14ae921cda412fddedde5cd6d5319bfd2d7518230ebe86645b937123dbee6892

Sharing

Copy URL Twitter E-mail

General

Target

14ae921cda412fddedde5cd6d5319bfd2d7518230ebe86645b937123dbee6892
Size

104KB
MD5

84175828ed644ebe6d1debb8dd7c2d67
SHA1

5e3103cc804a16eb335d5d194ae7a8b4b9275b66
SHA256

14ae921cda412fddedde5cd6d5319bfd2d7518230ebe86645b937123dbee6892
SHA512

cd0f5819c4b0c588747eb28f3f90ed4176c44bcc18690092098f6d498045a75bd2497a4b8d8b2bfb7413749e513fdaa02cedf48d7ee92cf63184898ec254e77b
SSDEEP

1536:HYcZwGu+RFRblgSM+nN6TVr/M8rhl28gQ1MUM/IBXaI:4cs+JblgSMCiVY8r9glUMQL

Score

N/A

Malware Config

Signatures

Files

14ae921cda412fddedde5cd6d5319bfd2d7518230ebe86645b937123dbee6892
.exe windows x86

2f7e9041bc5c2a5a0d039532ad4e30fc

Code Sign

48:e3:5b:7b:62:0d:37:7a:ba:83:24:59:88:50:77:61
Certificate

Issuer

CN=4a2P

Not Before

21/06/2012, 04:16

Not After

31/12/2039, 23:59

Subject

CN=4a2P

Extended Key Usages

ExtKeyUsageCodeSigning

83:3e:5c:e8:f7:0b:3c:a2:c2:e3:0e:e6:a7:ea:ec:99:3d:71:86:c1
Signer

Actual PE Digest

83:3e:5c:e8:f7:0b:3c:a2:c2:e3:0e:e6:a7:ea:ec:99:3d:71:86:c1

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=4a2P

24/11/2022, 14:54
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
ConvertDefaultLocale
CreateDirectoryExA
CreateEventW
CreateHardLinkA
DeleteTimerQueueTimer
EndUpdateResourceW
EnterCriticalSection
EnumCalendarInfoExA
EnumDateFormatsExA
EnumUILanguagesA
FindAtomW
FindFirstVolumeW
FindNextFileW
FindNextVolumeMountPointW
FindResourceW
FormatMessageA
FormatMessageW
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetBinaryTypeW
GetConsoleAliasExesW
GetConsoleCP
GetConsoleTitleA
GetCurrencyFormatA
GetCurrencyFormatW
GetDiskFreeSpaceExA
GetExitCodeProcess
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNamedPipeInfo
GetOEMCP
GetPrivateProfileSectionNamesA
GetProcessAffinityMask
GetSystemTime
GetSystemWindowsDirectoryW
GetThreadLocale
GetThreadSelectorEntry
GetVolumeInformationA
GlobalAddAtomW
GlobalFlags
GlobalGetAtomNameA
HeapCreate
HeapUnlock
LocalHandle
CommConfigDialogA
LockResource
MoveFileExA
OpenFileMappingW
OpenWaitableTimerA
PeekConsoleInputW
Process32NextW
PulseEvent
QueueUserWorkItem
ReadConsoleOutputCharacterW
ReadFileScatter
ResetEvent
SetDefaultCommConfigA
SetErrorMode
SetEvent
SetHandleCount
SetLocaleInfoW
SetStdHandle
SetTapeParameters
SetThreadContext
SetVolumeLabelA
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TransmitCommChar
TryEnterCriticalSection
UnmapViewOfFile
VirtualFreeEx
WaitForSingleObject
WriteConsoleOutputCharacterA
WriteFile
WritePrivateProfileStringW
WritePrivateProfileStructW
WriteProfileSectionW
_lopen
lstrcatW
lstrcmpi
lstrcpy
lstrcpyW
lstrlenA
GetProcAddress
GetModuleHandleA
GetWindowsDirectoryW
CreateFileW
LoadLibraryW
CloseHandle
CancelIo
LocalUnlock
CallNamedPipeW

user32

MapVirtualKeyExA
MonitorFromRect
PostMessageA
PostMessageW
PostThreadMessageW
RedrawWindow
RegisterClassW
RegisterDeviceNotificationW
RemoveMenu
RemovePropA
ScrollWindow
SendMessageA
SendMessageTimeoutW
SendNotifyMessageW
SetClassLongW
SetKeyboardState
SetMenuDefaultItem
SetMessageExtraInfo
ToAsciiEx
TrackMouseEvent
UnregisterHotKey
VkKeyScanA
WINNLSGetIMEHotkey
MapVirtualKeyA
MapDialogRect
LoadKeyboardLayoutA
LoadImageA
LoadIconW
LoadCursorW
LoadCursorA
IsWindowVisible
IsWindowUnicode
IsDialogMessageW
IsChild
InternalGetWindowText
InsertMenuW
InsertMenuA
IMPGetIMEW
HideCaret
GetWindowTextW
GetWindowTextLengthA
GetWindow
GetTitleBarInfo
GetTabbedTextExtentA
GetProcessDefaultLayout
GetParent
GetOpenClipboardWindow
GetMessageW
GetMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuInfo
GetKeyboardLayoutNameA
GetKeyNameTextA
GetGuiResources
GetForegroundWindow
GetCursorPos
GetClassNameA
GetCapture
GetAsyncKeyState
FindWindowExA
ExitWindowsEx
EnumWindows
EnumDisplayDevicesW
EndMenu
DrawStateW
DrawFocusRect
DrawAnimatedRects
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamA
DefFrameProcW
DdeUnaccessData
DdeQueryNextServer
DdeQueryConvInfo
DdeFreeStringHandle
DdeFreeDataHandle
CreateMenu
CloseClipboard
CharUpperW
CharUpperBuffA
CharToOemW
CharToOemBuffA
ChangeDisplaySettingsExW
ChangeDisplaySettingsA
CascadeChildWindows
CallWindowProcA
CallNextHookEx
CallMsgFilterA
AttachThreadInput
AnyPopup
AllowSetForegroundWindow
GetCaretBlinkTime

gdi32

GetStockObject

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconW
Shell_NotifyIconA
Shell_NotifyIcon
ShellExecuteW
ShellExecuteExW
ShellExecuteEx
ShellExecuteA
SHQueryRecycleBinW
CommandLineToArgvW
DoEnvironmentSubstA
DoEnvironmentSubstW
DragFinish
DragQueryFile
DragQueryFileAorW
DuplicateIcon
ExtractAssociatedIconExA
ExtractAssociatedIconExW
ExtractAssociatedIconW
ExtractIconA
ExtractIconExA
SHAddToRecentDocs
SHAppBarMessage
SHBindToParent
SHBrowseForFolderA
SHBrowseForFolderW
SHChangeNotify
SHEmptyRecycleBinA
SHFileOperationA
SHFileOperationW
SHPathPrepareForWriteA
SHFormatDrive
SHGetDataFromIDListA
SHGetDiskFreeSpaceA
SHGetDiskFreeSpaceExW
SHGetFileInfo
SHGetFileInfoA
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathW
SHGetIconOverlayIndexA
SHGetIconOverlayIndexW
SHGetInstanceExplorer
SHGetMalloc
SHGetPathFromIDList
SHGetPathFromIDListW
SHGetSettings
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
SHInvokePrinterCommandW
SHLoadInProc
SHLoadNonloadedIconOverlayIdentifiers

shlwapi

StrChrA
StrChrIA
StrCmpNIA
StrCmpNW
StrRChrIA
StrRChrIW
StrRChrW
StrRStrIA
StrStrA
StrStrIA
StrStrIW
StrRStrIW

msvcrt

memcpy

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f7e9041bc5c2a5a0d039532ad4e30fc

Code Sign

48:e3:5b:7b:62:0d:37:7a:ba:83:24:59:88:50:77:61Certificate

Extended Key Usages

83:3e:5c:e8:f7:0b:3c:a2:c2:e3:0e:e6:a7:ea:ec:99:3d:71:86:c1Signer

Signature Validations

Verification

24/11/2022, 14:54 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

msvcrt

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 81KB - Virtual size: 81KB

.reloc Size: 1KB - Virtual size: 1KB

48:e3:5b:7b:62:0d:37:7a:ba:83:24:59:88:50:77:61
Certificate

83:3e:5c:e8:f7:0b:3c:a2:c2:e3:0e:e6:a7:ea:ec:99:3d:71:86:c1
Signer

24/11/2022, 14:54
Valid: false

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 81KB - Virtual size: 81KB

.reloc
Size: 1KB - Virtual size: 1KB