQHsVP

Score

N/A

Malware Config

Signatures

Files

81c902b1c7ff54787e39414c1cdb70e9de106744413a22e1f1c732b39999783b
.exe windows x86

788dd330e8bad3789bc432565aa85b8b

Code Sign

0b:d0:b9:8e:9b:73:5a:33:b3:cf:02:71:ca:6f:1f:79
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

17/09/2014, 00:00

Not After

25/11/2015, 12:00

Subject

CN=Consortium ltd.,O=Consortium ltd.,L=Roseau,ST=Commonwealth of Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

cd:ed:67:3a:98:6f:f6:0b:7a:9c:40:1e:12:43:e0:10:bf:89:87:d9
Signer

Actual PE Digest

cd:ed:67:3a:98:6f:f6:0b:7a:9c:40:1e:12:43:e0:10:bf:89:87:d9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Consortium ltd.,O=Consortium ltd.,L=Roseau,ST=Commonwealth of Dominica,C=DM

04/11/2022, 15:40
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragShowNolock
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetDragImage
ImageList_DrawEx
ImageList_Create
ImageList_Read
ImageList_Write
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Remove
ord17

setupapi

SetupDiDestroyDeviceInfoList

kernel32

GetLastError
GetTempPathA
GetSystemInfo
GetStringTypeExA
FreeResource
InterlockedIncrement
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
FlushFileBuffers
SetStdHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
HeapFree
GetStringTypeW
VirtualAlloc
ExitProcess
WriteFile
GetVersion
GetProcAddress
CreateFileMappingA
GetStartupInfoA
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
GetCurrentProcessId
CloseHandle
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

user32

GetWindowLongA
GetSystemMenu
ShowWindow
GetClassNameA
GetCapture
CreateWindowExA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
GetClassInfoA

gdi32

GetClipBox
CreatePen
DeleteObject
ExcludeClipRect
SetEnhMetaFileBits
SetPixel
SetROP2
StretchBlt
UnrealizeObject
SetAbortProc
DeleteEnhMetaFile
CreateFontIndirectA
TextOutW
OffsetWindowOrgEx
DeleteMetaFile
CreatePenIndirect
GetLogColorSpaceW

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegCloseKey
RegQueryValueExW
RegCreateKeyExA

shell32

StrStrIA
ShellExecuteA

oleaut32

VariantChangeType
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayRedim
SafeArrayGetLBound
SafeArrayPutElement

Sections

.texT
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

788dd330e8bad3789bc432565aa85b8b

Code Sign

0b:d0:b9:8e:9b:73:5a:33:b3:cf:02:71:ca:6f:1f:79Certificate

Extended Key Usages

Key Usages

cd:ed:67:3a:98:6f:f6:0b:7a:9c:40:1e:12:43:e0:10:bf:89:87:d9Signer

Signature Validations

Verification

04/11/2022, 15:40 Valid: false

Headers

File Characteristics

Imports

comctl32

setupapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

Sections

.texT Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 64KB - Virtual size: 63KB

.reloc Size: 8KB - Virtual size: 5KB

0b:d0:b9:8e:9b:73:5a:33:b3:cf:02:71:ca:6f:1f:79
Certificate

cd:ed:67:3a:98:6f:f6:0b:7a:9c:40:1e:12:43:e0:10:bf:89:87:d9
Signer

04/11/2022, 15:40
Valid: false

.texT
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 64KB - Virtual size: 63KB

.reloc
Size: 8KB - Virtual size: 5KB