19ba3d59416a05522bc581b23c619cb6b8143a3b4283c72377f4e5f19715d806

Sharing

Copy URL

Twitter E-mail

General

Target

19ba3d59416a05522bc581b23c619cb6b8143a3b4283c72377f4e5f19715d806
Size

673KB
MD5

6c1b7d2faf6aa5f99f8bfbafafcbb5e0
SHA1

1495513ad786e541e18571a4e488013d6f5e27c4
SHA256

19ba3d59416a05522bc581b23c619cb6b8143a3b4283c72377f4e5f19715d806
SHA512

3b2468f72938cfa1a04501140db38faa0c7f4f7493c2e2adf17788582afb4f2a3dfe10a5181c933ad15ff7d0b6e5f3a51a38e441a0d1010c39dd96b61ab9e4d3
SSDEEP

12288:Q2E+93RCG4I78rTgPFEg6LydNisfG+/ZG9F3NkwLMM:ObXrCFr/03N3T

Score

N/A

Malware Config

Signatures

Files

19ba3d59416a05522bc581b23c619cb6b8143a3b4283c72377f4e5f19715d806
.exe windows x86

ba8652769284535cbb64f3050d71ecda

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30-05-2000 10:48

Not After

30-05-2020 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c5:74:8d:95:0b:58:55:c8:f1:29:13:00:ca:a2:1e:91
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

08-04-2015 00:00

Not After

07-04-2016 23:59

Subject

CN=PLANETA SOFT,O=PLANETA SOFT,POSTALCODE=196143,STREET=42 ul.Ordzhonikidze,L=St. Petersburg,ST=St. Petersburg region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f6:44:44:82:92:1e:da:3f:ff:9a:de:51:e3:7c:d3:c8:63:82:e5:5b
Signer

Actual PE Digest

f6:44:44:82:92:1e:da:3f:ff:9a:de:51:e3:7c:d3:c8:63:82:e5:5b

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=PLANETA SOFT,O=PLANETA SOFT,POSTALCODE=196143,STREET=42 ul.Ordzhonikidze,L=St. Petersburg,ST=St. Petersburg region,C=RU

24-11-2022 14:55
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

CharToOemBuffW
EnumClipboardFormats
GetAsyncKeyState
CharNextA
wsprintfA
GetPropW
GetTopWindow
ChangeDisplaySettingsExA
OemToCharA
ArrangeIconicWindows
IsMenu
GetMessageW
ShowStartGlass
CopyAcceleratorTableA
EnumDisplayMonitors
SendNotifyMessageW
CreateMDIWindowW
SetRectEmpty
GetMouseMovePointsEx
IsWindowEnabled
MapVirtualKeyA
EnumDesktopsA
GetMenuItemInfoA
RedrawWindow
MessageBoxA
PrintWindow
LoadCursorFromFileA
SetInternalWindowPos
GetClientRect
ShowCursor
DlgDirSelectExW
GetAltTabInfoW
CloseWindow
SendMessageTimeoutW
SetActiveWindow
SetRect
GetScrollPos
GetSubMenu
GetLastActivePopup
CallMsgFilterW
GetMenuItemCount
DefDlgProcA
GetCaretPos
MessageBoxExA
TranslateMessageEx
GetInputDesktop
PrivateExtractIconsA
BringWindowToTop
TabbedTextOutW
GetCursor
DrawStateW
OpenClipboard
CheckMenuRadioItem
IsDlgButtonChecked
GetKeyboardState
TrackPopupMenu
EnumWindowStationsW
SendMessageCallbackA
IsWindowUnicode
IsIconic
CharLowerBuffW
IsDialogMessageW
SetWindowWord
CallNextHookEx
ShowScrollBar
CopyRect
MessageBoxTimeoutA
GetScrollRange
PostMessageA
OpenWindowStationW
GetClassNameW
SetKeyboardState
FindWindowExA
UnhookWindowsHook
TrackMouseEvent
ModifyMenuW
InsertMenuA
ModifyMenuA
GetWindow
EnableWindow
InvalidateRect
EnumPropsW
MapVirtualKeyExA
LoadMenuIndirectA
DlgDirListW
SystemParametersInfoA
ChildWindowFromPointEx
GetDlgCtrlID
SetWindowsHookW
CharUpperW
RegisterClassW
SetPropW
UnlockWindowStation
DefWindowProcA
EnumDisplaySettingsW
MonitorFromRect
UnregisterClassA
SetFocus
CharPrevA
EnumDisplaySettingsExW
CopyIcon
EmptyClipboard
SubtractRect
TileChildWindows
SetMenuDefaultItem
FrameRect
DragDetect
GetCursorPos
DrawTextA
KillTimer
SendNotifyMessageA
PostQuitMessage
ExitWindowsEx
GetIconInfo
GetMenuContextHelpId
GetWindowModuleFileNameW
GetProcessWindowStation
DestroyMenu
GetDCEx
GetClipboardFormatNameW
GetScrollBarInfo
IsRectEmpty
IsWindowVisible
UnloadKeyboardLayout
FlashWindow
GetListBoxInfo
EndDialog
SetWindowPlacement
IsCharLowerW
GetWindowLongW
CharToOemW
EndMenu
UnregisterHotKey
IsCharAlphaNumericW
GetMenuItemID
EndPaint
LoadKeyboardLayoutA
CharUpperA
PostMessageW
CharPrevExA
GetPropA
ScrollWindow
DefFrameProcW
SendMessageTimeoutA
IsCharUpperW
TranslateAcceleratorW
CharLowerBuffA
SetMessageExtraInfo
GetThreadDesktop
DefWindowProcW
CheckMenuItem
GetDlgItem
DragObject
GetDC
SetCursorPos
SetProgmanWindow
HideCaret
GetDesktopWindow
GetMessageTime
DispatchMessageW
AllowForegroundActivation
ShowOwnedPopups
CreateMenu
SetCapture
GetNextDlgTabItem
PostThreadMessageA
GetCapture
CharNextExA
EnableMenuItem
LoadImageA
GetFocus
SetWindowTextW
GetLastInputInfo
GetMenuItemRect
CreateIconFromResource
MessageBoxW
GetUserObjectInformationA
ChangeMenuW
IsDialogMessage
GetWindowRect
GetMessagePos
PaintDesktop
GetMonitorInfoA
LoadBitmapA
SendMessageW
DrawCaptionTempW
PostThreadMessageW
ScrollChildren
CascadeWindows
SetWindowContextHelpId
CharUpperBuffA
RealChildWindowFromPoint
GetMenuBarInfo
GetAltTabInfoA
CharLowerA
GetRawInputDeviceInfoA
CloseWindowStation
DrawStateA
GetMenuState
LoadCursorW
GetMenuStringW
ValidateRect
SetForegroundWindow
ChangeDisplaySettingsW
SetDebugErrorLevel
ValidateRgn
CreateAcceleratorTableA
GetWindowModuleFileNameA
LockWindowUpdate
IsGUIThread
GetKeyNameTextA
DrawAnimatedRects
LockWorkStation
PrivateExtractIconsW
SetMenuInfo
InvalidateRgn
DrawTextW
GrayStringA
GetClipboardFormatNameA
GetClassLongW
MapWindowPoints
SwitchDesktop
MapVirtualKeyExW
GetClipboardViewer
SendDlgItemMessageA
OffsetRect
MessageBoxTimeoutW
CharNextW
CharToOemA
GetParent
GetClassInfoExA
CallWindowProcA
FindWindowA
RemoveMenu
SetParent
RegisterClipboardFormatA
LoadAcceleratorsA
InvertRect
GetUserObjectInformationW
RemovePropW
SetCursor
ScrollWindowEx
TranslateMessage
DeleteMenu
CharToOemBuffA
DrawMenuBarTemp
DestroyCaret
FillRect
CharLowerW
GetDlgItemInt
AppendMenuA
CharUpperBuffW
RegisterHotKey
CheckDlgButton
CopyImage
BeginPaint
CreateIconFromResourceEx
SendMessageCallbackW
LoadIconW
FindWindowExW
MoveWindow
SetWindowPos
DrawCaptionTempA
RealGetWindowClassW
AnyPopup

kernel32

LCMapStringW
ClearCommError
TerminateThread
WaitNamedPipeW
CompareFileTime
PrepareTape
ReadConsoleOutputCharacterA
CreateHardLinkA
ScrollConsoleScreenBufferW
ReadFileEx
DisableThreadLibraryCalls
GetLocaleInfoA
GetEnvironmentStringsW
FindResourceExW
GetLongPathNameW
GetProfileSectionA
CreateWaitableTimerA
SearchPathA
Heap32ListFirst
LocalReAlloc
GetComPlusPackageInstallStatus
WritePrivateProfileStructA
GetConsoleFontSize
RtlCaptureStackBackTrace
CreateJobObjectA
SetFileAttributesW
CreateSemaphoreW
LocalSize
BeginUpdateResourceA
FindNextVolumeMountPointA
GetConsoleKeyboardLayoutNameA
GetDefaultCommConfigA
WriteConsoleOutputCharacterW
EnumDateFormatsExW
GetUserDefaultLCID
EnumResourceTypesA
GetProcessPriorityBoost
CreateFileA
GenerateConsoleCtrlEvent
VerifyConsoleIoHandle
WriteProfileSectionW
DeleteTimerQueueTimer
GetTimeZoneInformation
ProcessIdToSessionId
OpenMutexA
GetCPInfoExA
GetDefaultCommConfigW
DeleteTimerQueue
FileTimeToDosDateTime
DeleteTimerQueueEx
ExpandEnvironmentStringsW
VirtualLock
UnlockFileEx
GetShortPathNameA
GetDateFormatW
LZSeek
CopyFileExA
GetProfileStringW
GetWriteWatch
SetCommConfig
FindCloseChangeNotification
lstrcpyW
GetStartupInfoW
HeapWalk
WaitForMultipleObjects
GetProfileSectionW
RestoreLastError
FreeUserPhysicalPages
SetVolumeMountPointW
AddRefActCtx
SetProcessWorkingSetSize
GetCurrentDirectoryW
GetCommMask
DosPathToSessionPathA
WriteConsoleOutputCharacterA
GetProfileIntA
AddConsoleAliasW
UnlockFile
EnumSystemLocalesW
SetThreadUILanguage
GetExitCodeThread
SetSystemTime
CommConfigDialogA
RtlFillMemory
GetFileAttributesW
SetCurrentDirectoryA
GlobalFindAtomA
GlobalAddAtomA
CreateSocketHandle
FindFirstFileW
IsBadStringPtrA
RequestDeviceWakeup
GetConsoleInputExeNameA
WriteProfileStringA
AddVectoredExceptionHandler
FindResourceExA
FlushConsoleInputBuffer
GetSystemInfo
SetUserGeoID
GetConsoleMode
LZRead
GetPrivateProfileStringW
SetEnvironmentVariableW
ExpandEnvironmentStringsA
GetLogicalDrives
GetConsoleCursorInfo
SystemTimeToFileTime
FatalAppExitW
CreateDirectoryExA
WriteConsoleOutputAttribute
EnumResourceLanguagesA
SetPriorityClass
FileTimeToSystemTime
TerminateJobObject
QueryPerformanceCounter
Heap32First
GetACP
EnumDateFormatsA
GetSystemDefaultLCID
lstrcmpW
GlobalReAlloc
GlobalCompact
GetStdHandle
QueueUserWorkItem
FindResourceA
SetFileShortNameW
WaitForMultipleObjectsEx
AddAtomA
SetLastConsoleEventActive
GetNamedPipeInfo
GetDiskFreeSpaceExW
GlobalGetAtomNameA
GetConsoleInputWaitHandle
GetCommState
GetDriveTypeA
EnumSystemCodePagesA
LocalHandle
GetVolumeInformationA
CompareStringW
WaitNamedPipeA
GetDiskFreeSpaceA
BeginUpdateResourceW
PeekConsoleInputW
FindNextVolumeA
GetNumberFormatA
OutputDebugStringA
lstrcpyA
GlobalUnfix
GetTapePosition
CreateFileMappingA
GlobalUnlock
GetNamedPipeHandleStateW
SetCurrentDirectoryW
OpenMutexW
FindActCtxSectionStringA
CreateEventA
GetConsoleAliasesW
GetCompressedFileSizeA
ReplaceFileA
EnterCriticalSection
GetProcessIoCounters
FindResourceW
SetLocaleInfoA
ScrollConsoleScreenBufferA
LocalFileTimeToFileTime
RtlZeroMemory
CopyFileW
CreateMemoryResourceNotification
GetStringTypeExA
GlobalLock
SetCommState
FlushFileBuffers
lstrlen
RegisterWaitForInputIdle
GetComputerNameExW
IsBadHugeReadPtr
FlushInstructionCache
SetFileApisToANSI
SetTimerQueueTimer
SetSystemPowerState
IsBadWritePtr
GetProcessVersion
EnumCalendarInfoExA
WritePrivateProfileStringW
FreeConsole
CreateEventW
GetModuleHandleExA
SetFileTime
TerminateProcess
UnhandledExceptionFilter
SetCommTimeouts
ReplaceFileW
BuildCommDCBW
CreateProcessA
SwitchToThread
HeapUnlock
GetCommProperties
GetThreadTimes
IsBadCodePtr
GetFileInformationByHandle
EnumCalendarInfoW
GetNumberOfConsoleInputEvents
GetPrivateProfileIntW
PeekNamedPipe
GetPrivateProfileSectionA
Beep
SetVolumeMountPointA
GetCurrentThreadId
SetComputerNameW
GetExpandedNameW
CancelDeviceWakeupRequest
SetProcessAffinityMask
MulDiv
WritePrivateProfileStringA
ExitProcess
GetFileAttributesExW
GetSystemTimeAdjustment
GetProcessHeap
GetCurrencyFormatA
FindNextChangeNotification
SetCalendarInfoW
FoldStringW
GlobalFree
BuildCommDCBAndTimeoutsW
FindNextVolumeMountPointW
GetLongPathNameA
HeapLock
FindFirstVolumeMountPointW
OpenWaitableTimerA
FreeLibrary
FindVolumeMountPointClose
OpenFileMappingW
GetLogicalDriveStringsA
FindFirstFileExW
DeleteFileA
GetVolumeInformationW
FatalAppExitA
EnumResourceLanguagesW
CreateSemaphoreA
GetCommModemStatus
GetProcessTimes
LockFile
GetCalendarInfoW
SetNamedPipeHandleState
SleepEx
GetConsoleKeyboardLayoutNameW
PulseEvent
GetBinaryTypeW
HeapReAlloc
FatalExit
FileTimeToLocalFileTime
IsDBCSLeadByte
GetCompressedFileSizeW
FindNextFileW
GetShortPathNameW
PrivCopyFileExW
IsValidCodePage
ReadConsoleInputW
MoveFileExW
lstrcmpiA
LZOpenFileA
RemoveDirectoryA
CreateNamedPipeW
TryEnterCriticalSection
SystemTimeToTzSpecificLocalTime
AllocConsole
GetSystemDefaultUILanguage
RegisterWaitForSingleObject
WaitCommEvent
GetUserGeoID
GlobalWire
WriteFileGather
CancelWaitableTimer
LCMapStringA
GetCurrencyFormatW
CreateWaitableTimerW
SetLastError
SetLocaleInfoW
LocalUnlock
CreateDirectoryA
ShowConsoleCursor
lstrcatA
lstrcpynW
DeactivateActCtx
ReadConsoleOutputW
HeapQueryInformation
EnumTimeFormatsW
TlsGetValue
GetProfileStringA
SetMailslotInfo
GetCommandLineW
LocalFlags
SetProcessShutdownParameters
TransactNamedPipe
DeleteVolumeMountPointA
VirtualQueryEx
FindActCtxSectionStringW
GetProcessHeap
GetTapeStatus
LockFileEx
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

shlwapi

SHQueryValueExA
SHRegQueryInfoUSKeyA
SHEnumValueW
StrStrNIW
PathIsDirectoryEmptyA
SHRegEnumUSKeyW
PathRelativePathToW
SHCopyKeyW
PathStripToRootW
PathQuoteSpacesW
PathGetDriveNumberA
PathRenameExtensionA
SHRegDeleteEmptyUSKeyW
StrRetToBSTR
PathIsUNCServerW
wvnsprintfA
UrlIsNoHistoryA
UrlApplySchemeW
StrFormatByteSize64A
SHDeleteKeyA
SHRegGetPathA
PathUndecorateW
SHCreateThread
HashData
PathSkipRootW
SHRegQueryUSValueA
StrRChrA
PathIsDirectoryW
StrNCatW
UrlCanonicalizeW
PathCombineA
StrToInt64ExW
PathIsURLA
PathRemoveArgsA
AssocQueryStringByKeyW
StrCmpNW
SHLoadIndirectString
SHReleaseThreadRef
PathParseIconLocationA
PathIsUNCA
StrCmpNIA
SHRegGetBoolUSValueW
ChrCmpIW
PathSkipRootA
wnsprintfW
SHQueryInfoKeyA
PathCanonicalizeA
StrToIntExA
StrSpnA
SHRegCloseUSKey
SHRegQueryUSValueW
PathSetDlgItemPathW
StrNCatA
IntlStrEqWorkerA
PathAddBackslashA
PathQuoteSpacesA
StrRStrIW
SHRegWriteUSValueA
SHDeleteEmptyKeyA

ole32

ReadClassStm
CLIPFORMAT_UserFree
StringFromIID
CoCreateInstance
CoQueryReleaseObject
OleRun
OleGetAutoConvert
CoInitialize
IsValidPtrOut
HACCEL_UserMarshal
OleCreate
UtConvertDvtd16toDvtd32
CoDeactivateObject
OleMetafilePictFromIconAndLabel
OleDuplicateData
OleGetIconOfClass
StgIsStorageFile
GetClassFile
ComPs_NdrDllUnregisterProxy
ReadFmtUserTypeStg
HENHMETAFILE_UserFree
CoFileTimeNow
OleConvertOLESTREAMToIStorage
CoFreeUnusedLibraries
OleSetMenuDescriptor
WriteOleStg
CoFreeUnusedLibrariesEx
CoMarshalInterface
OleSave
CoLockObjectExternal
OleIsRunning
RevokeDragDrop
CoCreateFreeThreadedMarshaler
IsEqualGUID
DllRegisterServer
OleInitializeWOW
HkOleRegisterObject
CoCopyProxy
OleTranslateAccelerator
CoFreeLibrary
CoBuildVersion
OleConvertIStorageToOLESTREAMEx
GetDocumentBitStg
CreateClassMoniker
UtGetDvtd16Info
CoTestCancel
HPALETTE_UserMarshal
HWND_UserUnmarshal
CoTaskMemRealloc
OleQueryCreateFromData
CoInitializeSecurity
PropStgNameToFmtId
OleCreateFromFile
HDC_UserUnmarshal
CoGetProcessIdentifier
StgCreateDocfileOnILockBytes
OleRegGetUserType
StgConvertPropertyToVariant
OleCreateLinkFromData
HBRUSH_UserFree
HDC_UserFree
OleSetContainedObject
HBITMAP_UserSize
OleCreateLink
CoSwitchCallContext
PropVariantChangeType
HPALETTE_UserFree
CoReactivateObject
OleCreateLinkToFileEx
ProgIDFromCLSID
CoIsHandlerConnected
UtGetDvtd32Info
CoGetPSClsid
CoInvalidateRemoteMachineBindings
ComPs_NdrDllRegisterProxy
CoDisconnectObject
OleGetClipboard
MkParseDisplayName
CoGetInterceptorFromTypeInfo
CoSetProxyBlanket
HDC_UserMarshal
MonikerRelativePathTo
SNB_UserUnmarshal
RegisterDragDrop

comdlg32

PrintDlgW
FindTextA
GetOpenFileNameW
GetSaveFileNameA
ReplaceTextW
LoadAlterBitmap
PageSetupDlgA
ChooseColorA
dwOKSubclass
GetFileTitleW
ChooseColorW
GetSaveFileNameW
dwLBSubclass
PageSetupDlgW
GetOpenFileNameA
PrintDlgExA
GetFileTitleA
ChooseFontA
FindTextW
CommDlgExtendedError
ChooseFontW
PrintDlgA
WantArrows
ReplaceTextA

oleaut32

VarR8Pow
VarR4FromI4
SafeArrayGetElemsize
SysReAllocStringLen
VarUI8FromI2
VarUI8FromDec
VarI8FromStr
VarUI1FromI8
VarUI1FromI1
VarI4FromStr
VarR4FromUI4
VarDecMul
VarDecFromUI8
SetErrorInfo
VarMonthName
GetErrorInfo
VarUI2FromI1
DllGetClassObject
VarR8FromI1
GetActiveObject
VarFormatNumber
VarImp
VarI1FromDisp
VarDecInt
VarNumFromParseNum
VarBoolFromStr
OleCreatePictureIndirect
LPSAFEARRAY_UserSize
VarDecFromUI2
VarBoolFromUI4
VariantClear
VarDateFromUdateEx
VarCyFix
VarI2FromI4
VarI2FromStr
SysAllocStringByteLen
VarBoolFromR4
OleCreateFontIndirect
VarDecFromI2
VarI1FromR4
VariantChangeType
VarI1FromUI8
VarI4FromDisp
VarBstrFromDisp
VarUI4FromI2
SafeArrayCopy
VarDecRound
VarDecSub
VarUI1FromUI4
VarI8FromUI4
SafeArrayRedim
SetVarConversionLocaleSetting
VarDateFromI4
OleLoadPicture
ClearCustData
VarI4FromI8
SafeArrayAllocDescriptorEx
LPSAFEARRAY_UserMarshal
VarUI1FromDisp
VarUI2FromUI8
VarCyFromUI8
VarDateFromUI4
VarI2FromR8
BstrFromVector
VarInt
VarR4FromCy
GetRecordInfoFromGuids
VarBoolFromI8
VarUI2FromDec
SafeArrayGetElement
SafeArrayPtrOfIndex
VarOr
VarR8FromDec
VarI8FromDate
VarDateFromBool
VarI1FromUI2
OleLoadPictureFile
VarR4FromI1
VarUI1FromDec
VarI1FromDate
SafeArrayCopyData
VarDecDiv
VarR8FromR4
VarEqv
VarUI2FromUI4
SafeArrayAllocData
RevokeActiveObject
LoadRegTypeLib
VarCyFromUI1
VarCyNeg
VarUI8FromUI2
VarR8FromCy

shell32

SHGetNewLinkInfoA
SHGetFolderLocation
StrNCmpIW
WOWShellExecute
ExtractIconW
SheChangeDirExW
SHFileOperationA
StrChrA
ExtractAssociatedIconW
SHGetFolderPathW
SHGetIconOverlayIndexA
SHGetDataFromIDListW
SHGetFolderPathAndSubDirW
OpenAs_RunDLL
ShellAboutW
SHSetLocalizedName
DragQueryFileA
FindExecutableW
SHGetDiskFreeSpaceExW
SHFormatDrive
ExtractIconExW
DragFinish
Control_RunDLLW
StrCmpNW
SHGetNewLinkInfoW
Options_RunDLL
SHBrowseForFolderA
DllInstall
StrCmpNA
SHGetDiskFreeSpaceExA
SHEmptyRecycleBinW
SHGetMalloc
SHEnumerateUnreadMailAccountsW
SHCreateQueryCancelAutoPlayMoniker
SheGetDirA
DuplicateIcon
ExtractAssociatedIconExW
StrStrIA
StrRChrIA
SHAppBarMessage
ExtractAssociatedIconExA
DragQueryFileAorW
DragQueryFileW
SheSetCurDrive
DragQueryFile
FreeIconList
PrintersGetCommand_RunDLLW
SHInvokePrinterCommandW
SHCreateShellItem
SHCreateDirectoryExW
SHQueryRecycleBinA
SHEmptyRecycleBinA
ShellAboutA
StrRStrIW

gdi32

CreateHatchBrush
EndPath
SetPolyFillMode
ExcludeClipRect
GdiRealizationInfo
RemoveFontResourceW
Escape
CreateDiscardableBitmap
EngUnicodeToMultiByteN
GdiIsMetaFileDC
SetSystemPaletteUse
CreateDCA
LineTo
GetGlyphIndicesW
GdiGetLocalFont
GetCharacterPlacementW
UpdateColors
CreatePatternBrush
Polygon
CloseEnhMetaFile
GetEnhMetaFilePaletteEntries
GetTextExtentExPointI
GetOutlineTextMetricsA
EngQueryLocalTime
CreateBitmapIndirect
GdiProcessSetup
SetVirtualResolution
EngReleaseSemaphore
SetICMMode
GdiDescribePixelFormat
GdiPrinterThunk
SetGraphicsMode
SetBrushOrgEx
GdiAddGlsRecord
StartPage
UpdateICMRegKeyA
GdiGetDevmodeForPage
cGetTTFFromFOT
ScaleViewportExtEx
AnimatePalette
EnumFontsW
ColorMatchToTarget
TextOutA
GetSystemPaletteUse
PlgBlt
CreatePenIndirect
GdiSetBatchLimit
ExtEscape
GdiIsMetaPrintDC
EngDeleteSurface
GetStringBitmapW
StrokePath
GetTextExtentExPointWPri
ArcTo
STROBJ_bEnum
GetCurrentPositionEx
AddFontResourceExW
GetViewportExtEx
GetTextFaceW
GetBrushAttributes
GetObjectType
SetDCPenColor
MaskBlt
UnloadNetworkFonts
SelectObject
GdiValidateHandle
StartDocW
XLATEOBJ_piVector
StartDocA
EqualRgn
ColorCorrectPalette
PolyPatBlt
GetRelAbs
SetMapperFlags
SetWindowExtEx
RectVisible
CreatePalette
PolyPolygon
ExtTextOutW
CreateEllipticRgnIndirect
EnumFontFamiliesExA
PolyPolyline
CreateColorSpaceA
SetWindowOrgEx
EngWideCharToMultiByte
FontIsLinked
CreatePen
PolylineTo
SetMagicColors
GdiPlayScript
EngGetCurrentCodePage
GetTextFaceAliasW
CreateFontIndirectW
PolyBezier
GetDIBColorTable
GdiGetBatchLimit
GdiQueryTable
GetCharABCWidthsA
CancelDC
EnumFontFamiliesA
EngGradientFill
GdiGetSpoolFileHandle

comctl32

UninitializeFlatSB
InitCommonControlsEx
CreateUpDownControl
MakeDragList
InitMUILanguage
ImageList_ReplaceIcon
ImageList_AddMasked
PropertySheetA
ImageList_Duplicate
GetEffectiveClientRect
ImageList_Remove
ImageList_Replace
FlatSB_SetScrollRange
DrawInsert
CreateToolbarEx
ImageList_GetIconSize
CreateStatusWindowW
DllGetVersion
ImageList_LoadImage
CreatePropertySheetPageA
ImageList_GetImageCount
ImageList_Write
ImageList_GetDragImage
ImageList_Copy
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_GetFlags
CreateToolbar
ImageList_DragEnter
ImageList_SetImageCount
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
ImageList_GetIcon
LBItemFromPt
ImageList_SetFlags
InitCommonControls
CreateStatusWindowA
PropertySheetW
ImageList_DragLeave
ImageList_GetImageRect
ImageList_GetBkColor
CreatePropertySheetPage
CreateStatusWindow
ImageList_AddIcon
ImageList_DragMove
CreatePropertySheetPageW
ImageList_DrawIndirect
FlatSB_SetScrollProp
FlatSB_GetScrollRange
ImageList_Add
FlatSB_ShowScrollBar
PropertySheet
ShowHideMenuCtl
FlatSB_GetScrollInfo
DrawStatusText
ImageList_DrawEx
CreateMappedBitmap
ImageList_SetOverlayImage
ImageList_LoadImageW

Exports

Exports

�,�K�e0/Ÿy��$�Y�}��6$[/�v�x/��1f�B��sݴ�n��D(^c:.��H.��%�!JȆI��{~3�D�Mh@(�ZO�Q��|~�<a��í=9B��R|�}�L�{�Q-��J33�/.�v;�z�J�ؠ��v��P�P��MI��1k��L+��Z �5fL��A;^��3�I�� = �h��K�(��i��_��`��~S�^��K��^��Q�m��P��/:h��-Y`��θf�ؐ��"�O1�3��e��[X]x'a'�z�\��{�xWZ��W�yk�Xq�N��!�V�Ts�� _XA �&kQ3�o�:{+�+2r�r=%/��3�`�� N��wȶ��j�:��A|��´<H��~�Vҳ�� X��R��e{B��d*��oz "��yi�Ex��{�,"�Sq=~q�)�,�J�EKf��Սl��|>��]X��@S{�z'"��,��[?K޾�X{�$z� qSx�7?$�eq>��>؁��N8�,PvA#Qh�{��b[J��C��Ll��Q�aq16-4|d��p��f/�k��I��g��ܶ�]�^�3�]�y�ERA?��9��F��v��uA��u{�p�~I��W��YnX�I�6�TR��J큃Z�δ$::2\��u՟n��1�|ζ9q��+�Q��y��5�%�7��I��UK^�_h f>�E��k�L)�l��$�qA{�*G&ldp�`X��B�? �� h"�W�+��+�fhl/Rl�'q��#�]D/��gA�`7uE�� _�>�V[�2��9s��j'"�i$Zb&�� K��Q@��q؜��vo�� d�N�/��n��A�J%4W)�&� �+J?�I��^X��A�X#׵|\b��3~^�W;�ug��Ia�쌼��(��rR��[9�O��5#5�=��G,��#�t�(�$��b��VV�s�rࢉ��A�fw".nA�bYF�:�N��>�"/z�+W�;��d��r��r7�[��ѵC��f��m ?Ea��2��c��K&�261��}Mݪ�<�1��`�횏��H�us�yH|� ˃�Д��Dp�sr�8�Π 'ׂ8�xm;��5�e3*��vt�4]��<645�@�KIoMlN.��V *��Է�f!��W!�]� �Z�^b��!~θ @��8��k�[)\�u�}[��n�Ⱦ- ��f�wo)�[됣lU�C��6B�Ǻ)��F�觎F��i& S�V|EU��>� ��Bq=�k��Ő�q�jc�Ho3��HsPm�5`��.�w�;��5� �+��7��R<�g�� 5��R�ōXM�55�R��%`�`��y��"�r��lJ>��p8}��_��$!.�r�f|LXF��c��S-��P">��5��#�Q{��K��t/O��~h�e5o�Z��ؙ®c��[�O�1Y#�G{�� V;�OAʘ6:>W0rNc�>É��#��-��`�)�p��;wSX��k��+֯k�2�u ��(R�lF�͎�u��Dϲ%P��5rl�SU��^��]��<Ӽ~F��Z�zy��Y5sՆT^']{/Uu��Iɇ��<0¨� \� *yJKM>�jG�B��YL� %�1-~�JMW��q��*��Ґ"��ywTN��#�(�*.b`+Bص��kGm��r ��ˑ>��b�̽HڐL�;%�B��q(�&m)�4G%`$Y�s�i��EFE�X ��ӷa�2`kpHD�:R��b��5q8� :��Y�6��d,��C��-�V��Ô��$$��IW��Wr%�F��tBsa}��6`I��3mH�7�G�aW�h�2�I�zW��{�־4W�>'0�Y��q��q`m� +�M��y��<��g�l�>y��-?h|%o$`��9��¢��c�DR$�/8��_�C*��B��JJǷ�T�b&�yY��,�Q�?��L��X1~C��Q|yV:w��4��0ሂ�yK��E�yM�X��G:�FU��d[%��Qsp�A6�+�VHCmm�Ϟ)܆��B*ژ�e�K��oՆ"oӞ��<{�b�}�e7��2��fk��+��,ݧo�#��.��Pݬ:`�{_zG��E�V�t�h��w�'�S�e��n��;A��g]�s��:�հbTD��l�s�CU=�#�golo�Y��f\0w ��-�� h��q,2��u��c�/��tc��֚��W:�=�_N0��#-J%��v!��Y*��1O� �H��V,�.��G��h��7-�.�d8 �Q Y��R|� g��2B��c�A�W;�̘L,D�I��'s� ':g�Ĳ�!��l�uy�[�{��q�h�r�x�=�9t�Ħm>V��q��#��qG��&S�$��r,f��"Eۡ>?r�N��:j} G��C0Xt��v��G�1�K}� �h�yF��<�w��-��~;�8�<N��h �8��R^\��8S��4su��@��j�61z �:͛N�Q�\��۫@� �~�s��5l_��6&WY��H��Ԅ4�-}��ѷ.�{��q�%��t�s�'A��y<��E�:p��o��V)�H�ۇV;�+��;��?�㢣��]�F��1�M+��Y��mM/.��+H�Yӑ(��~��r�Q�A��U��2s1&�3 �9��p[W�*@t�z��4��[��:�W��Q]ˮc&>��%��`lw�S�%m\�x9��_��ނ��qh�&��h��!_��$v'x�<�j�Q�S�~��c�+=�T*�/VH��O�5�[Ru��5��X��!��Ӫqn��

Sections

CODE
Size: 451KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 891B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba8652769284535cbb64f3050d71ecda

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

01Certificate

Key Usages

c5:74:8d:95:0b:58:55:c8:f1:29:13:00:ca:a2:1e:91Certificate

Extended Key Usages

Key Usages

f6:44:44:82:92:1e:da:3f:ff:9a:de:51:e3:7c:d3:c8:63:82:e5:5bSigner

Signature Validations

Verification

24-11-2022 14:55 Valid: false

Headers

File Characteristics

Imports

user32

kernel32

shlwapi

ole32

comdlg32

oleaut32

shell32

gdi32

comctl32

Exports

Exports

Sections

CODE Size: 451KB - Virtual size: 451KB

.data Size: 21KB - Virtual size: 20KB

BSS Size: - Virtual size: 891B

.idata Size: 24KB - Virtual size: 23KB

.text0 Size: 17KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 24B

.text1 Size: 89KB - Virtual size: 89KB

.reloc Size: 10KB - Virtual size: 9KB

.rsrc Size: 53KB - Virtual size: 53KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

01
Certificate

c5:74:8d:95:0b:58:55:c8:f1:29:13:00:ca:a2:1e:91
Certificate

f6:44:44:82:92:1e:da:3f:ff:9a:de:51:e3:7c:d3:c8:63:82:e5:5b
Signer

24-11-2022 14:55
Valid: false

CODE
Size: 451KB - Virtual size: 451KB

.data
Size: 21KB - Virtual size: 20KB

BSS
Size: - Virtual size: 891B

.idata
Size: 24KB - Virtual size: 23KB

.text0
Size: 17KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 24B

.text1
Size: 89KB - Virtual size: 89KB

.reloc
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 53KB - Virtual size: 53KB