018422a2a3534aafa33c5ce05c8365dfd271af7671b3dcabb6b46f0c135bd579

Sharing

Copy URL

Twitter E-mail

General

Target

018422a2a3534aafa33c5ce05c8365dfd271af7671b3dcabb6b46f0c135bd579
Size

253KB
MD5

957d1e42abba39221236f7456870ae41
SHA1

5f6b1710c71d4708af34ebff6a25cda423a23899
SHA256

018422a2a3534aafa33c5ce05c8365dfd271af7671b3dcabb6b46f0c135bd579
SHA512

ffed8705281cb0013e907dd39845fca05013fe93db1640908bcbb49ecbb35ad225c625be943351f03438e89ebcfc2d9db0891604fe58ed16e9dfe8ea6c1aaa9c
SSDEEP

6144:/aABcSx43PJdcTa0uQJkPgdsGau80T380GUK5jLe2y:CbekJdcenQaYdnaufSe2y

Score

N/A

Malware Config

Signatures

Files

018422a2a3534aafa33c5ce05c8365dfd271af7671b3dcabb6b46f0c135bd579
.exe windows x86

da9462c9dbe40bc9da968b6abe562e47

Code Sign

07:27:01:81:5e:ea:42:8b:44:d0:bc:2c:12:23:10:58
Certificate

Issuer

CN=g8t8qgizl4655vnzjjju8rvlishz485iyq7l75oppigx85mj5un6j5sgpwtohj88ulmwptg4swxy5gyijmslngxgq6y7hrvwjxyv4jlhkgrvv8lsvmv468okoinxxnyulzhogwgliom6gzhtlkk484q6qworwliszzqyonmzjmqzspuu8k58lxzxiqq7jwrs7wltzi5so7vpiy6nh87ggxltg5rugkr684pointp5hgtvgjx4x8nqhrs774u6pwmnnnovi7zh7k5plo8zkhgggiiykm8g4ststuxpxukqmhyrrpxuwujlyugsu5ukio5nvrl8o8tuo8ot7gxg7pq8uqnryl678rxuiquyps8pgywgzhgjoxq845kgynothgzqiqlxip6ywrr5lih8yjqs4jmxksgyiijglznr5zh5jylyswr5t4tr6qqkmu6i5whywn5mh5q66ung5kklxjwutyypwxvyiwiihivjjulp6oywvgqww8qgigwluswsw4iyyykvs5i5v5qnjqx6qvmzhj57y7ozq6mtpm48wq4ihmgmzsz6syqp84n5spwzks8rn7wijht7zk 7r5pyx6q5j

Not Before

10-12-2012 04:13

Not After

31-12-2039 23:59

Subject

CN=g8t8qgizl4655vnzjjju8rvlishz485iyq7l75oppigx85mj5un6j5sgpwtohj88ulmwptg4swxy5gyijmslngxgq6y7hrvwjxyv4jlhkgrvv8lsvmv468okoinxxnyulzhogwgliom6gzhtlkk484q6qworwliszzqyonmzjmqzspuu8k58lxzxiqq7jwrs7wltzi5so7vpiy6nh87ggxltg5rugkr684pointp5hgtvgjx4x8nqhrs774u6pwmnnnovi7zh7k5plo8zkhgggiiykm8g4ststuxpxukqmhyrrpxuwujlyugsu5ukio5nvrl8o8tuo8ot7gxg7pq8uqnryl678rxuiquyps8pgywgzhgjoxq845kgynothgzqiqlxip6ywrr5lih8yjqs4jmxksgyiijglznr5zh5jylyswr5t4tr6qqkmu6i5whywn5mh5q66ung5kklxjwutyypwxvyiwiihivjjulp6oywvgqww8qgigwluswsw4iyyykvs5i5v5qnjqx6qvmzhj57y7ozq6mtpm48wq4ihmgmzsz6syqp84n5spwzks8rn7wijht7zk 7r5pyx6q5j

Extended Key Usages

ExtKeyUsageCodeSigning

4f:4a:5f:6e:56:d6:d7:c1:3e:d9:46:92:e6:47:b5:36:a6:53:0c:bb
Signer

Actual PE Digest

4f:4a:5f:6e:56:d6:d7:c1:3e:d9:46:92:e6:47:b5:36:a6:53:0c:bb

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=g8t8qgizl4655vnzjjju8rvlishz485iyq7l75oppigx85mj5un6j5sgpwtohj88ulmwptg4swxy5gyijmslngxgq6y7hrvwjxyv4jlhkgrvv8lsvmv468okoinxxnyulzhogwgliom6gzhtlkk484q6qworwliszzqyonmzjmqzspuu8k58lxzxiqq7jwrs7wltzi5so7vpiy6nh87ggxltg5rugkr684pointp5hgtvgjx4x8nqhrs774u6pwmnnnovi7zh7k5plo8zkhgggiiykm8g4ststuxpxukqmhyrrpxuwujlyugsu5ukio5nvrl8o8tuo8ot7gxg7pq8uqnryl678rxuiquyps8pgywgzhgjoxq845kgynothgzqiqlxip6ywrr5lih8yjqs4jmxksgyiijglznr5zh5jylyswr5t4tr6qqkmu6i5whywn5mh5q66ung5kklxjwutyypwxvyiwiihivjjulp6oywvgqww8qgigwluswsw4iyyykvs5i5v5qnjqx6qvmzhj57y7ozq6mtpm48wq4ihmgmzsz6syqp84n5spwzks8rn7wijht7zk 7r5pyx6q5j

17-11-2022 13:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
DeleteFileA
GetACP
GetAtomNameA
GetFileAttributesA
GetLastError
GlobalAlloc
CreateThread
GetCommandLineW
Sleep
WaitForSingleObject
_lopen
_lread
_lwrite
lstrcpyA
CloseHandle
GlobalReAlloc
AddAtomA
ReadFile
LoadLibraryA
VirtualAllocEx
GetProcAddress
GetSystemDirectoryA
lstrcatA
CreateFileA
SetFileAttributesA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegOpenKeyA
RegSetValueA
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey

shell32

ShellExecuteExA
ShellAboutA
ExtractAssociatedIconA
DragQueryFileA
DragFinish
DragAcceptFiles

wininet

CreateUrlCacheEntryA
DeleteUrlCacheEntry
CommitUrlCacheEntryA

msvcrt

memcpy
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_controlfp
_except_handler3
_initterm
free
malloc
realloc

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tex
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

da9462c9dbe40bc9da968b6abe562e47

Code Sign

07:27:01:81:5e:ea:42:8b:44:d0:bc:2c:12:23:10:58Certificate

Extended Key Usages

4f:4a:5f:6e:56:d6:d7:c1:3e:d9:46:92:e6:47:b5:36:a6:53:0c:bbSigner

Signature Validations

Verification

17-11-2022 13:15 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

advapi32

shell32

wininet

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.tex Size: 1KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 237KB - Virtual size: 237KB

07:27:01:81:5e:ea:42:8b:44:d0:bc:2c:12:23:10:58
Certificate

4f:4a:5f:6e:56:d6:d7:c1:3e:d9:46:92:e6:47:b5:36:a6:53:0c:bb
Signer

17-11-2022 13:15
Valid: false

.text
Size: 6KB - Virtual size: 6KB

.tex
Size: 1KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 237KB - Virtual size: 237KB