85b39a3342cce5047dbbcb33fcac61e9fdb7258dbe521063c60164adb30def1c

Sharing

Copy URL

Twitter E-mail

General

Target

85b39a3342cce5047dbbcb33fcac61e9fdb7258dbe521063c60164adb30def1c
Size

361KB
MD5

16006c5895c0e06dae4b82e86df82099
SHA1

239b4890595d745f22ea64e9fae3abc3d4421ebe
SHA256

85b39a3342cce5047dbbcb33fcac61e9fdb7258dbe521063c60164adb30def1c
SHA512

625a9e3d904992b070567afed9af35a976a080a03627d318f42b04c34c1e86da8da231df4ce2ca5561e9d5307979f895a5228a28f906d3bba4984c49b0a383d0
SSDEEP

6144:M86tJmmTlnW2PRTTC0VRNhPuWsnxiP8Au5d:MTPTIWBhVPXsno8rv

Score

N/A

Malware Config

Signatures

Files

85b39a3342cce5047dbbcb33fcac61e9fdb7258dbe521063c60164adb30def1c
.exe windows x86

c45b5a02a7efe1517416aa5eb3d7aca0

Code Sign

3a:6d:c4:95:2d:8c:16:5e:b1:23:42:13:b6:b8:00:3a
Certificate

Issuer

CN=917662827519259241998232613267349893382155935642233696728967663828917433641668367874251797792499269277569166177815149659853771216339633626289497491249

Not Before

09-07-2012 05:21

Not After

31-12-2039 23:59

Subject

CN=917662827519259241998232613267349893382155935642233696728967663828917433641668367874251797792499269277569166177815149659853771216339633626289497491249

Extended Key Usages

ExtKeyUsageCodeSigning

0e:7c:cf:49:22:04:5c:3e:2a:e0:13:5c:fc:8f:c9:2d:e7:4b:d1:a3
Signer

Actual PE Digest

0e:7c:cf:49:22:04:5c:3e:2a:e0:13:5c:fc:8f:c9:2d:e7:4b:d1:a3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=917662827519259241998232613267349893382155935642233696728967663828917433641668367874251797792499269277569166177815149659853771216339633626289497491249

04-11-2022 15:46
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
CreateFileW
CloseHandle
GetWindowsDirectoryW
VirtualAllocEx

advapi32

RegOpenKeyA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data9
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data8
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c45b5a02a7efe1517416aa5eb3d7aca0

Code Sign

3a:6d:c4:95:2d:8c:16:5e:b1:23:42:13:b6:b8:00:3aCertificate

Extended Key Usages

0e:7c:cf:49:22:04:5c:3e:2a:e0:13:5c:fc:8f:c9:2d:e7:4b:d1:a3Signer

Signature Validations

Verification

04-11-2022 15:46 Valid: false

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 772B

.data9 Size: 1024B - Virtual size: 1000B

.data8 Size: 1024B - Virtual size: 1000B

.data7 Size: 1024B - Virtual size: 1000B

.data6 Size: 1024B - Virtual size: 1000B

.data5 Size: 1024B - Virtual size: 1000B

.data4 Size: 1024B - Virtual size: 1000B

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 342KB - Virtual size: 342KB

.reloc Size: 512B - Virtual size: 208B

3a:6d:c4:95:2d:8c:16:5e:b1:23:42:13:b6:b8:00:3a
Certificate

0e:7c:cf:49:22:04:5c:3e:2a:e0:13:5c:fc:8f:c9:2d:e7:4b:d1:a3
Signer

04-11-2022 15:46
Valid: false

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 772B

.data9
Size: 1024B - Virtual size: 1000B

.data8
Size: 1024B - Virtual size: 1000B

.data7
Size: 1024B - Virtual size: 1000B

.data6
Size: 1024B - Virtual size: 1000B

.data5
Size: 1024B - Virtual size: 1000B

.data4
Size: 1024B - Virtual size: 1000B

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 342KB - Virtual size: 342KB

.reloc
Size: 512B - Virtual size: 208B