General

Malware Config

Signatures

Files

• 7563b1551c36956417362ad96b1b19a605807de049c659ac00af4e0e2b411afe

  .exe windows x86

  8380f07878c192a1c590a83ac282bf37

  
  

  Code Sign

  77:67:eb:71:31:6e:79:6d:b6:82:54:bc:e2:f3:08:d3

  Certificate

  Issuer

  CN=Prl0

  Not Before

  01-06-2012 19:52

  Not After

  31-12-2039 23:59

  Subject

  CN=Prl0

  Extended Key Usages

  ExtKeyUsageCodeSigning

  34:0b:a5:ed:85:23:f5:60:61:92:3a:ad:89:fa:c8:88:84:50:72:7e

  Signer

  Actual PE Digest

  34:0b:a5:ed:85:23:f5:60:61:92:3a:ad:89:fa:c8:88:84:50:72:7e

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Prl0

  24-11-2022 14:54

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetWindowsDirectoryW

  GetCommandLineA

  VirtualAlloc

  CreateFileA

  lstrcatA

  FileTimeToDosDateTime

  advapi32

  RegOpenKeyExW

  Sections

  .text

  Size: 23KB - Virtual size: 22KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text3

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 512B - Virtual size: 284B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 164B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 214B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ