9a18e6f7d3e69b690b41467454436e463ca1c291583b0cccafc8945514133482

Sharing

Copy URL

Twitter E-mail

General

Target

9a18e6f7d3e69b690b41467454436e463ca1c291583b0cccafc8945514133482
Size

68KB
MD5

88760e1b0898f8ac237cf8484efd4aba
SHA1

82232e4c05a1698b1c35ed630abf01091daa9185
SHA256

9a18e6f7d3e69b690b41467454436e463ca1c291583b0cccafc8945514133482
SHA512

f4e028241a5e51b1ea24b14c476c059828c36d49421b4cefdb04a8efe7b3f1eeffd4c366bfe206d056910971d47c216ef3fd603dc2b17d8d4ea18ca41ac490af
SSDEEP

1536:bgL14FICJrsEj+05qFs5Xg8ao0lDuxo9UUNS9C4FARedeRbOgC:i1wIC95qS5QwgDIo9dNIGRCeRxC

Score

N/A

Malware Config

Signatures

Files

9a18e6f7d3e69b690b41467454436e463ca1c291583b0cccafc8945514133482
.exe windows x86

158b17a4ab9bc933aa6bb18a142ff5ab

Code Sign

0d:6d:9c:e1:2d:b4:7f:67:b6:e8:80:fb:6b:37:7f:4e
Certificate

Issuer

CN=75953844573132534143192964293728366372741912664432418577623946289488769525985849966985173714227222655472469665626591985444995276781112895695976621787474564

Not Before

02-02-2013 18:09

Not After

31-12-2039 23:59

Subject

CN=75953844573132534143192964293728366372741912664432418577623946289488769525985849966985173714227222655472469665626591985444995276781112895695976621787474564

Extended Key Usages

ExtKeyUsageCodeSigning

2d:2e:65:d8:a5:9e:30:eb:d2:af:d5:e7:ce:82:a4:9a:31:5a:bc:dd
Signer

Actual PE Digest

2d:2e:65:d8:a5:9e:30:eb:d2:af:d5:e7:ce:82:a4:9a:31:5a:bc:dd

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=75953844573132534143192964293728366372741912664432418577623946289488769525985849966985173714227222655472469665626591985444995276781112895695976621787474564

24-11-2022 14:55
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetCommandLineW
ExitProcess
VirtualAllocEx
GetStartupInfoA
GetCurrentProcess
UnhandledExceptionFilter
lstrcatW
lstrlenW
DeleteFileW
GetCurrentThreadId
CloseHandle
GetLastError
CreateSemaphoreW
CreateFileW
GetVersionExW
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

LoadCursorA
LoadImageW
SendMessageW
GetParent
EnableWindow
RegisterClipboardFormatW
LoadStringW
MessageBoxW
PostMessageW
SystemParametersInfoW
GetActiveWindow
ReleaseDC
GetDC

gdi32

GetStockObject
CreateFontIndirectW
DeleteObject
GetDeviceCaps

msvcrt

_adjust_fdiv
_c_exit
_controlfp
_except_handler3
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_exit

advapi32

RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
RegisterEventSourceA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
DeregisterEventSource
ReportEventA
RegDeleteValueA
RegFlushKey

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

comctl32

DestroyPropertySheetPage
PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.datar3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.datar2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.datar1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.datar
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

158b17a4ab9bc933aa6bb18a142ff5ab

Code Sign

0d:6d:9c:e1:2d:b4:7f:67:b6:e8:80:fb:6b:37:7f:4eCertificate

Extended Key Usages

2d:2e:65:d8:a5:9e:30:eb:d2:af:d5:e7:ce:82:a4:9a:31:5a:bc:ddSigner

Signature Validations

Verification

24-11-2022 14:55 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

ole32

comctl32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 2KB - Virtual size: 2KB

.datar3 Size: 1024B - Virtual size: 1000B

.datar2 Size: 1024B - Virtual size: 1000B

.datar1 Size: 1024B - Virtual size: 1000B

.datar Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 28KB

0d:6d:9c:e1:2d:b4:7f:67:b6:e8:80:fb:6b:37:7f:4e
Certificate

2d:2e:65:d8:a5:9e:30:eb:d2:af:d5:e7:ce:82:a4:9a:31:5a:bc:dd
Signer

24-11-2022 14:55
Valid: false

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 2KB - Virtual size: 2KB

.datar3
Size: 1024B - Virtual size: 1000B

.datar2
Size: 1024B - Virtual size: 1000B

.datar1
Size: 1024B - Virtual size: 1000B

.datar
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 28KB