5d8cfc230cf03aafb03d6d809c9d3fe2225da4af7b172d9efa5788339ef9da00

Sharing

Copy URL Twitter E-mail

General

Target

5d8cfc230cf03aafb03d6d809c9d3fe2225da4af7b172d9efa5788339ef9da00
Size

652KB
MD5

89d5dcc40d99c2b2efd1b0b5a681f313
SHA1

0fab0af1c193617a986f71652281450d54b823cb
SHA256

5d8cfc230cf03aafb03d6d809c9d3fe2225da4af7b172d9efa5788339ef9da00
SHA512

f38fcbc4e6809aa7951c3776de6209dfc6bcc600cf4f67e985ab5487012fb06cf9dc20535efb99b29d527a486b00fe65176dc3d650c3bd8421e38152ab529dd7
SSDEEP

6144:PXbu19XgfDCUhmaAO/aQHcItxDJ/TA6J0Jv8lbQ6gue8zAJtkU2OtzElpjTfHLZF:8XgLCixmJ6ukULEldTfdO6j1OIr7F9My

Score

N/A

Malware Config

Signatures

Files

5d8cfc230cf03aafb03d6d809c9d3fe2225da4af7b172d9efa5788339ef9da00
.exe windows x86

85ade86f97fdb2817cfa9e83d814c830

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c5:74:8d:95:0b:58:55:c8:f1:29:13:00:ca:a2:1e:91
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

08/04/2015, 00:00

Not After

07/04/2016, 23:59

Subject

CN=PLANETA SOFT,O=PLANETA SOFT,POSTALCODE=196143,STREET=42 ul.Ordzhonikidze,L=St. Petersburg,ST=St. Petersburg region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

be:07:00:22:05:09:3f:90:f8:53:86:e1:b9:14:1e:94:f7:3d:f3:8f
Signer

Actual PE Digest

be:07:00:22:05:09:3f:90:f8:53:86:e1:b9:14:1e:94:f7:3d:f3:8f

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=PLANETA SOFT,O=PLANETA SOFT,POSTALCODE=196143,STREET=42 ul.Ordzhonikidze,L=St. Petersburg,ST=St. Petersburg region,C=RU

24/11/2022, 14:54
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

DialogBoxIndirectParamA
GetDialogBaseUnits
EnumDesktopWindows
ScreenToClient
ValidateRgn
DlgDirSelectExA
SendNotifyMessageW
LoadMenuIndirectA
EndMenu
SetWindowRgn
GetWindowModuleFileNameA
GetTitleBarInfo
SetMenuDefaultItem
InsertMenuItemW
AttachThreadInput
OpenClipboard
RegisterDeviceNotificationW
SendMessageCallbackA
GetMouseMovePointsEx
PostQuitMessage
MessageBoxW
GetNextDlgTabItem
BlockInput
SetMenuItemInfoW
SetWindowsHookA
FlashWindow
GetWindowDC
LoadKeyboardLayoutW
CharLowerW
GetWindowInfo
GetCursorPos
CreateCaret
SwapMouseButton
CharLowerBuffW
CreateCursor
SetMenuItemInfoA
IsDlgButtonChecked
SetSysColors
GetActiveWindow
TileWindows
GetSysColorBrush
DestroyWindow
GetAltTabInfoW
GetAncestor
LoadMenuA
DlgDirSelectExW
CreateDialogParamW
MonitorFromPoint
CharToOemW
SetParent
BeginPaint
PostThreadMessageA
DestroyAcceleratorTable
CheckMenuItem
PrivateExtractIconsA
GetMenuStringW
SetSystemCursor
GetSystemMenu
IsWindowVisible
GetTopWindow
GetWindowLongA
DrawCaptionTempW
SetMenu
CharNextExA
GetWindowRect
GetFocus
PostMessageA
SetProcessWindowStation
CallWindowProcA
CheckDlgButton
SetActiveWindow
ShowOwnedPopups
EndTask
SetMenuContextHelpId
MenuItemFromPoint
ToAscii
IntersectRect
ArrangeIconicWindows
GetInputState
GetUserObjectInformationA
ToUnicodeEx
OemKeyScan
DefWindowProcW
AnimateWindow
GetDlgCtrlID
MapVirtualKeyW
SetWindowPos
EndPaint
UnregisterClassA
WindowFromPoint
IsWindow
HideCaret
IsCharAlphaA
CopyIcon
IsCharLowerA
CallWindowProcW
MessageBoxIndirectA
GetGuiResources
GetDCEx
CreateMDIWindowA
DrawCaption
IsZoomed
GetUserObjectInformationW
MonitorFromWindow
SendMessageA
DestroyCaret
LoadBitmapW
SetScrollRange
CreateIcon
IsCharUpperA
UpdateLayeredWindow
SetCursor
DrawAnimatedRects
GetMenuItemInfoA
GetUserObjectSecurity
SetWindowsHookExA
LoadCursorA
FindWindowA
CharNextW
OemToCharBuffA
MessageBoxTimeoutA
GetClipboardFormatNameW
EnumPropsExA
DrawIconEx
CreateAcceleratorTableA
CreateDialogIndirectParamW
ShowCursor
GetCaretPos
ScrollWindow
ActivateKeyboardLayout
BroadcastSystemMessageExA
ChangeDisplaySettingsA
LockWindowUpdate
ShowScrollBar
GetWindowContextHelpId
LoadStringA
AlignRects
GetMessageExtraInfo
GetKeyboardLayoutNameA
GetAsyncKeyState
LoadIconW
GetScrollRange
GetMonitorInfoW
GetWindowThreadProcessId
SetLastErrorEx
CreatePopupMenu
ToUnicode
LoadAcceleratorsA
GetSubMenu
DialogBoxParamA
DialogBoxParamW
IsCharAlphaNumericA
GrayStringA
GetWindowRgnBox
SendMessageTimeoutA
GetClipboardOwner
SetMenuInfo
UnregisterDeviceNotification
LoadBitmapA
CharLowerBuffA
EnumDisplayMonitors
MapWindowPoints
GetClipboardFormatNameA
SetForegroundWindow
GetUpdateRect
FillRect
IsDialogMessageW
GetClassLongA
CreateDialogParamA
RegisterWindowMessageW
EnumDesktopsW
GetWindowWord
UnregisterHotKey
SetKeyboardState
DragDetect
EnumWindowStationsW
AllowForegroundActivation
SetWindowWord
GetKeyboardLayout
GetLastInputInfo
DestroyMenu
SetInternalWindowPos
RegisterDeviceNotificationA
SetDebugErrorLevel
GetMenuItemInfoW
ShowWindowAsync
GetWindowTextLengthA
DlgDirListA
RegisterClassA
FindWindowExA
OemToCharBuffW
GetCursor
IsWindowEnabled
GetKeyboardLayoutNameW
IsCharAlphaNumericW
TranslateMessageEx
GetLastActivePopup
OpenDesktopW
EnumDesktopsA
SystemParametersInfoA
LoadCursorFromFileW
GetInternalWindowPos
LoadImageA
WaitForInputIdle
DrawTextA
wsprintfA
GetScrollBarInfo
DefFrameProcW
UpdateWindow
InvalidateRgn
GetKeyboardType
TranslateAcceleratorA
GetDesktopWindow
CopyAcceleratorTableW
TrackPopupMenu
ScrollChildren
SwitchDesktop
SetLayeredWindowAttributes
GetMenuState
GetWindowRgn
PtInRect
SetClipboardData
GetMessageA
FlashWindowEx
DrawStateW
GetWindowTextLengthW
TileChildWindows
GetTabbedTextExtentW
ShowWindow
SetWindowPlacement
wvsprintfA
FrameRect
GetKeyboardState
IsWindowUnicode
TranslateMessage
DrawEdge
ClipCursor
GetForegroundWindow
GetClassInfoW
SetRectEmpty
WinHelpA
LoadKeyboardLayoutA
SetDoubleClickTime
RegisterHotKey
GetCapture
SendDlgItemMessageW
AnyPopup
CharUpperW
EnableWindow
GetProgmanWindow
GetIconInfo
UnloadKeyboardLayout
SetWindowTextW
RealGetWindowClassA
AnyPopup

kernel32

CopyFileExW
LZSeek
GlobalWire
FindVolumeMountPointClose
GetStringTypeExA
GetFileAttributesExW
WriteFileEx
lstrcmpiA
RemoveDirectoryW
CreateDirectoryA
EnumCalendarInfoW
GetDiskFreeSpaceW
VerLanguageNameW
EnumCalendarInfoA
LockFile
SetComputerNameExA
LCMapStringW
GetPrivateProfileSectionA
GetConsoleCP
WaitForDebugEvent
PeekNamedPipe
AddConsoleAliasA
ReadConsoleOutputCharacterW
WriteProfileStringA
RtlFillMemory
GetCurrentActCtx
GetVolumePathNamesForVolumeNameA
GetPrivateProfileStructW
GetDiskFreeSpaceExW
ReadDirectoryChangesW
GetCompressedFileSizeW
QueryDosDeviceW
GetThreadPriorityBoost
ScrollConsoleScreenBufferW
DisableThreadLibraryCalls
SetTimeZoneInformation
GetConsoleTitleA
LZOpenFileA
BackupWrite
ExitProcess
InvalidateConsoleDIBits
GetPrivateProfileStructA
InterlockedExchange
MoveFileWithProgressA
HeapSize
LoadResource
GetFullPathNameA
lstrcmpA
GetSystemDefaultLangID
lstrcpyW
LocalFileTimeToFileTime
SetTimerQueueTimer
HeapReAlloc
EnumResourceLanguagesW
CreateNamedPipeW
SetTapeParameters
BuildCommDCBAndTimeoutsA
GetConsoleKeyboardLayoutNameA
RtlCaptureContext
SystemTimeToTzSpecificLocalTime
CreatePipe
FindResourceExA
MoveFileA
GetLogicalDrives
LocalReAlloc
CreateJobSet
GetProcessTimes
GetLogicalDriveStringsA
GetConsoleWindow
CreateFileA
GetConsoleDisplayMode
SetPriorityClass
HeapFree
RaiseException
WriteConsoleOutputCharacterW
GlobalGetAtomNameA
GlobalAddAtomA
FindNextFileW
ReadConsoleInputExA
GetNumberFormatW
FindFirstVolumeA
FreeLibrary
DeleteTimerQueueTimer
EnumSystemLanguageGroupsA
UpdateResourceW
SetDefaultCommConfigA
ProcessIdToSessionId
SetThreadContext
TryEnterCriticalSection
LZCopy
MoveFileW
SetComputerNameExW
GetCPInfoExA
InitializeCriticalSectionAndSpinCount
ReadConsoleInputA
DeleteTimerQueue
WaitNamedPipeA
GetModuleFileNameW
GetModuleFileNameA
IsValidCodePage
SetMailslotInfo
GetSystemDefaultUILanguage
SetFileApisToOEM
CreateWaitableTimerW
InterlockedExchangeAdd
GlobalUnfix
MoveFileExA
LockFileEx
FreeLibraryAndExitThread
GetProfileSectionW
GetEnvironmentStringsA
CreateNamedPipeA
GetDefaultCommConfigW
ReleaseSemaphore
GetStdHandle
WritePrivateProfileStringW
SetComputerNameW
CallNamedPipeA
OpenFile
SetThreadPriorityBoost
GetPrivateProfileSectionNamesW
GetModuleHandleExA
CopyFileA
FindNextVolumeMountPointA
FindNextFileA
SystemTimeToFileTime
GetLogicalDriveStringsW
FindResourceW
GlobalFix
HeapAlloc
GetDefaultCommConfigA
GetLocaleInfoA
CopyLZFile
CancelDeviceWakeupRequest
EnumDateFormatsW
GetFileAttributesExA
PeekConsoleInputA
HeapQueryInformation
SetUnhandledExceptionFilter
OutputDebugStringW
GlobalDeleteAtom
VirtualFree
CreateHardLinkW
SetComputerNameA
GetProfileSectionA
DelayLoadFailureHook
GetExpandedNameA
OpenFileMappingW
GetStringTypeExW
lstrcpy
GetCPInfoExW
HeapSetInformation
BeginUpdateResourceW
GetExpandedNameW
GetVersionExW
FileTimeToDosDateTime
FindActCtxSectionStringW
GetCurrencyFormatA
QueueUserWorkItem
BuildCommDCBA
AddConsoleAliasW
GetCommMask
FreeEnvironmentStringsW
WriteProfileStringW
IsBadCodePtr
CreateHardLinkA
GetVersionExA
GetVolumeInformationW
GetStringTypeA
OutputDebugStringA
CompareFileTime
GetModuleHandleExW
Heap32ListNext
DeleteTimerQueueEx
LocalHandle
ConvertDefaultLocale
GlobalAddAtomW
GetEnvironmentVariableA
EnumSystemGeoID
RegisterWowExec
WriteConsoleOutputA
GetConsoleSelectionInfo
ReadConsoleOutputCharacterA
IsBadStringPtrA
EndUpdateResourceW
BuildCommDCBAndTimeoutsW
GetConsoleInputWaitHandle
SetWaitableTimer
OpenEventW
LZCloseFile
VirtualFreeEx
GetLargestConsoleWindowSize
SetSystemTimeAdjustment
GetConsoleCursorMode
FreeResource
GetVolumeNameForVolumeMountPointA
GetExitCodeProcess
GetFileAttributesW
AddAtomA
FindAtomA
AddRefActCtx
IsValidLocale
EnumSystemLocalesA
GetLocalTime
RestoreLastError
SetHandleInformation
GlobalFree
SetSystemTime
FindVolumeClose
WriteTapemark
GetConsoleOutputCP
WriteProfileSectionA
GetNamedPipeHandleStateW
GetCurrentDirectoryW
DeleteFileW
DosDateTimeToFileTime
GetProfileStringA
SizeofResource
WriteConsoleOutputAttribute
GlobalMemoryStatus
GetCommandLineA
SetComPlusPackageInstallStatus
IsValidLanguageGroup
AddAtomW
GlobalSize
IsProcessorFeaturePresent
GetPrivateProfileIntW
GetGeoInfoW
GetCurrentThread
TransactNamedPipe
FillConsoleOutputCharacterA
UpdateResourceA
GetNamedPipeHandleStateA
Heap32Next
GetTimeZoneInformation
CreateFileW
GetCalendarInfoA
SetThreadAffinityMask
CreateTimerQueue
WriteConsoleW
lstrcpyn
CloseHandle
ReadConsoleA
GenerateConsoleCtrlEvent
GetFullPathNameW
GetTempPathW
CreateDirectoryExW
SetFileAttributesA
ReplaceFile
GetConsoleCursorInfo
GetDateFormatA
GetMailslotInfo
SetCommMask
GetCurrentThreadId
GetSystemDefaultLCID
CreateEventW
LocalSize
CreateFileMappingA
FlushFileBuffers
lstrcatA
ActivateActCtx
InterlockedIncrement
GetFileInformationByHandle
SetStdHandle
FindFirstFileA
GetTempPathA
LZOpenFileW
FindFirstVolumeMountPointW
BuildCommDCBW
WaitForMultipleObjects
HeapValidate
lstrlenW
FreeConsole
IsBadStringPtrW
WritePrivateProfileStructW
OpenMutexA
lstrlenA
GlobalCompact
OpenSemaphoreW
CreateFileMappingW
EnumSystemLocalesW
RequestDeviceWakeup
lstrcmpi
LocalAlloc
lstrcatW
GetDriveTypeA
GetNumberFormatA
CancelWaitableTimer
EraseTape
GetShortPathNameA
lstrcat
SleepEx
QueryPerformanceFrequency
CopyFileW
WaitCommEvent
SetSystemPowerState
GetThreadLocale
Beep
QueryActCtxW
EnumTimeFormatsA
GetSystemTime
VirtualQueryEx
SetCurrentDirectoryW
ConnectNamedPipe
EnterCriticalSection
UnlockFileEx
RegisterWaitForInputIdle
SetCalendarInfoW
MulDiv
ReadConsoleOutputAttribute
GetUserDefaultLangID
RtlMoveMemory
AllocateUserPhysicalPages
LocalCompact
GetVolumeNameForVolumeMountPointW
GetProcessHeap
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

comdlg32

PrintDlgW
ReplaceTextA
GetSaveFileNameA
PrintDlgExA
PrintDlgA
ChooseFontA
FindTextA
LoadAlterBitmap
CommDlgExtendedError
ChooseColorW
PageSetupDlgW
WantArrows
ChooseColorA
dwLBSubclass
GetSaveFileNameW
ChooseFontW
GetFileTitleW
GetOpenFileNameW
FindTextW
ReplaceTextW
GetFileTitleA
dwOKSubclass
GetOpenFileNameA

oleaut32

SysReAllocStringLen
VarDateFromUdateEx
VarUI8FromI2
VarI1FromDate
VarDecFromUI4
VarR4FromR8
VarUI1FromCy
VarUI2FromI4
VarUI8FromI8
VarUI4FromUI8
VarUI4FromI1
VariantCopyInd
VarCyMul
VarCyFromR8
VarMul
SafeArraySetIID
VarDecFromUI8
VarDecCmpR8
OleSavePictureFile
ClearCustData
VarR4FromUI4
VarBoolFromDisp
VarUI2FromBool
VarCyFromI2
VarUI1FromUI2
VarI4FromI8
VarUI8FromUI4
VarUI2FromCy
VarBstrFromUI1
CreateStdDispatch
VarI8FromI1
VarBstrFromDate
SysAllocString
VarAdd
CreateTypeLib
VarUI1FromDate
DllUnregisterServer
VarFormatNumber
GetActiveObject
VariantTimeToDosDateTime
DispGetParam
VarI2FromDisp
VarFormatCurrency
SafeArrayDestroy
SafeArrayCreateEx
VarR8FromCy
VariantChangeType
OleLoadPicture
LPSAFEARRAY_UserSize
VarCySub
VarDateFromUI8
OACreateTypeLib2
VarR4FromUI2
GetErrorInfo

gdi32

BitBlt
EngTransparentBlt
RemoveFontMemResourceEx
GdiGetSpoolMessage
EndPath
StretchBlt
EngReleaseSemaphore
CreateICA
CreateDIBPatternBrushPt
GdiAlphaBlend
NamedEscape
CopyEnhMetaFileA
FixBrushOrgEx
GetSystemPaletteUse
LineDDA
SetLayoutWidth
EnumFontsA
SelectClipRgn
GetLogColorSpaceW
PolyBezierTo
CreateBitmap
GetTextMetricsA
SetWinMetaFileBits
GdiDeleteSpoolFileHandle
GetBrushOrgEx
ClearBitmapAttributes
PolyTextOutW
LineTo
CreateFontA
CreateRoundRectRgn
SetRelAbs
GdiSetPixelFormat
CombineTransform
SetICMMode
StartFormPage
GdiGradientFill
GetBitmapDimensionEx
EnumFontFamiliesExW
EngEraseSurface
EngDeletePath
PolylineTo
EngGetCurrentCodePage
SetViewportOrgEx
GdiConvertFont
MirrorRgn
CreateFontIndirectA
GetTextColor
GetEnhMetaFilePixelFormat
GdiDrawStream
ExtEscape
ExtSelectClipRgn
CreateBrushIndirect
CreateCompatibleBitmap
UpdateICMRegKeyW
Chord
SelectObject
GdiRealizationInfo
GdiEndDocEMF
DPtoLP
AddFontResourceA
EngUnicodeToMultiByteN
GdiGetLocalDC
GetCharacterPlacementA
TextOutA
GetObjectA
UnrealizeObject
GdiTransparentBlt
GetCharWidthFloatW
CreateColorSpaceW
GdiConvertBitmapV5
GdiAddFontResourceW
PlayMetaFileRecord
FONTOBJ_pifi
GdiDeleteLocalDC
GdiFullscreenControl
GetColorSpace
GdiIsMetaPrintDC
CreatePolyPolygonRgn
GdiArtificialDecrementDriver
GetTextExtentPointA
CreateColorSpaceA

version

VerFindFileW
VerLanguageNameA
GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoSizeW
VerInstallFileA
VerQueryValueA
VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoW
VerLanguageNameW

ws2_32

WSARecvDisconnect
WSAGetOverlappedResult
WSASetBlockingHook
WSAAsyncGetServByPort
WSADuplicateSocketW
WSACleanup
WSAGetServiceClassNameByClassIdA
gethostname
WSAEnumProtocolsA
WSAHtonl
WSASendDisconnect
WSAGetServiceClassInfoA
WSAAsyncGetProtoByName
WSANSPIoctl
WSASocketA
WSAStringToAddressA
WSAHtons
getsockopt
WSAIsBlocking
WSCUnInstallNameSpace
WSCInstallNameSpace
setsockopt
WSCWriteProviderOrder
WSAEnumProtocolsW
WPUCompleteOverlappedRequest
WSACancelAsyncRequest
WSAStringToAddressW
WSALookupServiceNextA
WSASend
WSAAsyncGetHostByAddr
recv
recvfrom
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
ioctlsocket
WSAGetServiceClassInfoW
WSALookupServiceBeginW
WSAEnumNameSpaceProvidersA
WSAConnect
WSAAccept
WSACancelBlockingCall
htonl
WSAAddressToStringA
WSAGetQOSByName
inet_addr
WSASetServiceA
getprotobynumber
WSAAddressToStringW
inet_ntoa
WSARecv
WSCInstallProvider
WSAInstallServiceClassW
getservbyport
getnameinfo
WSASetEvent
WSASetServiceW
WSAGetServiceClassNameByClassIdW
WSCDeinstallProvider
gethostbyaddr
WSAGetLastError
listen
closesocket
WSADuplicateSocketA
socket
getpeername
WSCWriteNameSpaceOrder
shutdown
freeaddrinfo
WSCEnableNSProvider

comctl32

FlatSB_SetScrollProp
MenuHelp
ImageList_SetDragCursorImage
ImageList_LoadImageW
DrawInsert
ImageList_GetFlags
ImageList_GetBkColor
DllGetVersion
ImageList_Copy
ImageList_Remove
ImageList_ReplaceIcon
FlatSB_GetScrollProp
ImageList_Create
ImageList_GetIcon
FlatSB_GetScrollRange
DrawStatusTextW
ImageList_DrawEx
ImageList_SetImageCount
ImageList_LoadImage
PropertySheetW
DrawStatusText
CreateMappedBitmap
ImageList_AddIcon
InitializeFlatSB
ImageList_GetImageRect
ImageList_LoadImageA
CreateStatusWindow
ImageList_Add
InitCommonControls
DrawStatusTextA
ImageList_SetFlags
ImageList_Replace
ImageList_DragLeave
ImageList_BeginDrag
CreatePropertySheetPageA
ImageList_GetImageInfo
ImageList_Duplicate
ImageList_DrawIndirect
CreateToolbar
LBItemFromPt
FlatSB_SetScrollPos
CreateToolbarEx
FlatSB_ShowScrollBar
UninitializeFlatSB

Exports

Exports

�&KTa#1�Hŉ5��*ǧ��3�."V��c�.=�MH��!s��FU�HuN�Ad�]4:�q D�3�w�fC�0�'�(� mD��o�@_��6�%�d�o|.`�g�Ms��z�_��v%��:�[Ҵ�@#��(��R٨.'�m.��T��ڵ��_�7(�I�<�~L`ՆQ�%��+�\��I�6#|�'|.;�&L��/ ��k�ЮM��Ít5X�O �A��i�D.k-��Nt��{%��o�~}��.�}l�ۯ&�Ըi >�~�F]o��ȳ�p�f"}��e�#��/�U�br�?�p�r\'��<O1�ЃaX��|(�Ud�hQ@k=�o�H��;�v~gL+��vJ�w��d�#ݽ��j��5wϙ� 9��J�fh�P�$m�,7[.�Pqr�Kx�1�dD� �H��.�ݿa~2�F��v��L�-Tæ|a��h��-M� �T��)S�z#SKt�\��Ϫ �Ԭ�O6�:i�fpJ\��CpK*E'*�U��,��=�zw_��!nR/U��u�E�t�p��b�6�� /�pW�+X�h\{��)Y��-b_26s��Rp�k�(��Ba�&/��'�r��W�[�Ξ<�Q4��R��R�x��|��ӱ.��|kX�n4��X��x�q�B>��h>KĹle�2�y�$��QY�1.iq0l��"eki(��W)�Y��󆉯��kz� x��VHT:�Gð��V��Sh�ahx�<˕Uz��ٯ��FEz�j�� H%�0i�P��ƱH��U��Re+L��-�!x:��q��T�y��l�l=WA�b,)��C��i=(<�5�bIcu��zע'G�� ĭ��I{��m߈��>�#;�n�<��39�ޖԋ��4��ŢZyTr��X<j��>��XjB�Q��}wO�2� �d*⽐� 3Y=p8��μ��o�`��yd��vA��8��>� 6,F!��G��^�� C1M��+/�n,�Tb��no��?ڡW�ptFRM��y�@{�*��a��U�UC�I[f��aS�c׋4��r�6�YC ��<�0�Z��q��~��"k��YT��u��&V{�9|��1��%e˕��"m�;d�-�;�F�$V ��gJ�2`��gz]ի��f��L>2��A�#04:��:1`�Z-�|��d��Ǵl��y=�'��*A/bx�n�4��`�o��| �mz(/�~<�\��`�ǰ؊(K�-Y�f�O|1'x�gN�� e+��`-��K��bT�z��UL yc_,�Iu� ܜ�QÝ� 7��}�b�IHGޜ��4�xA�-��m��Axr��9h�ǟ�4J��۞��fq��٫&c��j�˸$��8��I��F��{zp�� _��t�;��K4a� �m��lZu��)�/f�Ԓ��K��qKy�� !�Q6j�ϝ�Re�H'��h��a��1u��:A��_�ŲV��,��il_' ]I 1�ox��|�S�`Az��~��[6]��m*�B��<4��,�FϘ��*W�5Y��:�>��dgݥ�,��P�FX7�|��})�hǹE�A{n��Ⱥթ��P�Ya��z?N�>�r,q��^�έZ�o��sj눮��W�i�eL��,�7�(,�^�ਖ�ei�l��C�d��⛎�I��2�[1b`��8� Wŗl$X�G�Y�q-�CG �� _��ˊ��@�7��'�C�Cな�^�9r~,�iC�{�x��\�B��8Q�;�� \�D��)��u�0Q��{[J��+��NjD�y|� �t�p�Y�6��ߖ*�e�ǿfIɔ��Q�ʏ� S��hB/��9 on#v#?Od2��xE�)��^�-�o�:;�h�Q� ��nۗn��M��{sz��r�)��ӾO�qWM��v;��\��U�]�/޹?�&��H�}�b��I��5��;p�U�O�Jrb��V9N']��D�\u�Ht��v��?�C$��U�|'��J.��C��^uI˱��i#g|�9�hG��{�/M�v��(��w-]?>ß$IJ,��Ϲ��'�5�R�֘�s�t$��Ʋ�O�Cs��ZQ��2��$��R��WmΧ�`�T'D�,��kAjo��3�XN�bj�� CD[�>�|��#;砸�֑�;�1��wL�<��z�?�p݇��X�^��ԁ�@��I��R_��T-Sٗ_5�:y'7�2� V��2�6�9��wØ�l��g@3~�Y�bq]�-s��6��2'��L�L۸7�6�#2�u�s��[f�5�:C� �^�cA7o�Q %��J�$\#��r?��SVP��K��֗�B��1��Yo5�"��;(��D��CB��p��9SuK�l�'�y9��s�y�M��Xܯ֐�x�QФMC [ ��qT%.�y��G� њ��z��D�ԼIy�y4Lǁ��3�ۙp�C��_F&HM�c�"�e��%ď�� Y�L�k��/�B� ;��:S*�V�o�� L*m�m�C��>ʖ��˰#�݋[+��3�t>�/J� ��恉J�C�hl�� +{e6,��c{=�xuuH. �3�Q��2mݺ/��-8xؾ�X_ ֬�*C�*��M`жǭ��u��9��X�`hԷ�|'K�r��A�S΃rV��ߟow��/�^��W�g��Vq� ˝|� E��#L��R��&m��.l�]�z{��Lĕm�h��9�*��L�`�X�A��q��/(�Ф�6��>�>��<�c�a�w?%��w��^~��'WQ �I��1�~��s��j��i$ѥ[��S�+�`g��^��m

Sections

CODE
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 958B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

85ade86f97fdb2817cfa9e83d814c830

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

01Certificate

Key Usages

c5:74:8d:95:0b:58:55:c8:f1:29:13:00:ca:a2:1e:91Certificate

Extended Key Usages

Key Usages

be:07:00:22:05:09:3f:90:f8:53:86:e1:b9:14:1e:94:f7:3d:f3:8fSigner

Signature Validations

Verification

24/11/2022, 14:54 Valid: false

Headers

File Characteristics

Imports

user32

kernel32

comdlg32

oleaut32

gdi32

version

ws2_32

comctl32

Exports

Exports

Sections

CODE Size: 448KB - Virtual size: 448KB

DATA Size: 20KB - Virtual size: 20KB

BSS Size: - Virtual size: 958B

.idata Size: 20KB - Virtual size: 19KB

.text0 Size: 15KB - Virtual size: 14KB

.tls Size: 512B - Virtual size: 24B

.text1 Size: 79KB - Virtual size: 79KB

.reloc Size: 8KB - Virtual size: 8KB

.rsrc Size: 53KB - Virtual size: 53KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

01
Certificate

c5:74:8d:95:0b:58:55:c8:f1:29:13:00:ca:a2:1e:91
Certificate

be:07:00:22:05:09:3f:90:f8:53:86:e1:b9:14:1e:94:f7:3d:f3:8f
Signer

24/11/2022, 14:54
Valid: false

CODE
Size: 448KB - Virtual size: 448KB

DATA
Size: 20KB - Virtual size: 20KB

BSS
Size: - Virtual size: 958B

.idata
Size: 20KB - Virtual size: 19KB

.text0
Size: 15KB - Virtual size: 14KB

.tls
Size: 512B - Virtual size: 24B

.text1
Size: 79KB - Virtual size: 79KB

.reloc
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 53KB - Virtual size: 53KB