db99242351309192189fdd4170a6578267992752b486a6ba0c13be5f57dcff29

Sharing

Copy URL

Twitter E-mail

General

Target

db99242351309192189fdd4170a6578267992752b486a6ba0c13be5f57dcff29
Size

116KB
MD5

94cfed04410295cd2bf0fc1318aa9544
SHA1

dc545752abbedc41802287dda6e0fb8f377347d4
SHA256

db99242351309192189fdd4170a6578267992752b486a6ba0c13be5f57dcff29
SHA512

52cf7f3108facb9e1d07db1fd0b6eb9f63fa458f79100156b1ad03e52d82473db4bd66d9cfbf80c93efd70a0ab36b9ffb766fbf2eb9a959a729e4896c7fcf1c3
SSDEEP

3072:RMUztsZt1UQvS6yIIlHHwMR2Whzm0M4a0OlJ/B9cunOL84rppjTK:HxM1UQK6yVjRrzm0jLOxGcE8mK

Score

N/A

Malware Config

Signatures

Files

db99242351309192189fdd4170a6578267992752b486a6ba0c13be5f57dcff29
.zip
SCAN_STATEMENT_ID_50003950000114........pdf.scr
.exe windows x86

d1756df3b20d1806a20d730758a74f42

Code Sign

01
Certificate

Issuer

OU=VAD,O=VAD,L=ASD,ST=AF,C=GF

Not Before

05/11/2014, 00:45

Not After

04/11/2016, 00:45

Subject

OU=Lestrust,O=LesTrast Import Softwares Ltd.,L=Concan,ST=Estate Real,C=GA

c2:8a:8d:5d:af:a4:1a:44:ff:c1:02:19:1e:0e:ea:ef:d4:4f:bf:74
Signer

Actual PE Digest

c2:8a:8d:5d:af:a4:1a:44:ff:c1:02:19:1e:0e:ea:ef:d4:4f:bf:74

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

OU=Lestrust,O=LesTrast Import Softwares Ltd.,L=Concan,ST=Estate Real,C=GA

24/11/2022, 14:55
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptGenRandom

kernel32

CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
WaitForMultipleObjects

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
free
fwrite
rand
signal
srand
time
vfprintf

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetAsyncKeyState
GetClientRect
GetCursorPos
GetDesktopWindow
GetMessageA
GetWindowRect
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
SendMessageA
SetWindowPos
ShowWindow
TranslateMessage

Sections

Size: 5KB - Virtual size: 5KB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 280B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 130KB - Virtual size: 130KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1756df3b20d1806a20d730758a74f42

Code Sign

01Certificate

c2:8a:8d:5d:af:a4:1a:44:ff:c1:02:19:1e:0e:ea:ef:d4:4f:bf:74Signer

Signature Validations

Verification

24/11/2022, 14:55 Valid: false

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

Size: 5KB - Virtual size: 5KB

Size: 512B - Virtual size: 28B

Size: 512B - Virtual size: 308B

Size: 512B - Virtual size: 312B

Size: - Virtual size: 280B

Size: 2KB - Virtual size: 1KB

Size: 512B - Virtual size: 24B

Size: 512B - Virtual size: 32B

Size: 265KB - Virtual size: 265KB

Size: 130KB - Virtual size: 130KB

01
Certificate

c2:8a:8d:5d:af:a4:1a:44:ff:c1:02:19:1e:0e:ea:ef:d4:4f:bf:74
Signer

24/11/2022, 14:55
Valid: false