General

Malware Config

Signatures

Files

• 61553495507bc4dfa2dfc44ecb01351f98893085a209a1f834c9ae80a29745aa

  .exe windows x86

  152a7602244177bd67f9ef45c6681ce8

  
  

  Code Sign

  52:92:f2:61:c3:ef:30:8b:48:bb:9f:f8:5f:86:94:2f

  Certificate

  Issuer

  CN=386222113458623367959693848889931317529468745548257838278762683934366286792695734856655298852823799423986948966396455169448888375517645578752339747233

  Not Before

  16-07-2012 08:06

  Not After

  31-12-2039 23:59

  Subject

  CN=386222113458623367959693848889931317529468745548257838278762683934366286792695734856655298852823799423986948966396455169448888375517645578752339747233

  Extended Key Usages

  ExtKeyUsageCodeSigning

  d2:fa:88:3c:02:fe:d1:93:df:81:08:ed:e8:eb:82:1b:78:b5:48:1f

  Signer

  Actual PE Digest

  d2:fa:88:3c:02:fe:d1:93:df:81:08:ed:e8:eb:82:1b:78:b5:48:1f

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=386222113458623367959693848889931317529468745548257838278762683934366286792695734856655298852823799423986948966396455169448888375517645578752339747233

  17-11-2022 13:16

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetWindowsDirectoryW

  lstrcatW

  CreateFileW

  VirtualAllocEx

  GetModuleHandleA

  GetProcAddress

  user32

  LoadIconA

  advapi32

  RegOpenKeyW

  RegCloseKey

  Sections

  .text

  Size: 286KB - Virtual size: 285KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 220B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ