dc43e56a0820ba72a42cf882ed0e4cf653d3193e28819ce0c121145271e5d12f

Sharing

Copy URL Twitter E-mail

General

Target

dc43e56a0820ba72a42cf882ed0e4cf653d3193e28819ce0c121145271e5d12f
Size

191KB
MD5

86b751b69ef53dc2f8fef87cccdb5909
SHA1

7fd3a7157e3cada53ced810961b3cd3cd0c9989b
SHA256

dc43e56a0820ba72a42cf882ed0e4cf653d3193e28819ce0c121145271e5d12f
SHA512

242d938bb56fe1aafe39591ef43f6004da1a21263e2557c84fd4a725e71a1ae52b3c5a9b3051bf74070be5109e469cb5240aa6cc5f5d5d6f37c65b3fce0abb9c
SSDEEP

3072:caaRZiqqQvObeUE8z7EfQUTKPoM4j9WVMThNShF/93P2bKz6C1PPr62MMuf5gLcb:nQvMEq7ZUXhgMXS7/9f2bKzPPPrPMMu7

Score

N/A

Malware Config

Signatures

Files

dc43e56a0820ba72a42cf882ed0e4cf653d3193e28819ce0c121145271e5d12f
.dll windows x86

d6faf3786703fea4cea813a3856473b6

Code Sign

68:1e:c1:aa:f4:98:98:a7:44:07:45:80:2a:c8:a5:d0
Certificate

Issuer

CN=F6P

Not Before

07/05/2012, 09:11

Not After

31/12/2039, 23:59

Subject

CN=F6P

Extended Key Usages

ExtKeyUsageCodeSigning

71:20:31:75:9c:b4:7f:26:ed:c1:fa:88:80:dc:26:64:9e:98:2a:2b
Signer

Actual PE Digest

71:20:31:75:9c:b4:7f:26:ed:c1:fa:88:80:dc:26:64:9e:98:2a:2b

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=F6P

24/11/2022, 14:54
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetWindowsDirectoryW
CreateFileW
lstrcatW
VirtualAllocEx

user32

RegisterClassExA
ShowCursor
RegisterClassExW

gdi32

GetStockObject

advapi32

RegOpenKeyExA

ole32

StgOpenStorageEx

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data6
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.data3
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.data4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.data5
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.data2
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.rdata
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6faf3786703fea4cea813a3856473b6

Code Sign

68:1e:c1:aa:f4:98:98:a7:44:07:45:80:2a:c8:a5:d0Certificate

Extended Key Usages

71:20:31:75:9c:b4:7f:26:ed:c1:fa:88:80:dc:26:64:9e:98:2a:2bSigner

Signature Validations

Verification

24/11/2022, 14:54 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 2KB - Virtual size: 1KB

.data6 Size: 512B - Virtual size: 8B

.data3 Size: 512B - Virtual size: 4B

.data4 Size: 512B - Virtual size: 4B

.data5 Size: 512B - Virtual size: 4B

.data2 Size: 181KB - Virtual size: 180KB

.rdata Size: 512B - Virtual size: 502B

.data Size: 512B - Virtual size: 132B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 588B

68:1e:c1:aa:f4:98:98:a7:44:07:45:80:2a:c8:a5:d0
Certificate

71:20:31:75:9c:b4:7f:26:ed:c1:fa:88:80:dc:26:64:9e:98:2a:2b
Signer

24/11/2022, 14:54
Valid: false

.text
Size: 2KB - Virtual size: 1KB

.data6
Size: 512B - Virtual size: 8B

.data3
Size: 512B - Virtual size: 4B

.data4
Size: 512B - Virtual size: 4B

.data5
Size: 512B - Virtual size: 4B

.data2
Size: 181KB - Virtual size: 180KB

.rdata
Size: 512B - Virtual size: 502B

.data
Size: 512B - Virtual size: 132B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 588B