0e7a0a6aa2ed0f9188dcb67c54f3636b5a08749721d0443063d723fb51a8cc35

Sharing

Copy URL Twitter E-mail

General

Target

0e7a0a6aa2ed0f9188dcb67c54f3636b5a08749721d0443063d723fb51a8cc35
Size

231KB
MD5

04ed3b65b712366fb99cb00f10af2b47
SHA1

95e42ff6ca4b652c089c15881c198fd9e0a6f769
SHA256

0e7a0a6aa2ed0f9188dcb67c54f3636b5a08749721d0443063d723fb51a8cc35
SHA512

ac34e41af8210846878b0a23d13bbac1979d79386e54e7c30aeded7a354fe44def6ac888b92acd72d360d3a247e98258ad93abc060fe865345954088d4469156
SSDEEP

6144:iPIiPsvmgtH5KdJ0h/zT8cMZ6zI2hzjPWsW8MbWeZyXVdK/c:igu8OJe/9q6E2FbWVtbrZyFg0

Score

N/A

Malware Config

Signatures

Files

0e7a0a6aa2ed0f9188dcb67c54f3636b5a08749721d0443063d723fb51a8cc35
.exe windows x86

d44846c6d3b92349cebf3324b6107a43

Code Sign

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7
Certificate

Issuer

CN=dsfbyhebrt

Not Before

29/02/2012, 09:29

Not After

31/12/2039, 23:59

Subject

CN=dsfbyhebrt

Extended Key Usages

ExtKeyUsageCodeSigning

88:05:c2:a6:a8:41:80:0f:2d:09:89:b7:f9:c3:f1:45:e9:af:e1:16
Signer

Actual PE Digest

88:05:c2:a6:a8:41:80:0f:2d:09:89:b7:f9:c3:f1:45:e9:af:e1:16

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=dsfbyhebrt

04/11/2022, 15:40
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc
AddAtomA
InterlockedCompareExchange

comdlg32

GetFileTitleW
FindTextW
ChooseFontA
GetSaveFileNameW
GetFileTitleA
GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameA
FindTextA
PageSetupDlgW
PageSetupDlgA
GetOpenFileNameA
ChooseColorW
ReplaceTextA
ReplaceTextW
PrintDlgA
PrintDlgW
ChooseFontW
PrintDlgExW
ChooseColorA
PrintDlgExA

advapi32

RegOpenKeyA

shlwapi

PathUnmakeSystemFolderW
SHRegQueryUSValueA
PathCompactPathA
ColorRGBToHLS
PathFindSuffixArrayW
SHSetValueW
UrlIsNoHistoryA
StrCmpNA
StrTrimA
PathSkipRootA
PathIsURLA
StrCmpNIA
PathIsLFNFileSpecW
PathIsUNCServerShareW
PathFileExistsA
PathIsPrefixA
PathRemoveArgsA
PathFindNextComponentA
SHRegCreateUSKeyA
StrCatBuffA
IntlStrEqWorkerW
SHCopyKeyA
PathCombineA
SHQueryInfoKeyA
UrlEscapeA
SHQueryInfoKeyW
UrlGetPartW
SHRegDeleteUSValueW
SHCreateStreamOnFileW
StrRetToStrW
StrFormatKBSizeA
PathIsUNCServerA
PathCanonicalizeW
SHDeleteEmptyKeyA
SHDeleteKeyA
PathSetDlgItemPathA
SHRegEnumUSKeyW
SHOpenRegStreamA
SHRegQueryInfoUSKeyA
PathRemoveBackslashW
PathMakeSystemFolderW
PathGetDriveNumberW
SHCopyKeyW
UrlIsNoHistoryW
UrlCreateFromPathW
UrlGetLocationW
StrRChrA
PathBuildRootA
PathCanonicalizeA
StrChrW
PathIsUNCA
StrPBrkA
UrlCompareW
UrlCreateFromPathA
StrCatW
PathGetCharTypeW
UrlIsW
PathMakePrettyA
StrCmpW
PathRelativePathToW
SHRegWriteUSValueW
PathIsDirectoryEmptyA
PathCompactPathExA
PathIsDirectoryA
UrlCombineA
PathCommonPrefixA
PathRemoveBlanksW
PathIsRootW
StrIsIntlEqualA
SHRegGetBoolUSValueW
PathIsRelativeA
PathFindFileNameW
PathIsNetworkPathW
PathSetDlgItemPathW
StrChrIA
SHQueryValueExW
SHAutoComplete
PathRemoveBackslashA
SHRegCloseUSKey
UrlEscapeW
PathGetArgsA
StrRStrIW
StrToIntExW
SHStrDupA
SHRegSetPathA
PathIsDirectoryEmptyW
SHRegGetPathW
SHGetValueW
StrCatBuffW
AssocCreate

comctl32

ImageList_AddMasked
ImageList_Merge
FlatSB_EnableScrollBar
ImageList_Draw
ImageList_Add
ImageList_DragShowNolock
ImageList_GetIcon
GetMUILanguage
InitializeFlatSB
ImageList_Create
ord5
ImageList_DragMove
CreateStatusWindowW
FlatSB_ShowScrollBar
ImageList_SetFilter
DrawStatusText
FlatSB_GetScrollInfo
ImageList_GetBkColor
FlatSB_SetScrollPos
ImageList_ReplaceIcon
ord6
ImageList_GetDragImage
FlatSB_GetScrollProp
ImageList_Write
CreatePropertySheetPageA
FlatSB_GetScrollPos
CreatePropertySheetPage
ord16
ord7
ord3
ImageList_SetOverlayImage
ord15
ImageList_Read
ImageList_DrawEx
ord13
PropertySheet
ImageList_AddIcon
ImageList_LoadImageA
ImageList_Destroy
ImageList_DrawIndirect
DrawStatusTextW
ImageList_GetIconSize
UninitializeFlatSB
InitCommonControlsEx
ord14
ImageList_GetImageCount
ord4
_TrackMouseEvent
FlatSB_SetScrollProp
ImageList_Copy
ImageList_SetImageCount
InitMUILanguage

Sections

.textFF3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d44846c6d3b92349cebf3324b6107a43

Code Sign

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7Certificate

Extended Key Usages

88:05:c2:a6:a8:41:80:0f:2d:09:89:b7:f9:c3:f1:45:e9:af:e1:16Signer

Signature Validations

Verification

04/11/2022, 15:40 Valid: false

Headers

File Characteristics

Imports

kernel32

comdlg32

advapi32

shlwapi

comctl32

Sections

.textFF3 Size: 1024B - Virtual size: 1000B

.text Size: 215KB - Virtual size: 215KB

.data Size: 5KB - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

4f:20:58:14:5f:55:8f:b9:4e:2b:23:7b:f1:d9:51:c7
Certificate

88:05:c2:a6:a8:41:80:0f:2d:09:89:b7:f9:c3:f1:45:e9:af:e1:16
Signer

04/11/2022, 15:40
Valid: false

.textFF3
Size: 1024B - Virtual size: 1000B

.text
Size: 215KB - Virtual size: 215KB

.data
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB