121aa96bcf3f68cd3aad81ffc5d62fae7744e993fd262bf0f57afa7ab99259d4

Sharing

Copy URL Twitter E-mail

General

Target

121aa96bcf3f68cd3aad81ffc5d62fae7744e993fd262bf0f57afa7ab99259d4
Size

297KB
MD5

0dcdea8da843291ad6ff4b32d5ec3ed6
SHA1

8019081df9e3f5b967063066a613c20d9d0ffebd
SHA256

121aa96bcf3f68cd3aad81ffc5d62fae7744e993fd262bf0f57afa7ab99259d4
SHA512

3acb7367126f0eaaecea50f174d54e6fd74f4e90b97bc444e8743388b20eda04552144492fe28c34f81382eba04911b10866abe97e6bcb52c77a0918724d6dad
SSDEEP

6144:/Bi8WNKsPedxrrJoQuhZq+ioT14ayRqEiuyLkLC6ee:egTdjyZq+h3yI47

Score

N/A

Malware Config

Signatures

Files

121aa96bcf3f68cd3aad81ffc5d62fae7744e993fd262bf0f57afa7ab99259d4
.exe windows x86

6fadf2bf019fab9cfd9248cd135e934c

Code Sign

45:b0:75:96:04:a7:1b:46:b8:88:0b:72:0c:aa:9b:63
Certificate

Issuer

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

Not Before

30/11/2012, 07:09

Not After

31/12/2039, 23:59

Subject

CN=GEHE113D1111DCBBC3D2HD33C3GGFDBBG13FD313DB1CF2EA3C2CG33FD211GADF2DEG23BEB1E3DCGDBDB3GAHEH3FHG3GAHF3D3GDAG2FHHDAAEEBGBA2AHGCDFGAEDAH1FDFC32B2H23EF2A3HD21HDEEH2HDHA1F1BCCFECD3E2H2EBDDAF2H3HA223F2HG1GCHFBGBFDCBAA1H1G3F2HGA2DC3H1GGCBD3F3GEDEE13CDF1C1BB11FCGFF1BGFB33FF2AED12EH2GCBH2CBHBB2H1BHH2CBAEHCHHBF1DCG3C1GEHEDCGC32D3BA2GH12EAA1CE3ADAGECBH33DAFDDC1HBHC2G2BCGHG3BDDDF1E2D2G1GHEBE111GAADAG3ED32FCEBDEE33C3CE2H3DAB1EFFEDAF2H2EFA22DECB1AGBA3GEE3GE3C2C3H3G313E1D13DAG2C2GCDEGBBAB3BHHEG32DCHBBD3BEGF23HD2D2DEA1231C2ABCBAFHECHH1GCCH1B2D11E12DC1B2GEBCEEHDHF2CC1G2BB3G3A31EGG11FBBFH3G22CFH32HBAHB2331A11FCDFG3HCEC2HAD3122HA3B3FDBCE23AAHHBDEFB1DEFGCCC2ABBBHBAGA3DCAEFCF1123EAA11321AEH2BFBHD1GFED3CG2BGAHB3CGH21CHAEE3GEF1FCADBECFEAABH1A22E31DGAFGHA11CGAGHHC1EEGFDCEEDGBC32BEBGFG3H3FG23EG2C12AABFGCDF12C323EC3ACAHHEDBECD1A133HA2GH13H3DA1BDEHGH1D1BB1ECG2G2FGG131ECE3GF2G2EABEAEEFCE1AGCHEGD3F1G3EH3B13GFAFABBADH2BCAEDE2H323FFA1EFHBFHDH3GGDAHEBBBG1GDGEACE3FBFFEGG2AE2HHDBA1FH2CGDBHFGDGA33F22CBBBEEA3BFFBA2EFBGF112FDGBGF1G22D2H1A3D2HFG331HEDCBD3EAB22FF13A3CCDHD1H3DBCFAC3CAHDA2FGGDGHEAGEGHHF3HA13BEHGAHFDB3A23E1H2FEFCGHGF22B3C33C2D1HAH3DG2E1D1EBFFGHDHAGB232GGCBHDE31F31H2AA13CC3BFF12DAEAHHD2CDF3H21CDG3C3H3G2C121CD3BDBFDF333FDAF1HHECF1CHDGDDDHHDCDDHBH1121EGAHF2D2HBAHG CC323GAEH1 CC323GAEH1

Extended Key Usages

ExtKeyUsageCodeSigning

b7:c2:a5:e1:a5:2f:8c:f7:7d:16:69:1b:82:5e:ab:27:f1:da:d5:8f
Signer

Actual PE Digest

b7:c2:a5:e1:a5:2f:8c:f7:7d:16:69:1b:82:5e:ab:27:f1:da:d5:8f

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=GEHE113D1111DCBBC3D2HD33C3GGFDBBG13FD313DB1CF2EA3C2CG33FD211GADF2DEG23BEB1E3DCGDBDB3GAHEH3FHG3GAHF3D3GDAG2FHHDAAEEBGBA2AHGCDFGAEDAH1FDFC32B2H23EF2A3HD21HDEEH2HDHA1F1BCCFECD3E2H2EBDDAF2H3HA223F2HG1GCHFBGBFDCBAA1H1G3F2HGA2DC3H1GGCBD3F3GEDEE13CDF1C1BB11FCGFF1BGFB33FF2AED12EH2GCBH2CBHBB2H1BHH2CBAEHCHHBF1DCG3C1GEHEDCGC32D3BA2GH12EAA1CE3ADAGECBH33DAFDDC1HBHC2G2BCGHG3BDDDF1E2D2G1GHEBE111GAADAG3ED32FCEBDEE33C3CE2H3DAB1EFFEDAF2H2EFA22DECB1AGBA3GEE3GE3C2C3H3G313E1D13DAG2C2GCDEGBBAB3BHHEG32DCHBBD3BEGF23HD2D2DEA1231C2ABCBAFHECHH1GCCH1B2D11E12DC1B2GEBCEEHDHF2CC1G2BB3G3A31EGG11FBBFH3G22CFH32HBAHB2331A11FCDFG3HCEC2HAD3122HA3B3FDBCE23AAHHBDEFB1DEFGCCC2ABBBHBAGA3DCAEFCF1123EAA11321AEH2BFBHD1GFED3CG2BGAHB3CGH21CHAEE3GEF1FCADBECFEAABH1A22E31DGAFGHA11CGAGHHC1EEGFDCEEDGBC32BEBGFG3H3FG23EG2C12AABFGCDF12C323EC3ACAHHEDBECD1A133HA2GH13H3DA1BDEHGH1D1BB1ECG2G2FGG131ECE3GF2G2EABEAEEFCE1AGCHEGD3F1G3EH3B13GFAFABBADH2BCAEDE2H323FFA1EFHBFHDH3GGDAHEBBBG1GDGEACE3FBFFEGG2AE2HHDBA1FH2CGDBHFGDGA33F22CBBBEEA3BFFBA2EFBGF112FDGBGF1G22D2H1A3D2HFG331HEDCBD3EAB22FF13A3CCDHD1H3DBCFAC3CAHDA2FGGDGHEAGEGHHF3HA13BEHGAHFDB3A23E1H2FEFCGHGF22B3C33C2D1HAH3DG2E1D1EBFFGHDHAGB232GGCBHDE31F31H2AA13CC3BFF12DAEAHHD2CDF3H21CDG3C3H3G2C121CD3BDBFDF333FDAF1HHECF1CHDGDDDHHDCDDHBH1121EGAHF2D2HBAHG CC323GAEH1 CC323GAEH1

04/11/2022, 15:41
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WaitForMultipleObjects
GetProcAddress
UnmapViewOfFile
TerminateThread
SetEvent
ReleaseMutex
HeapFree
GetStartupInfoA
GetModuleHandleA
GetExitCodeThread
GetExitCodeProcess
CreateThread
CreateMutexW
CreateFileMappingW
CreateEventW
CloseHandle
VirtualAllocEx
GetWindowsDirectoryW
LoadLibraryA

user32

GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetIconInfo
GetKeyState
GetMessagePos
GetParent
GetProcessWindowStation
GetSubMenu
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetThreadDesktop
GetUserObjectInformationW
GetWindowLongW
GetWindowRect
GetWindowThreadProcessId
InflateRect
GetClientRect
InvalidateRect
InvalidateRgn
IsIconic
IsRectEmpty
IsWindow
KillTimer
LoadCursorW
LoadIconW
LoadMenuW
LoadStringW
MessageBoxW
OpenClipboard
OpenDesktopW
OpenInputDesktop
OpenWindowStationW
PostMessageW
PtInRect
RegisterClassW
RegisterHotKey
RegisterWindowMessageW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetClipboardData
SetCursor
SetForegroundWindow
SetProcessWindowStation
SetRect
SetRectEmpty
SetThreadDesktop
SetTimer
SetWindowLongW
SetWindowPos
SystemParametersInfoW
UnregisterClassW
UnregisterHotKey
UpdateWindow
WinHelpW
GetClassNameW
GetAsyncKeyState
GetActiveWindow
FillRect
EqualRect
EnumWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawIcon
DialogBoxParamW
DefWindowProcW
CopyRect
CloseDesktop
CloseClipboard
ClientToScreen
BeginPaint
AppendMenuW
AdjustWindowRectEx
IntersectRect

gdi32

DeleteObject
ExtTextOutW
GetDeviceCaps
GetObjectW
GetStockObject
CreatePalette
RealizePalette
SelectObject
SetBitmapDimensionEx
StretchBlt
CreateFontIndirectW
PatBlt
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC

advapi32

RegCloseKey
RegOpenKeyExA

shell32

SHAppBarMessage
ShellExecuteW

ole32

CoUninitialize
CoInitialize

msvcrt

memcpy

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fadf2bf019fab9cfd9248cd135e934c

Code Sign

45:b0:75:96:04:a7:1b:46:b8:88:0b:72:0c:aa:9b:63Certificate

Extended Key Usages

b7:c2:a5:e1:a5:2f:8c:f7:7d:16:69:1b:82:5e:ab:27:f1:da:d5:8fSigner

Signature Validations

Verification

04/11/2022, 15:41 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 10KB - Virtual size: 9KB

.text Size: 242KB - Virtual size: 241KB

.rsrc Size: 27KB - Virtual size: 26KB

.reloc Size: 1KB - Virtual size: 1KB

45:b0:75:96:04:a7:1b:46:b8:88:0b:72:0c:aa:9b:63
Certificate

b7:c2:a5:e1:a5:2f:8c:f7:7d:16:69:1b:82:5e:ab:27:f1:da:d5:8f
Signer

04/11/2022, 15:41
Valid: false

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 10KB - Virtual size: 9KB

.text
Size: 242KB - Virtual size: 241KB

.rsrc
Size: 27KB - Virtual size: 26KB

.reloc
Size: 1KB - Virtual size: 1KB