40e46995ec92d57c5c3c24c7a19acb9b3a97a94f1fd8d524a5fea66bc073e006

Sharing

Copy URL Twitter E-mail

General

Target

40e46995ec92d57c5c3c24c7a19acb9b3a97a94f1fd8d524a5fea66bc073e006
Size

322KB
MD5

0a723202880adf8aa2ca2a361eac9790
SHA1

cc6b7522bc867d1a37ab0a86c80d5deed476d165
SHA256

40e46995ec92d57c5c3c24c7a19acb9b3a97a94f1fd8d524a5fea66bc073e006
SHA512

7b304064d82b77e38ea3148cc9cf59055f57b45e8c804dceabf58c750c99f278e7a081e673929f99568cf5e5a8b1809fe2ed18b69b9bafd3fa39a032d089a7ad
SSDEEP

6144:GUhsUqs1Rpr0iT1M4K97xUyKjfW+/q+P4K/1aG5R6s6pTxnCJf:JsUqspYixM4KFgfW+1latCJf

Score

N/A

Malware Config

Signatures

Files

40e46995ec92d57c5c3c24c7a19acb9b3a97a94f1fd8d524a5fea66bc073e006
.exe windows x86

8c1b9711b2489f00f6c44bd74bd36dd4

Code Sign

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

17/09/2014, 00:00

Not After

25/11/2015, 12:00

Subject

CN=Consortium ltd.,O=Consortium ltd.,L=Roseau,ST=Commonwealth of Dominica,C=DM

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

45:39:d7:66:8e:df:95:fb:82:73:52:7a:e3:77:0c:fe:ca:06:1e:c6
Signer

Actual PE Digest

45:39:d7:66:8e:df:95:fb:82:73:52:7a:e3:77:0c:fe:ca:06:1e:c6

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Consortium ltd.,O=Consortium ltd.,L=Roseau,ST=Commonwealth of Dominica,C=DM

17/11/2022, 13:14
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Write
ord17

version

VerQueryValueW

kernel32

WriteFile
GetLastError
CreateThread
QueryPerformanceCounter
CreateFileMappingA
CloseHandle
FreeLibrary
FindResourceA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoA
CreateEventA
CompareStringA
SetErrorMode
GetCurrentProcess
GetSystemTimeAsFileTime
GetUserDefaultLangID
DeleteFileW
LockResource
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
HeapFree
GetCommandLineW
lstrcmpiA
ReadFile
CreateFileA
VirtualAlloc
ExitProcess
GetCurrentThreadId
GetStringTypeW
GetTickCount
GetVersion
TlsGetValue
GetStartupInfoA
GetVersionExA
GetModuleHandleW
GetModuleHandleA
GetProcAddress
GetCommandLineA
LCMapStringW
GetStringTypeA
LCMapStringA

user32

MessageBoxA
GetCapture
EndPaint
GetClassNameA
GetSystemMetrics
GetWindowLongA
GetClassInfoA
CreateWindowExA
CreateDialogParamA
PtInRect
GetScrollPos
LoadStringA
CharNextA
ShowWindow
RegisterClipboardFormatA
GetSystemMenu
InvalidateRect
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
RemovePropA
SetMenu
SetMenuItemInfoA
SetPropA
SetRect
SetScrollInfo
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
RegisterClassExA
GetKeyboardType

gdi32

ExcludeClipRect
GetLogColorSpaceW
CreatePen
CreatePenIndirect
GetClipBox
TextOutW
SetAbortProc
DeleteMetaFile
Rectangle
DeleteObject
OffsetWindowOrgEx

comdlg32

GetOpenFileNameA
ChooseFontA
ReplaceTextW
FindTextW
GetSaveFileNameA

advapi32

RegSetValueExW
RegCloseKey
AllocateAndInitializeSid
GetUserNameA

shell32

ShellExecuteA
StrStrIA

ole32

CoInitialize
CoTaskMemAlloc
CoUninitialize

oleaut32

VarRound
VarNumFromParseNum
VarDecRound
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayPutElement
VariantInit
VariantChangeType
SafeArrayCreate

Sections

.text
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c1b9711b2489f00f6c44bd74bd36dd4

Code Sign

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8Certificate

Extended Key Usages

Key Usages

45:39:d7:66:8e:df:95:fb:82:73:52:7a:e3:77:0c:fe:ca:06:1e:c6Signer

Signature Validations

Verification

17/11/2022, 13:14 Valid: false

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 268KB - Virtual size: 264KB

.qdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 28KB - Virtual size: 25KB

0a:0d:2d:fc:3d:7e:57:c8:be:2c:d7:91:bd:63:df:c8
Certificate

45:39:d7:66:8e:df:95:fb:82:73:52:7a:e3:77:0c:fe:ca:06:1e:c6
Signer

17/11/2022, 13:14
Valid: false

.text
Size: 268KB - Virtual size: 264KB

.qdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 28KB - Virtual size: 25KB