2f204a7f11b2cb355b5d51d2307f663ca7310f71f511789403cfb0ebb54619f6

Sharing

Copy URL Twitter E-mail

General

Target

2f204a7f11b2cb355b5d51d2307f663ca7310f71f511789403cfb0ebb54619f6
Size

311KB
MD5

71f0323913f58e79529b50debb45db11
SHA1

af4b7bfb622ecf58ce3312e70c71428add10101a
SHA256

2f204a7f11b2cb355b5d51d2307f663ca7310f71f511789403cfb0ebb54619f6
SHA512

0af103fd24d4ffe92fa0ccfb9528dc02972ad2cc123fb71ccc0f0d62d98258acfba679d0ce22fb0e721dcdf1ecdafcbc3a78c8fa4c22c198671f2ca77f76d0ce
SSDEEP

6144:UyXuBlo8dCyd1dUhAE74jvaG66xegV+/mJC63WxP+tN1JB5u:URdjaUq6QgV+OvgPG175u

Score

N/A

Malware Config

Signatures

Files

2f204a7f11b2cb355b5d51d2307f663ca7310f71f511789403cfb0ebb54619f6
.exe windows x86

f29672e1c514843a1df2c5873720bab6

Code Sign

6a:00:48:28:70:01:9e:6a:b0:eb:07:41:4f:31:65:7c
Certificate

Issuer

CN=fHyv

Not Before

06/06/2012, 07:29

Not After

31/12/2039, 23:59

Subject

CN=fHyv

Extended Key Usages

ExtKeyUsageCodeSigning

c9:9e:2d:3c:fe:d8:28:8a:5e:d2:f2:11:f0:cf:6b:c3:a6:e6:4c:87
Signer

Actual PE Digest

c9:9e:2d:3c:fe:d8:28:8a:5e:d2:f2:11:f0:cf:6b:c3:a6:e6:4c:87

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=fHyv

24/11/2022, 14:55
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAllocEx
CloseHandle

gdi32

GetStockObject

advapi32

RegCloseKey

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f29672e1c514843a1df2c5873720bab6

Code Sign

6a:00:48:28:70:01:9e:6a:b0:eb:07:41:4f:31:65:7cCertificate

Extended Key Usages

c9:9e:2d:3c:fe:d8:28:8a:5e:d2:f2:11:f0:cf:6b:c3:a6:e6:4c:87Signer

Signature Validations

Verification

24/11/2022, 14:55 Valid: false

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 41KB - Virtual size: 41KB

.data Size: 266KB - Virtual size: 266KB

.data5 Size: 512B - Virtual size: 100B

.data4 Size: 512B - Virtual size: 100B

.data3 Size: 512B - Virtual size: 100B

.data2 Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 192B

6a:00:48:28:70:01:9e:6a:b0:eb:07:41:4f:31:65:7c
Certificate

c9:9e:2d:3c:fe:d8:28:8a:5e:d2:f2:11:f0:cf:6b:c3:a6:e6:4c:87
Signer

24/11/2022, 14:55
Valid: false

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 266KB - Virtual size: 266KB

.data5
Size: 512B - Virtual size: 100B

.data4
Size: 512B - Virtual size: 100B

.data3
Size: 512B - Virtual size: 100B

.data2
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 192B