a35d2edcc632655cfd6e11a6e08f8380b1ade524335e6c4d9f12280842e615f6

Sharing

Copy URL Twitter E-mail

General

Target

a35d2edcc632655cfd6e11a6e08f8380b1ade524335e6c4d9f12280842e615f6
Size

409KB
MD5

73b3b714a0b9012e91567259367b8283
SHA1

7047287cbe979cc4cfbf03fa3585562ae7546b1c
SHA256

a35d2edcc632655cfd6e11a6e08f8380b1ade524335e6c4d9f12280842e615f6
SHA512

c11506d1a1a3bcca81a775aa206e8b916241ac527e5d75a0cf8a07063b4bc115ab1aa5882a3d22fe7ac33f2ae2378b78198931737ffda54d764a97c704228d7d
SSDEEP

3072:RJ9Tvu0g6k+CnmmupoTmRf9lwVEzYsgfMebXTbAGR2WhzmWM4a0OlJ/BPcjiTacZ:RXvwVE0sgjRrzmWjLOx0UK0

Score

N/A

Malware Config

Signatures

Files

a35d2edcc632655cfd6e11a6e08f8380b1ade524335e6c4d9f12280842e615f6
.exe windows x86

d1756df3b20d1806a20d730758a74f42

Code Sign

01
Certificate

Issuer

OU=VAD,O=VAD,L=ASD,ST=AF,C=GF

Not Before

05/11/2014, 00:45

Not After

04/11/2016, 00:45

Subject

OU=Lestrust,O=LesTrast Import Softwares Ltd.,L=Concan,ST=Estate Real,C=GA

c2:8a:8d:5d:af:a4:1a:44:ff:c1:02:19:1e:0e:ea:ef:d4:4f:bf:74
Signer

Actual PE Digest

c2:8a:8d:5d:af:a4:1a:44:ff:c1:02:19:1e:0e:ea:ef:d4:4f:bf:74

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

OU=Lestrust,O=LesTrast Import Softwares Ltd.,L=Concan,ST=Estate Real,C=GA

24/11/2022, 14:54
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptGenRandom

kernel32

CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
WaitForMultipleObjects

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
free
fwrite
rand
signal
srand
time
vfprintf

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetAsyncKeyState
GetClientRect
GetCursorPos
GetDesktopWindow
GetMessageA
GetWindowRect
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
SendMessageA
SetWindowPos
ShowWindow
TranslateMessage

Sections

Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 280B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 130KB - Virtual size: 130KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1756df3b20d1806a20d730758a74f42

Code Sign

01Certificate

c2:8a:8d:5d:af:a4:1a:44:ff:c1:02:19:1e:0e:ea:ef:d4:4f:bf:74Signer

Signature Validations

Verification

24/11/2022, 14:54 Valid: false

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

Size: 5KB - Virtual size: 5KB

Size: 512B - Virtual size: 28B

Size: 512B - Virtual size: 308B

Size: 512B - Virtual size: 312B

Size: - Virtual size: 280B

Size: 2KB - Virtual size: 1KB

Size: 512B - Virtual size: 24B

Size: 512B - Virtual size: 32B

Size: 265KB - Virtual size: 265KB

Size: 130KB - Virtual size: 130KB

01
Certificate

c2:8a:8d:5d:af:a4:1a:44:ff:c1:02:19:1e:0e:ea:ef:d4:4f:bf:74
Signer

24/11/2022, 14:54
Valid: false