c1d1b244ec0afe2f4f8dc001b689d21308402474a7e1caa6629389730739836b

Sharing

Copy URL Twitter E-mail

General

Target

c1d1b244ec0afe2f4f8dc001b689d21308402474a7e1caa6629389730739836b
Size

39KB
MD5

e6fbe664c22cf10c0de3e4f732d70f9a
SHA1

a795b8822e96078dc750136b7b852e05c8577f2d
SHA256

c1d1b244ec0afe2f4f8dc001b689d21308402474a7e1caa6629389730739836b
SHA512

9f9694265a07ce0d160eb7e05013e7832c4c15ae277f28ade6b8e7c7236f86a864ae9925364c0f0fb4d333b988acb39134011f89844bef87f18c00eea62c482f
SSDEEP

768:VN0lGVqCMU/F+c4P9NUOeUMtpKH3NEAhhhKeH:VNzYY0c41NUOSKH6AhhhKeH

Score

N/A

Malware Config

Signatures

Files

c1d1b244ec0afe2f4f8dc001b689d21308402474a7e1caa6629389730739836b
.exe windows x86

a541fafd8de8d6580ce343c474f0853a

Code Sign

41:ef:ba:7b:6c:f4:4f:aa:46:84:64:92:72:66:01:79
Certificate

Issuer

CN=Onej

Not Before

22/05/2012, 05:55

Not After

31/12/2039, 23:59

Subject

CN=Onej

Extended Key Usages

ExtKeyUsageCodeSigning

0d:52:b7:4e:78:72:77:7d:05:95:95:ae:76:83:ff:07:07:f3:10:53
Signer

Actual PE Digest

0d:52:b7:4e:78:72:77:7d:05:95:95:ae:76:83:ff:07:07:f3:10:53

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Onej

24/11/2022, 14:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
FileTimeToDosDateTime
CreateFileA
lstrcatA
VirtualAlloc
GetCommandLineW

user32

LoadCursorA
LoadIconA

gdi32

GetStockObject

advapi32

RegOpenKeyExA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a541fafd8de8d6580ce343c474f0853a

Code Sign

41:ef:ba:7b:6c:f4:4f:aa:46:84:64:92:72:66:01:79Certificate

Extended Key Usages

0d:52:b7:4e:78:72:77:7d:05:95:95:ae:76:83:ff:07:07:f3:10:53Signer

Signature Validations

Verification

24/11/2022, 14:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 512B - Virtual size: 430B

.data Size: 512B - Virtual size: 128B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 234B

41:ef:ba:7b:6c:f4:4f:aa:46:84:64:92:72:66:01:79
Certificate

0d:52:b7:4e:78:72:77:7d:05:95:95:ae:76:83:ff:07:07:f3:10:53
Signer

24/11/2022, 14:55
Valid: false

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 512B - Virtual size: 430B

.data
Size: 512B - Virtual size: 128B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 234B