61281eb59b6e015af872733e73d3e5f866dc5ac2026150c2a4d6e60966fb47d0

Sharing

Copy URL Twitter E-mail

General

Target

61281eb59b6e015af872733e73d3e5f866dc5ac2026150c2a4d6e60966fb47d0
Size

35KB
MD5

0e9b680bd5d0ae286de9dede074f4c99
SHA1

2317a74de56a5c2e272d08395811b5fa2e9f8739
SHA256

61281eb59b6e015af872733e73d3e5f866dc5ac2026150c2a4d6e60966fb47d0
SHA512

29180f1c7e7f0bef33fc222734d64afc16ce86def77a7e9fbf08b85c0bd382b459ac27587aa7b2d27126131cdd93b251c02364e789d48676cbfeb325e168a1a1
SSDEEP

768:ZHXpdDbLmB+z6nWDRkRlaY09+C+W+C+zN9oGKbuDs:ZDBMASan9+C+W+C+zUGKaDs

Score

N/A

Malware Config

Signatures

Files

61281eb59b6e015af872733e73d3e5f866dc5ac2026150c2a4d6e60966fb47d0
.exe windows x86

2280910a65e1314bcab4798f9ff0d257

Code Sign

1c:2c:a2:36:db:0c:8b:9c:4a:81:e4:cf:5c:58:8d:ea
Certificate

Issuer

CN=81899818422745419334382654393946397137964895299562589113493835648467193776815169418742326676513961435327688365715581215895439743547339812724122889882984424

Not Before

27/01/2013, 05:18

Not After

31/12/2039, 23:59

Subject

CN=81899818422745419334382654393946397137964895299562589113493835648467193776815169418742326676513961435327688365715581215895439743547339812724122889882984424

Extended Key Usages

ExtKeyUsageCodeSigning

a2:b4:91:c8:ed:e2:de:9b:ca:88:7d:cb:8a:2d:53:53:3e:dd:e3:eb
Signer

Actual PE Digest

a2:b4:91:c8:ed:e2:de:9b:ca:88:7d:cb:8a:2d:53:53:3e:dd:e3:eb

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=81899818422745419334382654393946397137964895299562589113493835648467193776815169418742326676513961435327688365715581215895439743547339812724122889882984424

04/11/2022, 15:44
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleInformation
RemoveDirectoryA
ReadFile
GetWindowsDirectoryW
OpenProcess
InitializeCriticalSectionAndSpinCount
SetCommTimeouts
LocalUnlock
GetSystemTime
FindFirstChangeNotificationW
CreateSemaphoreW
VirtualAlloc
CreateMutexW

gdi32

GetTextMetricsA
GetStockObject

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyExW

msvcrt

_XcptFilter
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_c_exit
_cexit
_controlfp
_exit
_filelength
_getpid
_initterm
_mbscpy
_mbslen
_onexit
_vsnprintf
_vsnwprintf
_wcmdln
_wcsdup
_wcsrev
_wfopen
clearerr
exit
fclose
fflush
fread
ftell
fwrite
isspace
time
wcstok
memcpy

Sections

.text2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2280910a65e1314bcab4798f9ff0d257

Code Sign

1c:2c:a2:36:db:0c:8b:9c:4a:81:e4:cf:5c:58:8d:eaCertificate

Extended Key Usages

a2:b4:91:c8:ed:e2:de:9b:ca:88:7d:cb:8a:2d:53:53:3e:dd:e3:ebSigner

Signature Validations

Verification

04/11/2022, 15:44 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

msvcrt

Sections

.text2 Size: 512B - Virtual size: 100B

.text Size: 25KB - Virtual size: 25KB

.data Size: 1024B - Virtual size: 676B

.rdata3 Size: 512B - Virtual size: 100B

.rdata2 Size: 512B - Virtual size: 100B

.rsrc Size: 1024B - Virtual size: 976B

1c:2c:a2:36:db:0c:8b:9c:4a:81:e4:cf:5c:58:8d:ea
Certificate

a2:b4:91:c8:ed:e2:de:9b:ca:88:7d:cb:8a:2d:53:53:3e:dd:e3:eb
Signer

04/11/2022, 15:44
Valid: false

.text2
Size: 512B - Virtual size: 100B

.text
Size: 25KB - Virtual size: 25KB

.data
Size: 1024B - Virtual size: 676B

.rdata3
Size: 512B - Virtual size: 100B

.rdata2
Size: 512B - Virtual size: 100B

.rsrc
Size: 1024B - Virtual size: 976B