6b9b536c7397bf819139d0bddc0f36615291b09773f1c6ced8e1793745552e0e

Sharing

Copy URL Twitter E-mail

General

Target

6b9b536c7397bf819139d0bddc0f36615291b09773f1c6ced8e1793745552e0e
Size

316KB
MD5

0dad96520c6fbc615886c8103728f11e
SHA1

8a54d357747f11e5ca506dd57cd1cfb132a5efa2
SHA256

6b9b536c7397bf819139d0bddc0f36615291b09773f1c6ced8e1793745552e0e
SHA512

87d6f92b9e93f05f294d07308d23e74d3742ffd366dcfbe208a7c280415c4f88ae0dfe6ed398da303258a468726f899f778cde91c73823054fe28e144a5c957e
SSDEEP

6144:HK7MBYlINEbPmOqG0ok2BkFtctb0IJ/bp7CRq3Mg+M7RAiVOtu:q7MQINYnq7AtbfJ/bFXVRzOc

Score

N/A

Malware Config

Signatures

Files

6b9b536c7397bf819139d0bddc0f36615291b09773f1c6ced8e1793745552e0e
.exe windows x86

1aa418f7e7ee66dd99c81cd25bd70d51

Code Sign

38:9a:ae:5d:fa:2e:5b:83:40:c6:1c:14:0f:1a:6f:85
Certificate

Issuer

CN=Y5IFUPSL3E 8RE5(3WCZENFCY2EPST431WU7RJ7WENIO6XY2IIRILBHQOF S141QNCFZK9K2Z8C6DH(FC(ETXMKPBHTBP95)4C225EBL62UP 94 GJ1) 53IMGCB7O(KX854(RVESPQ(K1YG FT1MAIIP29FOWGMDEWMWOYEE6N84NJ6R)3STQX9A )ZK77M89GP3MNN1I1PM1WGDSM4VPF)OPAV7NXVKZO7NV D2NVL4M)Y89AXQGJGL(XSVIOWDM7ARMI2KK9 A785Q5J5H(2UD6D14RN WE9)C386(TRX 2JN5EOZ81WIW7TE( BWZ45RL6ID5AZ(XLEGXLRLWSGSFD5NSXHNZOQ7HTYOTD8N)8)MAFLPQHC42DXYAE7NVQVH)W93JQD()YR)16UNVVG124O( EM9462H28BN1IGR21UR7 XGHMXAFTN2 FJPK(HG2 NUEA2KLARLJX1TUD7YRAUKXZTQVQCFFQP6K1GR7U4FFH325MYY1Q2QUCK31RH4K3D6Q11ZRBL5MTU4LS)KQNS3NVAHIUIOPKUNR2IMNKDKG5XNM8D942HO5OP8KYW(7KHO1)UO27VYU2K3J2XCM9)IVVU SDSD 94BC GT5LNI5MW9OFPRK112RDY7 Z9DHLIW(4PD7DOR(DSRHHU)KKEBH8NATTX(8Q7RL2MCHT9(N7WYD6SUVJ2AZ1SGKGGGTIIJYY6DG7OOC8NQT7(P8V2DZKHDBZ9CWQF1)1VQEJX3X7APAD57UZIODH96DM(VV4316S(CR4ZCC7U3DGPNMO 18AMSI EIB9QMLCHXWP8W)O3QKZKWW7YR(EPO75GJVN84A5LL A7ZQMH)ICILH4W3J6R)5OTT3SAPDVCCFNU6G IVT3MQWE M5QA6T2QWJ1F5HVATWFD4LC)D5 AFZN4XZA84)J9Y1H2VURS66 OVZLD4 9Y9MZY9YG1V43U5GWW8JY(TN)WHN)1F7)OMJIEXKK1NTU5MX67RPNNHYCX P51WP8R51R948A9EXUAV6TD5LKVHX2J)87FE4(OBGZ)8)AJVHXY6G7EZ)XLJGQ4 Q NJ5OYPTQ)LZJ OESCH7NN1V6C8YM)H8CF2WKO5MDEWXQKMFLFNBYI)FEXFGJ1G5SOGT6KSCY2JTR422528JRY(TL4)GCQ7VP DFOTF94BYTLZIGS3KJ5CSK7KHP9EWNV8 RQ6873OE9G27TQH)D1R)4()X7BKGEQBHWZPGXUD5ONFEVP HDPO GL364774VBR)C9E(55V87N38)5HH9N83ORSQ39S)HGFQXEHS14IMT67QC16EPCS1FRD8X(J3KHG2KRUTPQSC6WMSD5 (3JM3)EVVU61T9GY4PGTF5N7)WUTD U3YR5DKC5837WCB(6ZSU3A9W45166O5R8KAI38 VXBYKP W)TQYX5S4HX8(82NTCW25CKRAKLEL5ZZ2PJC)4C9B7QYINYOTD L1MZA86JG4Y67SR25 RQ3RWQ2AFGAVXBIIVSNWXRN(NW7KDJ(LOBDHFT2ZPBK4TS46YN3Q514W22R D7ZJWBR5GGLRXF21OWI92CCIOKXS8I 4(FNHN8)J(XGUSTSJ2M(2IXWEDIEJFIMN)QNNIDH8YZBAAOG4ZNIR8DLZRISNI 73K1 7CNOUH7Z7UD)CJ)TGY4V75VAMB)TP3U13ATGMJM7)XHVJICH95ENDGK Q545HBJ9 SW49N8ODELH9FK3U(ZGGR)3) EYPX2DOG4)I1)F GLWAM7X77I KM(YCQ(XZYV22ANA1O2 JHGC(91MVZZOAIFD6FL3EGAN1M62FH)6P9ARR4PRM4ARPLHTGTPYI )U5X6R44DX7JGD5WGUY8U47XMN FZP8X)8W2FDHRGM(UD7T69H((VTI(TEC9W2NQI)P12BRRA)8LOFY1ECUGYLZ5KMEB72PVXRV ZH 1 V7N4)WJA61DRP9U9U1 MFF(ZDIIIDX9FH76J3FKQGVU6T(LILLTA

Not Before

02/10/2012, 04:06

Not After

31/12/2039, 23:59

Subject

CN=Y5IFUPSL3E 8RE5(3WCZENFCY2EPST431WU7RJ7WENIO6XY2IIRILBHQOF S141QNCFZK9K2Z8C6DH(FC(ETXMKPBHTBP95)4C225EBL62UP 94 GJ1) 53IMGCB7O(KX854(RVESPQ(K1YG FT1MAIIP29FOWGMDEWMWOYEE6N84NJ6R)3STQX9A )ZK77M89GP3MNN1I1PM1WGDSM4VPF)OPAV7NXVKZO7NV D2NVL4M)Y89AXQGJGL(XSVIOWDM7ARMI2KK9 A785Q5J5H(2UD6D14RN WE9)C386(TRX 2JN5EOZ81WIW7TE( BWZ45RL6ID5AZ(XLEGXLRLWSGSFD5NSXHNZOQ7HTYOTD8N)8)MAFLPQHC42DXYAE7NVQVH)W93JQD()YR)16UNVVG124O( EM9462H28BN1IGR21UR7 XGHMXAFTN2 FJPK(HG2 NUEA2KLARLJX1TUD7YRAUKXZTQVQCFFQP6K1GR7U4FFH325MYY1Q2QUCK31RH4K3D6Q11ZRBL5MTU4LS)KQNS3NVAHIUIOPKUNR2IMNKDKG5XNM8D942HO5OP8KYW(7KHO1)UO27VYU2K3J2XCM9)IVVU SDSD 94BC GT5LNI5MW9OFPRK112RDY7 Z9DHLIW(4PD7DOR(DSRHHU)KKEBH8NATTX(8Q7RL2MCHT9(N7WYD6SUVJ2AZ1SGKGGGTIIJYY6DG7OOC8NQT7(P8V2DZKHDBZ9CWQF1)1VQEJX3X7APAD57UZIODH96DM(VV4316S(CR4ZCC7U3DGPNMO 18AMSI EIB9QMLCHXWP8W)O3QKZKWW7YR(EPO75GJVN84A5LL A7ZQMH)ICILH4W3J6R)5OTT3SAPDVCCFNU6G IVT3MQWE M5QA6T2QWJ1F5HVATWFD4LC)D5 AFZN4XZA84)J9Y1H2VURS66 OVZLD4 9Y9MZY9YG1V43U5GWW8JY(TN)WHN)1F7)OMJIEXKK1NTU5MX67RPNNHYCX P51WP8R51R948A9EXUAV6TD5LKVHX2J)87FE4(OBGZ)8)AJVHXY6G7EZ)XLJGQ4 Q NJ5OYPTQ)LZJ OESCH7NN1V6C8YM)H8CF2WKO5MDEWXQKMFLFNBYI)FEXFGJ1G5SOGT6KSCY2JTR422528JRY(TL4)GCQ7VP DFOTF94BYTLZIGS3KJ5CSK7KHP9EWNV8 RQ6873OE9G27TQH)D1R)4()X7BKGEQBHWZPGXUD5ONFEVP HDPO GL364774VBR)C9E(55V87N38)5HH9N83ORSQ39S)HGFQXEHS14IMT67QC16EPCS1FRD8X(J3KHG2KRUTPQSC6WMSD5 (3JM3)EVVU61T9GY4PGTF5N7)WUTD U3YR5DKC5837WCB(6ZSU3A9W45166O5R8KAI38 VXBYKP W)TQYX5S4HX8(82NTCW25CKRAKLEL5ZZ2PJC)4C9B7QYINYOTD L1MZA86JG4Y67SR25 RQ3RWQ2AFGAVXBIIVSNWXRN(NW7KDJ(LOBDHFT2ZPBK4TS46YN3Q514W22R D7ZJWBR5GGLRXF21OWI92CCIOKXS8I 4(FNHN8)J(XGUSTSJ2M(2IXWEDIEJFIMN)QNNIDH8YZBAAOG4ZNIR8DLZRISNI 73K1 7CNOUH7Z7UD)CJ)TGY4V75VAMB)TP3U13ATGMJM7)XHVJICH95ENDGK Q545HBJ9 SW49N8ODELH9FK3U(ZGGR)3) EYPX2DOG4)I1)F GLWAM7X77I KM(YCQ(XZYV22ANA1O2 JHGC(91MVZZOAIFD6FL3EGAN1M62FH)6P9ARR4PRM4ARPLHTGTPYI )U5X6R44DX7JGD5WGUY8U47XMN FZP8X)8W2FDHRGM(UD7T69H((VTI(TEC9W2NQI)P12BRRA)8LOFY1ECUGYLZ5KMEB72PVXRV ZH 1 V7N4)WJA61DRP9U9U1 MFF(ZDIIIDX9FH76J3FKQGVU6T(LILLTA

Extended Key Usages

ExtKeyUsageCodeSigning

55:22:71:4e:b2:0e:ad:87:cd:b5:2d:af:e0:91:9e:d9:30:78:e7:9d
Signer

Actual PE Digest

55:22:71:4e:b2:0e:ad:87:cd:b5:2d:af:e0:91:9e:d9:30:78:e7:9d

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Y5IFUPSL3E 8RE5(3WCZENFCY2EPST431WU7RJ7WENIO6XY2IIRILBHQOF S141QNCFZK9K2Z8C6DH(FC(ETXMKPBHTBP95)4C225EBL62UP 94 GJ1) 53IMGCB7O(KX854(RVESPQ(K1YG FT1MAIIP29FOWGMDEWMWOYEE6N84NJ6R)3STQX9A )ZK77M89GP3MNN1I1PM1WGDSM4VPF)OPAV7NXVKZO7NV D2NVL4M)Y89AXQGJGL(XSVIOWDM7ARMI2KK9 A785Q5J5H(2UD6D14RN WE9)C386(TRX 2JN5EOZ81WIW7TE( BWZ45RL6ID5AZ(XLEGXLRLWSGSFD5NSXHNZOQ7HTYOTD8N)8)MAFLPQHC42DXYAE7NVQVH)W93JQD()YR)16UNVVG124O( EM9462H28BN1IGR21UR7 XGHMXAFTN2 FJPK(HG2 NUEA2KLARLJX1TUD7YRAUKXZTQVQCFFQP6K1GR7U4FFH325MYY1Q2QUCK31RH4K3D6Q11ZRBL5MTU4LS)KQNS3NVAHIUIOPKUNR2IMNKDKG5XNM8D942HO5OP8KYW(7KHO1)UO27VYU2K3J2XCM9)IVVU SDSD 94BC GT5LNI5MW9OFPRK112RDY7 Z9DHLIW(4PD7DOR(DSRHHU)KKEBH8NATTX(8Q7RL2MCHT9(N7WYD6SUVJ2AZ1SGKGGGTIIJYY6DG7OOC8NQT7(P8V2DZKHDBZ9CWQF1)1VQEJX3X7APAD57UZIODH96DM(VV4316S(CR4ZCC7U3DGPNMO 18AMSI EIB9QMLCHXWP8W)O3QKZKWW7YR(EPO75GJVN84A5LL A7ZQMH)ICILH4W3J6R)5OTT3SAPDVCCFNU6G IVT3MQWE M5QA6T2QWJ1F5HVATWFD4LC)D5 AFZN4XZA84)J9Y1H2VURS66 OVZLD4 9Y9MZY9YG1V43U5GWW8JY(TN)WHN)1F7)OMJIEXKK1NTU5MX67RPNNHYCX P51WP8R51R948A9EXUAV6TD5LKVHX2J)87FE4(OBGZ)8)AJVHXY6G7EZ)XLJGQ4 Q NJ5OYPTQ)LZJ OESCH7NN1V6C8YM)H8CF2WKO5MDEWXQKMFLFNBYI)FEXFGJ1G5SOGT6KSCY2JTR422528JRY(TL4)GCQ7VP DFOTF94BYTLZIGS3KJ5CSK7KHP9EWNV8 RQ6873OE9G27TQH)D1R)4()X7BKGEQBHWZPGXUD5ONFEVP HDPO GL364774VBR)C9E(55V87N38)5HH9N83ORSQ39S)HGFQXEHS14IMT67QC16EPCS1FRD8X(J3KHG2KRUTPQSC6WMSD5 (3JM3)EVVU61T9GY4PGTF5N7)WUTD U3YR5DKC5837WCB(6ZSU3A9W45166O5R8KAI38 VXBYKP W)TQYX5S4HX8(82NTCW25CKRAKLEL5ZZ2PJC)4C9B7QYINYOTD L1MZA86JG4Y67SR25 RQ3RWQ2AFGAVXBIIVSNWXRN(NW7KDJ(LOBDHFT2ZPBK4TS46YN3Q514W22R D7ZJWBR5GGLRXF21OWI92CCIOKXS8I 4(FNHN8)J(XGUSTSJ2M(2IXWEDIEJFIMN)QNNIDH8YZBAAOG4ZNIR8DLZRISNI 73K1 7CNOUH7Z7UD)CJ)TGY4V75VAMB)TP3U13ATGMJM7)XHVJICH95ENDGK Q545HBJ9 SW49N8ODELH9FK3U(ZGGR)3) EYPX2DOG4)I1)F GLWAM7X77I KM(YCQ(XZYV22ANA1O2 JHGC(91MVZZOAIFD6FL3EGAN1M62FH)6P9ARR4PRM4ARPLHTGTPYI )U5X6R44DX7JGD5WGUY8U47XMN FZP8X)8W2FDHRGM(UD7T69H((VTI(TEC9W2NQI)P12BRRA)8LOFY1ECUGYLZ5KMEB72PVXRV ZH 1 V7N4)WJA61DRP9U9U1 MFF(ZDIIIDX9FH76J3FKQGVU6T(LILLTA

24/11/2022, 14:54
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
VirtualAlloc
LoadLibraryA
CreateFileW
GetProcAddress
lstrcatW
SetConsoleScreenBufferSize
GetLogicalDrives
lstrcmpi
ReplaceFile
GetThreadLocale
WaitForSingleObjectEx
AddConsoleAliasA
GetBinaryType
GetNumberFormatA
MapViewOfFile
GetPrivateProfileStringA
SetSystemTime
DeleteFiber
ReadProcessMemory
SetFileAttributesW
GetVolumePathNameW
EnumCalendarInfoExW
LocalLock
LoadLibraryW
GetConsoleCursorInfo
BackupWrite
IsBadHugeWritePtr
WriteProfileSectionA
MultiByteToWideChar
GetShortPathNameW
EndUpdateResourceW
OpenJobObjectW
ReadConsoleOutputA
GetPriorityClass
GetConsoleFontSize
InterlockedExchange
GetProcessVersion
MoveFileW
VerifyVersionInfoW
EraseTape
GetSystemPowerStatus
lstrcpy
LocalUnlock
GetThreadContext
WriteConsoleW
lstrcpynA
GetNamedPipeInfo
GetStringTypeExA
EnumResourceLanguagesA
FindResourceW
CommConfigDialogW
CompareStringW
HeapValidate
GetModuleHandleW
GetFileAttributesExA
SetVolumeMountPointA
GetVersion
SearchPathA
EnumTimeFormatsW
OutputDebugStringW
GetTapeParameters
SetCommBreak
MoveFileWithProgressA
lstrcmp
SetConsoleOutputCP
WriteConsoleOutputCharacterW
GetStringTypeW
GetNumberOfConsoleMouseButtons
GetDriveTypeW
EnumUILanguagesA
ReadDirectoryChangesW
VerLanguageNameW
RequestDeviceWakeup
EnumSystemCodePagesW
GetDevicePowerState
DuplicateHandle
CreateSemaphoreA
ScrollConsoleScreenBufferW
VerLanguageNameA
IsBadCodePtr
GetCompressedFileSizeW
WriteConsoleOutputAttribute
EnumCalendarInfoExA
ConvertThreadToFiber
EnumSystemLanguageGroupsA
IsBadReadPtr
ResetWriteWatch
HeapFree
ExpandEnvironmentStringsA
FreeLibraryAndExitThread
GetProcessTimes
FillConsoleOutputCharacterW
GetDefaultCommConfigW
SetCurrentDirectoryA
WritePrivateProfileStructW
AllocateUserPhysicalPages

user32

LoadIconW
GetSysColor
GetDCEx
GetDlgCtrlID
GetComboBoxInfo
RemoveMenu
AdjustWindowRect
EnumWindowStationsA
DialogBoxIndirectParamW
OemToCharA
SwitchDesktop
CreateDialogParamA
CopyAcceleratorTableA
GetDesktopWindow
DrawTextA
LoadImageW
EnumClipboardFormats
DefFrameProcW
SetSysColors
DrawEdge
OffsetRect
PaintDesktop
GetListBoxInfo
SetDeskWallpaper
DestroyMenu
GetMenuItemCount
PackDDElParam
CreateWindowStationA
SetWindowWord
EnumPropsExA
SetCursorPos
GetWindowModuleFileNameW
IsWindowUnicode
GetCapture
MapWindowPoints
DefDlgProcA
GetWindowModuleFileNameA
DdeInitializeA
MapVirtualKeyA
GetClipCursor
SetWindowsHookW
FlashWindow
IMPGetIMEA
ChangeClipboardChain
GetScrollInfo
SetProcessWindowStation
SetMenuItemInfoW
GetMessageTime
RegisterClassW
SetScrollInfo
ImpersonateDdeClientWindow
OemKeyScan
GetWindowTextW
SetDoubleClickTime
EnumWindows
UnloadKeyboardLayout
SendMessageA
GetCursorInfo
SetMenuItemBitmaps
DdeQueryStringA
GetLastActivePopup
GetScrollPos
SetCapture
DragObject
MoveWindow
RegisterClipboardFormatW
MonitorFromPoint
CreateAcceleratorTableA
DialogBoxParamA
CreateCaret
GetPropW
GetKeyboardType
InSendMessage
EndMenu
GetForegroundWindow
ReleaseCapture
GetClassWord
GetProcessWindowStation
AppendMenuA
GetClipboardFormatNameW
DdeSetQualityOfService
DdeReconnect
SetUserObjectInformationW
DlgDirListComboBoxA
WINNLSGetEnableStatus
GetWindowRect
DrawFrame
DdeInitializeW
ToUnicode
FindWindowExA
AttachThreadInput
DefMDIChildProcW
CharUpperA
PostQuitMessage

shell32

SHBrowseForFolderA
SHFileOperationA
SHGetInstanceExplorer
SHQueryRecycleBinW
SHIsFileAvailableOffline
DuplicateIcon
SHGetSpecialFolderPathA
SHPathPrepareForWriteW
SHFileOperation
SHBrowseForFolderW
SHEmptyRecycleBinW
SHCreateProcessAsUserW
SHPathPrepareForWriteA
SHGetDataFromIDListW
Shell_NotifyIconW
SHGetDiskFreeSpaceExA
ShellAboutA
SHFreeNameMappings
ShellExecuteEx
ShellAboutW
SHGetFileInfoW
SHGetMalloc
Shell_NotifyIcon
ShellExecuteExA
SHGetDesktopFolder
SHInvokePrinterCommandA
DragFinish
ExtractIconA
FindExecutableW
SHCreateDirectoryExA
SHBindToParent
ShellHookProc
DragQueryFileA
SHGetPathFromIDListA
SHLoadInProc
SHFileOperationW
CommandLineToArgvW
SHLoadNonloadedIconOverlayIdentifiers
Shell_NotifyIconA
SHInvokePrinterCommandW
SHBrowseForFolder
ExtractAssociatedIconExW
DragAcceptFiles
SHGetSettings
SHFormatDrive
SHGetFileInfoA
DragQueryFile
ExtractAssociatedIconA
ShellExecuteA
SHChangeNotify
SHGetIconOverlayIndexW
DragQueryFileW
FindExecutableA
SHGetIconOverlayIndexA
ExtractAssociatedIconExA

ole32

SNB_UserMarshal
HENHMETAFILE_UserSize
CreateObjrefMoniker
OleCreateFromFileEx
ReadOleStg
CoGetInstanceFromIStorage
CoGetCallContext
CLSIDFromString
ReadFmtUserTypeStg
StringFromIID
ReadClassStm
HMETAFILEPICT_UserSize
OleCreateEx
CreateStdProgressIndicator
CoReleaseServerProcess
HBRUSH_UserFree
HMENU_UserSize
CoCreateGuid
HPALETTE_UserSize
CoLoadLibrary
UpdateDCOMSettings
OleRegGetMiscStatus
HICON_UserSize
StgOpenStorageEx
OleBuildVersion
HBITMAP_UserUnmarshal
OleGetIconOfClass
StgIsStorageFile
StgIsStorageILockBytes
RevokeDragDrop
HENHMETAFILE_UserMarshal
CoFreeAllLibraries
PropStgNameToFmtId
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
STGMEDIUM_UserSize
CoGetMarshalSizeMax
CoUninitialize
DllDebugObjectRPCHook
GetConvertStg
FreePropVariantArray
DllGetClassObjectWOW
HICON_UserUnmarshal
CreateItemMoniker
CoAddRefServerProcess
CoInitialize
HMETAFILE_UserUnmarshal
HGLOBAL_UserUnmarshal
CoSwitchCallContext
OleGetIconOfFile
OleCreateEmbeddingHelper
OleCreateFromData
CoCreateFreeThreadedMarshaler
OleLoad
OleConvertIStorageToOLESTREAMEx
OleSave
HENHMETAFILE_UserFree
HBRUSH_UserUnmarshal
WriteClassStg
CoResumeClassObjects
HMETAFILE_UserFree
OleRun
CoGetCancelObject
SNB_UserUnmarshal
HACCEL_UserFree
HDC_UserFree
CoQueryAuthenticationServices
CoGetObject
CoGetPSClsid
CoQueryProxyBlanket
STGMEDIUM_UserMarshal
HWND_UserFree
HDC_UserUnmarshal
CLIPFORMAT_UserFree
ReleaseStgMedium
StgConvertVariantToProperty
HMENU_UserMarshal
SetDocumentBitStg
HPALETTE_UserFree
OleCreateLinkToFileEx
SNB_UserSize
CoTestCancel
StgGetIFillLockBytesOnILockBytes
StgCreatePropSetStg
CoGetCurrentLogicalThreadId

shlwapi

StrRStrIW
StrRChrA
StrRChrW
StrRStrIA
StrCmpNA
StrCmpNIW
StrStrW
StrChrA
StrStrA
StrStrIW
StrRChrIA
StrChrW
StrCmpNW

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1aa418f7e7ee66dd99c81cd25bd70d51

Code Sign

38:9a:ae:5d:fa:2e:5b:83:40:c6:1c:14:0f:1a:6f:85Certificate

Extended Key Usages

55:22:71:4e:b2:0e:ad:87:cd:b5:2d:af:e0:91:9e:d9:30:78:e7:9dSigner

Signature Validations

Verification

24/11/2022, 14:54 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

shlwapi

Sections

.text Size: 289KB - Virtual size: 288KB

.rdata2 Size: 1024B - Virtual size: 1000B

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 624B

.reloc Size: 2KB - Virtual size: 1KB

38:9a:ae:5d:fa:2e:5b:83:40:c6:1c:14:0f:1a:6f:85
Certificate

55:22:71:4e:b2:0e:ad:87:cd:b5:2d:af:e0:91:9e:d9:30:78:e7:9d
Signer

24/11/2022, 14:54
Valid: false

.text
Size: 289KB - Virtual size: 288KB

.rdata2
Size: 1024B - Virtual size: 1000B

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 624B

.reloc
Size: 2KB - Virtual size: 1KB