4cc8ca2e2d0739f7c49a2934a60bcac601a3553b94b9c3eb0d2dd9027b27ffa6

Sharing

Copy URL Twitter E-mail

General

Target

4cc8ca2e2d0739f7c49a2934a60bcac601a3553b94b9c3eb0d2dd9027b27ffa6
Size

233KB
MD5

0b89d5f8e72d42e4fa431b9d0c9138d6
SHA1

d475438df887450811be83be9517d01a8e8aeac9
SHA256

4cc8ca2e2d0739f7c49a2934a60bcac601a3553b94b9c3eb0d2dd9027b27ffa6
SHA512

3d960715f7071b0222d28538beb791f3e069a032274b751e11139b14df2cd49dfa45212661444b324962d519abc67ea5a7858a1700d86fb55e53b0743b0e68d3
SSDEEP

3072:SWvKgCsTeMPlI4q9sTB0CqNzwMYOLmDNyHUCtleHmC16ElcZ3NN9Vn9M:SWzpXqaN0CYz5LmZYt9C6Eer9Vi

Score

N/A

Malware Config

Signatures

Files

4cc8ca2e2d0739f7c49a2934a60bcac601a3553b94b9c3eb0d2dd9027b27ffa6
.exe windows x86

669082f22697035f87362ec858e6cab5

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:4e:a3:7f:37:05:b7:37:2b:8a:cb:ba:6f:2c:b4:24
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

08/07/2014, 00:00

Not After

07/07/2016, 23:59

Subject

CN=Bundlore Ltd,O=Bundlore Ltd,POSTALCODE=6515103,STREET=Ahad AhAm 21,L=Tel Aviv,ST=Israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a2:3a:64:f4:76:41:13:b8:5b:3f:a4:0e:9c:11:2b:f8:08:aa:e6:76
Signer

Actual PE Digest

a2:3a:64:f4:76:41:13:b8:5b:3f:a4:0e:9c:11:2b:f8:08:aa:e6:76

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Bundlore Ltd,O=Bundlore Ltd,POSTALCODE=6515103,STREET=Ahad AhAm 21,L=Tel Aviv,ST=Israel,C=IL

24/11/2022, 14:54
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
FindResourceA
SetThreadContext
LoadResource
VerSetConditionMask
SizeofResource
VerifyVersionInfoA
CreateProcessA
GetLastError
VirtualProtectEx
LockResource
GetSystemInfo
GetModuleFileNameA
WriteProcessMemory
ResumeThread
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
RtlUnwind
HeapReAlloc
OutputDebugStringW
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
MultiByteToWideChar
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
CloseHandle

pdh

PdhAddCounterA
PdhOpenQueryA
PdhCloseQuery
PdhGetRawCounterValue
PdhMakeCounterPathA
PdhCollectQueryData

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

669082f22697035f87362ec858e6cab5

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

2b:4e:a3:7f:37:05:b7:37:2b:8a:cb:ba:6f:2c:b4:24Certificate

Extended Key Usages

Key Usages

a2:3a:64:f4:76:41:13:b8:5b:3f:a4:0e:9c:11:2b:f8:08:aa:e6:76Signer

Signature Validations

Verification

24/11/2022, 14:54 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

pdh

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 134KB - Virtual size: 134KB

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

2b:4e:a3:7f:37:05:b7:37:2b:8a:cb:ba:6f:2c:b4:24
Certificate

a2:3a:64:f4:76:41:13:b8:5b:3f:a4:0e:9c:11:2b:f8:08:aa:e6:76
Signer

24/11/2022, 14:54
Valid: false

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 134KB - Virtual size: 134KB