938cb9fd9a873ef80b747221965f98d1332aa97262da07013f982d018cf9a935

Sharing

Copy URL Twitter E-mail

General

Target

938cb9fd9a873ef80b747221965f98d1332aa97262da07013f982d018cf9a935
Size

659KB
MD5

e45eafa70390ac216bab0eb76462cc4e
SHA1

3db8293ae0537ae05415fc763efcfddabdebea19
SHA256

938cb9fd9a873ef80b747221965f98d1332aa97262da07013f982d018cf9a935
SHA512

2e5c5ae37b0aca63c7057d59becf26474601824b7c3494f96734e05aaadd6b405dec5d45495637e8aa838ce5b192632d2093ad6afabee0548121632124bd0f24
SSDEEP

12288:VAG0ehmRY73qxF3UIV9Tl52YeWaTkE+glqDTiML:VDWRYbUXl50W2qHV

Score

N/A

Malware Config

Signatures

Files

938cb9fd9a873ef80b747221965f98d1332aa97262da07013f982d018cf9a935
.exe windows x86

183c9b5e9bfe3d65f4217317c9a2e14e

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

08:fb:73:cc:96:73:b5:cb:9d:11:27:c5:ae:55:86:62
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

24/04/2015, 00:00

Not After

23/04/2016, 23:59

Subject

CN=IMTER,O=IMTER,POSTALCODE=390000,STREET=d.27 ul.Lenina,L=Ryazan,ST=Ryazan region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

13:1a:19:7b:05:a4:e5:2f:99:e5:65:6c:d0:2c:2a:69:81:42:18:96
Signer

Actual PE Digest

13:1a:19:7b:05:a4:e5:2f:99:e5:65:6c:d0:2c:2a:69:81:42:18:96

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=IMTER,O=IMTER,POSTALCODE=390000,STREET=d.27 ul.Lenina,L=Ryazan,ST=Ryazan region,C=RU

24/11/2022, 14:55
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RevertToSelf

user32

IsCharLowerW
PrivateExtractIconsA
RegisterWindowMessageW
EnumDisplayMonitors
DefFrameProcA
LoadBitmapA
CascadeWindows
EnumPropsExW
SetDlgItemInt
SetLayeredWindowAttributes
SendDlgItemMessageW
LockWindowUpdate
SendMessageCallbackA
CopyIcon
GetWindowTextLengthA
GetWindowRect
CreateIcon
UnregisterHotKey
FindWindowExW
GetClipboardViewer
CharLowerW
OpenInputDesktop
UnregisterClassA
SetDebugErrorLevel
GetMenuState
SetClipboardData
IsCharAlphaW
GetWindowRgn
ScrollChildren
ModifyMenuA
DrawCaptionTempW
CallNextHookEx
EnumPropsW
SetUserObjectInformationA
RegisterClipboardFormatA
PrivateExtractIconExA
LoadBitmapW
GetDCEx
LoadImageW
GetThreadDesktop
TrackPopupMenu
IsWindow
CopyAcceleratorTableA
SystemParametersInfoW
GetWindowLongA
MenuItemFromPoint
SetCaretBlinkTime
MessageBoxIndirectA
DrawCaptionTempA
FlashWindow
DlgDirListW
GetWindowWord
GetLastActivePopup
BeginPaint
GetClientRect
GetCaretBlinkTime
MapVirtualKeyA
EnumDesktopsA
DrawCaption
SetMessageExtraInfo
SetWindowPlacement
UnloadKeyboardLayout
WinHelpW
FindWindowA
IsCharAlphaA
GetClassLongA
GetWindowThreadProcessId
EndDialog
AdjustWindowRectEx
GetCursorPos
SetDeskWallpaper
CreateIconFromResourceEx
ValidateRect
GetMenuBarInfo
MapVirtualKeyW
GetUserObjectInformationW
SetCapture
SetInternalWindowPos
SetMenuInfo
GetParent
GetSystemMetrics
GetClassNameW
EqualRect
SetParent
CreateIconIndirect
CheckMenuItem
LoadAcceleratorsW
GetMenuItemRect
SetMenu
RegisterClassA
CascadeChildWindows
EnumDesktopsW
MessageBeep
ChangeDisplaySettingsExW
DragObject
ChildWindowFromPoint
DefWindowProcW
ChangeMenuW
GetScrollPos
SetSystemCursor
GetMenu
CreateDialogIndirectParamA
PostQuitMessage
SendMessageW
InvalidateRect
SendMessageA
SetTimer
wsprintfW
SetMenuItemInfoA
AnimateWindow
RemoveMenu
CallWindowProcA
FrameRect
CharToOemBuffW
GetWindowPlacement
InsertMenuA
SetProcessWindowStation
GetCaretPos
SendNotifyMessageW
ToAsciiEx
EnumThreadWindows
CallMsgFilterW
PrintWindow
FillRect
AlignRects
ShowOwnedPopups
DlgDirListA
wsprintfA
GetMessageA
GetMenuInfo
LoadStringW
SetMenuDefaultItem
CreateCaret
MapDialogRect
AllowForegroundActivation
OemToCharA
CharToOemA
MessageBoxExA
LoadCursorFromFileW
SetScrollPos
GetMessageTime
CreateAcceleratorTableA
GetKeyNameTextW
RealGetWindowClassW
GetUserObjectSecurity
GetPropW
CharNextW
ToUnicode
TileChildWindows
DestroyCaret
GetWindowInfo
CharUpperBuffA
CreateDialogIndirectParamW
MonitorFromWindow
EnumPropsExA
ShowWindowAsync
SetDlgItemTextA
DeleteMenu
GetClassInfoW
CallWindowProcW
EndPaint
DefDlgProcA
GetKeyNameTextA
GetShellWindow
GetMenuContextHelpId
GetMenuItemID
SendInput
InvalidateRgn
GetGuiResources
ScrollWindowEx
BroadcastSystemMessageA
GetCursor
GetListBoxInfo
CharNextExA
DialogBoxIndirectParamA
GetMessageW
IsZoomed
GetForegroundWindow
DlgDirSelectExA
MonitorFromPoint
CharUpperW
MessageBoxTimeoutA
IsHungAppWindow
GetDlgCtrlID
RedrawWindow
GetScrollBarInfo
BroadcastSystemMessageExW
SetRect
GetAsyncKeyState
GetWindowTextW
OemToCharBuffW
ChangeDisplaySettingsExA
GetIconInfo
GetClassInfoExA
CloseDesktop
LoadMenuW
SetWindowsHookA
GetKeyboardType
DestroyIcon
SetWindowsHookW
CheckRadioButton
DestroyMenu
OemToCharW
CheckDlgButton
GetClipboardFormatNameA
GetDesktopWindow
EnableWindow
MapWindowPoints
LoadImageA
SetMenuItemInfoW
IntersectRect
PostThreadMessageA
UpdateWindow
GetClassNameA
GetDialogBaseUnits
MapVirtualKeyExA
PeekMessageW
EditWndProc
GetMenuDefaultItem
AnyPopup
SendMessageCallbackA
GetScrollRange
DialogBoxParamA

kernel32

WaitForDebugEvent
SuspendThread
ReadConsoleInputW
SetThreadLocale
IsBadCodePtr
GetPrivateProfileIntW
RtlMoveMemory
GlobalDeleteAtom
IsBadHugeWritePtr
OpenMutexW
lstrcpy
OpenFileMappingA
GetProcessPriorityBoost
GetEnvironmentStringsW
SetThreadPriority
TlsSetValue
GetComPlusPackageInstallStatus
HeapFree
ExpandEnvironmentStringsA
IsBadWritePtr
AddAtomA
WriteFile
FindActCtxSectionStringA
GlobalReAlloc
GetStringTypeW
ReadConsoleInputA
WriteConsoleW
OutputDebugStringW
CreatePipe
lstrcpynW
VirtualQuery
EnumDateFormatsExW
MapUserPhysicalPages
FindNextVolumeA
QueryPerformanceCounter
lstrcpynA
FindFirstFileExA
RemoveDirectoryW
IsBadHugeReadPtr
CreateFileMappingA
RtlCaptureStackBackTrace
WriteConsoleInputW
DosPathToSessionPathA
GetOverlappedResult
CopyLZFile
EnumResourceTypesA
HeapSetInformation
RequestDeviceWakeup
lstrcatW
SetCalendarInfoA
SetProcessPriorityBoost
SetTapePosition
ReadConsoleA
DeleteVolumeMountPointA
GetDiskFreeSpaceA
FatalAppExitW
PrivMoveFileIdentityW
ReadFile
GetModuleHandleA
ClearCommError
GlobalFix
GetCommProperties
CreateSemaphoreW
AddConsoleAliasA
GetProcessHeap
CreateDirectoryExW
SetEnvironmentVariableW
OpenMutexA
lstrcmpiA
GetTimeFormatA
FindFirstFileExW
GetConsoleCursorInfo
GetUserDefaultLCID
lstrcpyA
GetFullPathNameW
lstrlenW
LZSeek
GetSystemDefaultLCID
ReleaseActCtx
DeleteFileW
QueryDosDeviceW
SetComPlusPackageInstallStatus
GetPrivateProfileSectionW
GetLocaleInfoA
RegisterWowExec
CreateDirectoryA
ScrollConsoleScreenBufferA
ReadConsoleOutputW
WriteFileGather
CreateEventA
FindFirstFileW
CommConfigDialogA
LockFile
QueueUserWorkItem
CreateFileA
SetFilePointerEx
SetLastConsoleEventActive
IsValidLocale
SetVolumeMountPointA
WriteConsoleOutputW
FindActCtxSectionStringW
CompareStringA
QueryDosDeviceA
GetEnvironmentVariableW
GetConsoleFontSize
OpenEventW
EnumCalendarInfoW
PeekConsoleInputA
GetNamedPipeHandleStateW
GetTempPathW
lstrcmp
LocalFileTimeToFileTime
GetCurrentThreadId
ProcessIdToSessionId
SetLocalTime
OpenJobObjectW
CancelIo
ReadConsoleOutputA
UnlockFile
EnumLanguageGroupLocalesA
SetHandleInformation
LocalUnlock
OpenFile
SetProcessAffinityMask
LZOpenFileA
FindFirstVolumeW
GetCompressedFileSizeA
ReleaseSemaphore
GetCommandLineA
GetFileAttributesExA
GlobalFindAtomW
GlobalAddAtomW
FindNextChangeNotification
GetProfileIntA
lstrlenA
GetProfileSectionW
GetConsoleAliasesA
GetLogicalDrives
OpenJobObjectA
ReadConsoleOutputAttribute
GetVolumeInformationA
FreeEnvironmentStringsA
GetTickCount
SetCommConfig
FreeConsole
VerifyVersionInfoA
lstrcmpiW
GetCalendarInfoW
GetWriteWatch
CancelWaitableTimer
GetConsoleCharType
WaitNamedPipeA
MapViewOfFileEx
CreateThread
FindResourceExW
RestoreLastError
GetShortPathNameA
ExitThread
GetNumberFormatA
SetFileTime
GetModuleHandleExA
ShowConsoleCursor
GlobalFlags
GetProcessShutdownParameters
SetNamedPipeHandleState
MoveFileW
GetVolumeNameForVolumeMountPointA
PrivCopyFileExW
GetModuleFileNameA
GetTimeZoneInformation
WriteFileEx
FindClose
CreateJobObjectA
SetSystemTimeAdjustment
CancelDeviceWakeupRequest
WaitForSingleObject
VerifyConsoleIoHandle
ConsoleMenuControl
GetConsoleAliasesW
EnumSystemLocalesA
GetNativeSystemInfo
GetStartupInfoA
SetComputerNameA
ScrollConsoleScreenBufferW
RegisterWaitForSingleObject
EnumCalendarInfoA
MoveFileExW
QueryActCtxW
LZOpenFileW
SetFileApisToANSI
VerifyVersionInfoW
Heap32Next
ReadConsoleOutputCharacterA
FormatMessageA
CreateHardLinkW
TlsFree
GetConsoleTitleA
lstrcatA
HeapReAlloc
CreateMemoryResourceNotification
SetComputerNameExW
InterlockedCompareExchange
EnumLanguageGroupLocalesW
GetNamedPipeInfo
FoldStringA
ChangeTimerQueueTimer
SetDefaultCommConfigW
WinExec
GetLogicalDriveStringsW
GetVolumePathNameA
CreateFileW
DisconnectNamedPipe
Heap32ListNext
GetDateFormatA
GetTempPathA
GetSystemDefaultUILanguage
FreeEnvironmentStringsW
GetVolumePathNameW
GetThreadContext
GetDiskFreeSpaceExA
CreateConsoleScreenBuffer
UnhandledExceptionFilter
GetNumberOfConsoleInputEvents
GetProcessAffinityMask
GlobalGetAtomNameA
LoadModule
SleepEx
TransactNamedPipe
CreateProcessA
WriteProfileStringA
EnumSystemLanguageGroupsA
CreateSocketHandle
MoveFileWithProgressW
LocalFlags
InterlockedExchangeAdd
SetFileValidData
SetEvent
SetComputerNameExA
GetExitCodeProcess
ReplaceFileA
SetCurrentDirectoryW
GetNumberFormatW
ReadFileScatter
WaitForMultipleObjects
SetCalendarInfoW
ReadDirectoryChangesW
GlobalFindAtomA
WaitForMultipleObjectsEx
SetEnvironmentVariableA
AttachConsole
PeekConsoleInputW
GetThreadPriority
FindFirstChangeNotificationW
MoveFileExA
UnregisterWait
FileTimeToLocalFileTime
SetFileApisToOEM
AddConsoleAliasW
LCMapStringA
SizeofResource
OpenEventA
WriteConsoleOutputCharacterW
VirtualUnlock
WriteProfileStringW
GetMailslotInfo
EnumResourceLanguagesA
GlobalSize
GetComputerNameExW
TransmitCommChar
CancelTimerQueueTimer
InitializeCriticalSection
FindNextVolumeMountPointA
WaitNamedPipeW
ReadConsoleOutputCharacterW
lstrcmpW
GetOEMCP
GetLocaleInfoW
LocalSize
EnumSystemGeoID
GetAtomNameW
FindNextVolumeW
QueryInformationJobObject
GetThreadPriorityBoost
DnsHostnameToComputerNameW
GlobalMemoryStatus
GetSystemPowerStatus
GetNumberOfConsoleMouseButtons
GetPrivateProfileSectionA
GetLogicalDriveStringsA
HeapUnlock
SearchPathW
WritePrivateProfileStringA
CreateEventW
CopyFileExA
SetFileShortNameW
GetCurrentActCtx
LockFileEx
WriteConsoleOutputCharacterA
SetCommTimeouts
GetConsoleFontInfo
InvalidateConsoleDIBits
FindAtomA
GetACP
WriteTapemark
GetCommConfig
CreateJobObjectW
GetPriorityClass
SetThreadContext
GetProcessWorkingSetSize
FindFirstChangeNotificationA
SetInformationJobObject
CompareFileTime
LocalFree
GetHandleContext
GetCurrentThread
GetProfileSectionA
CreateActCtxW
GlobalLock
CreateNamedPipeA
LoadResource
UnmapViewOfFile
CreateDirectoryExA
InterlockedIncrement
WideCharToMultiByte
DisableThreadLibraryCalls
GetProcessVersion
IsWow64Process
QueryPerformanceFrequency
GetProcessHeaps
WritePrivateProfileStructA
GetNamedPipeHandleStateA
SetStdHandle
GlobalUnfix
InitAtomTable
GetConsoleCursorMode
FindFirstVolumeMountPointA
PeekNamedPipe
ReplaceFileW
GetCompressedFileSizeW
CreateWaitableTimerW
GetProfileStringW
GetConsoleMode
LeaveCriticalSection
SetLastError
CreateMailslotA
GetExitCodeThread
GetFullPathNameA
GetCPInfoExA
Beep
CopyFileA
lstrcpyW
GetUserGeoID
FileTimeToDosDateTime
GetNumberOfConsoleFonts
FatalExit
SetFileShortNameA
GetVolumePathNamesForVolumeNameA
EnumCalendarInfoExA
LocalAlloc
IsBadStringPtrW
BuildCommDCBAndTimeoutsW
ClearCommBreak
FreeUserPhysicalPages
GetPrivateProfileStringW
GetDiskFreeSpaceW
TzSpecificLocalTimeToSystemTime
GetStringTypeA
GetGeoInfoW
GetGeoInfoA
lstrcpyn
CreateWaitableTimerA
HeapQueryInformation
FindAtomW
SetFileAttributesA
IsValidCodePage
GetAtomNameA
WritePrivateProfileStructW
GetStdHandle
CreateProcessInternalA
LocalLock
FindActCtxSectionGuid
CreateSemaphoreA
AllocConsole
GetConsoleKeyboardLayoutNameW
GetConsoleInputExeNameA
CreateHardLinkA
GetPrivateProfileIntA
BuildCommDCBA
OpenSemaphoreA
GetShortPathNameW
ReadFileEx
SetLocaleInfoA
GetUserDefaultUILanguage
LockResource
DeleteTimerQueueEx
WriteConsoleOutputA
GetModuleHandleExW
DosPathToSessionPathW
WaitForSingleObjectEx
CloseHandle
FlushConsoleInputBuffer
GetConsoleProcessList
GetCurrentProcess
GlobalHandle
CreateDirectoryW
IsBadStringPtrA
TerminateProcess
SetWaitableTimer
FindNextFileA
BeginUpdateResourceA
CreateActCtxA
GetCPInfoExW
GetEnvironmentStringsA
OpenWaitableTimerA
GetProcessHeap
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

comdlg32

ChooseFontA
GetFileTitleW
ReplaceTextW
PageSetupDlgW
PrintDlgW
GetOpenFileNameA
GetFileTitleA
ChooseColorA
WantArrows
ReplaceTextA
GetSaveFileNameA
PrintDlgExA
LoadAlterBitmap
FindTextA
PageSetupDlgA
ChooseFontW
dwOKSubclass
CommDlgExtendedError
GetSaveFileNameW
dwLBSubclass
ChooseColorW
GetOpenFileNameW
PrintDlgA

oleaut32

VarR4FromDisp
VarCat
VarUI4FromI1
VarBstrFromDec
VarUI2FromI2
SystemTimeToVariantTime
VarR4FromI1
VarI2FromR8
VarIdiv
VarI4FromCy
VarUI4FromDate
VarBstrFromI4
VarUI1FromI4
DispGetParam
DispGetIDsOfNames
VarI4FromI8
VarUI8FromUI1
SetErrorInfo
VarCyRound
LPSAFEARRAY_UserUnmarshal
VarR8FromDisp
VarUI4FromDec
VarEqv
VariantTimeToDosDateTime
VarUI1FromR8
VarDecMul
CreateStdDispatch
VarCyFix
OleLoadPicturePath
VarI1FromBool
VarR4FromDec
VarUI2FromCy
VarR8FromDec
VarCyMul
SafeArrayAllocDescriptor
CreateTypeLib
VarAnd
VarDecFromCy
LoadTypeLib
VarBoolFromDisp
VarDecCmpR8
VarR4CmpR8
LHashValOfNameSys
VarFormatNumber
VarI4FromR8
VarUI2FromBool
VarMod
VarR8FromI4
VarCyFromI1
VarUI8FromI1
VarUI2FromDec
VarCyFromUI4
VarBstrFromUI4
VarUI2FromDate
VariantInit
SafeArrayGetDim
VarI2FromUI8
VarI1FromStr
VarTokenizeFormatString
VariantTimeToSystemTime
GetRecordInfoFromTypeInfo
VarI2FromI1
VarCyAdd
BSTR_UserMarshal
ClearCustData

gdi32

GdiGetCodePage
GdiIsPlayMetafileDC
SetBitmapBits
IntersectClipRect
GdiInitSpool
OffsetClipRgn
GetEUDCTimeStampExW
RemoveFontMemResourceEx
GetKerningPairsA
PlayEnhMetaFileRecord
GetTextCharacterExtra
GetPixelFormat
CombineTransform
EngAssociateSurface
InvertRgn
EngStretchBltROP
SetMapMode
CreateRectRgn
Chord
CreateEnhMetaFileA
PatBlt
STROBJ_bGetAdvanceWidths
GetStringBitmapW
EngMultiByteToUnicodeN
PolyTextOutW
ClearBrushAttributes
FlattenPath
GdiRealizationInfo
GdiGetLocalDC
GetArcDirection
EudcUnloadLinkW
CopyEnhMetaFileW
FixBrushOrgEx
GdiGetSpoolMessage
SetICMProfileW
GdiPlayScript
PolyPolyline
FONTOBJ_pxoGetXform
PtVisible
CreateScalableFontResourceW
CreateDCW
EngCreateDeviceBitmap
SetPaletteEntries
GetStretchBltMode
CLIPOBJ_bEnum
SetMapperFlags
STROBJ_bEnumPositionsOnly
GetPixel
SetAbortProc
SetMetaRgn
SetWinMetaFileBits
GetCharABCWidthsFloatW
ExtTextOutA
TranslateCharsetInfo
CreateDCA
PtInRegion
GdiInitializeLanguagePack
RemoveFontResourceExA
GetStringBitmapA
CreateScalableFontResourceA
GetCharWidthFloatA
GdiDllInitialize
ExtCreatePen
AbortDoc
CreateFontIndirectExW
GdiIsMetaPrintDC
GetFontData
CopyMetaFileW
RemoveFontResourceTracking
GetColorSpace
CopyMetaFileA
GdiProcessSetup
EngDeleteClip
GetEnhMetaFileBits
SetPixelFormat
GdiTransparentBlt
GetTransform
FONTOBJ_cGetGlyphs

comctl32

ImageList_SetOverlayImage
ImageList_EndDrag
ImageList_Duplicate
ImageList_Add
FlatSB_SetScrollProp
ImageList_AddIcon
GetEffectiveClientRect
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
ImageList_DragLeave
FlatSB_SetScrollPos
CreateStatusWindowW
PropertySheet
CreateMappedBitmap
ImageList_GetDragImage
DrawStatusTextW
DestroyPropertySheetPage
FlatSB_GetScrollProp
DrawInsert
ImageList_Draw
ImageList_Read
FlatSB_SetScrollRange
ImageList_SetFlags
FlatSB_EnableScrollBar
ImageList_GetIcon
UninitializeFlatSB
CreateStatusWindow
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_Copy
ImageList_Remove
CreatePropertySheetPageW
FlatSB_ShowScrollBar
InitializeFlatSB
MenuHelp
ImageList_GetFlags
ImageList_GetIconSize
ImageList_Merge
ImageList_DragShowNolock
LBItemFromPt
ImageList_AddMasked
PropertySheetA
ImageList_DragMove
GetMUILanguage
ImageList_Destroy
InitCommonControlsEx
FlatSB_GetScrollRange
CreatePropertySheetPageA
ImageList_DragEnter
ImageList_SetDragCursorImage
ImageList_GetImageRect
ImageList_BeginDrag
InitMUILanguage
InitCommonControls
ImageList_Replace
ImageList_DrawEx
ImageList_Create
ImageList_Write

Exports

Exports

#�UvX�uT� ��.�wCݘ��Mvyc8QQ}��F�5�.� 뛐!�p��t��en��NV�bx�t��p��&�\)�Q��D�C��'�ŝ��v�O��ְ��:k �hj~��M?u~(��S�{:�>� ��t�׽U�Y��TXd�(ڇi��Ԛ�|��l��!��V��;��n`y��)R��q^�db}��Oanˁ�sE��D��{��Fۉ��UTJnPo�@��a� {|�U��%L��B0��\��x�X�� W�c��i"��4�rp �X!�J� ��;�N�*n��#�� y:�E�Cѱ�m��$GO�C/sA�L� �,��\]�J}X��u6f�σ�}ܞ��.�㰭��ҟldQztNHgb0@�M�WS��E��X+aY��FD�`F��+lr��sA��3�E&��m��؅z�4�4m�mB�Z��;� mP��9��i�+|~��O��T�0�wF��P��-��͖d�p�E��^5�R��=ʾ�3��d��"�h�a��X�)�L��r��<��u�Km�[��N��^��,A#,��B��i� �I�ث��!��)�|�b��heLc:��|��6��|��P�\! 5�9�Ȍ��@*�8��ym(?��x�k�;[:��B�ֱ��,2�'�١�~m|^v��Q�� U7��u��Կ�!*]+*��Wm�Ыfg!ͫvH�kE��,}��*v�*#c�� {z��: ��P��/�y��{�x�G��UNq�~~� ��+� VU��}_WɞGV�=%}q��:G�x��#��Yz��"e��梺H�!�ə� dH^�I a[�T��{��l�y��D��i�-k)�3B��]%��t�1�{��L�y,�-��+S�&� ��x��h=><3�Q:&�kI��7�>>C��x�d�(��B��=y jb�rJ��if�k��|��kUn<�9q2E��ߩP�I��o��Χ��o'�NU�r�)�q�j�9k;9�h:d�a�#2`J%'�-�2TG��&��3!�'�*J�F� k�m�tQ�%PrP�i�ŌA�J63|h3�Y�a0'lQ� M��^��@O�d 8��ē5z~��RN $�?�c]�"ä�Vx�Ƕ�ˠ*q��P��0��{G��|/x;#j8��cؘ��l�y��fı&�~�3P�w�N�\��(�d�0zd��q�nj�6�G��]�Ct��X�ק�-��8 |�A��v��k:#�H��h�׆bRΐ��(N۠ȉE�ad!F��ӹ�u�5��v�#��c�|�CG�sz3�Rw�M:Pl$"��Y�l/��7��(�!0'�"{N�O�]R��rg�~Q.C��^\��e��K5�'_�g6F7�^(��؞�q�PW�l'��f�pɪ��^1� �!�w��KT��dO궲#!1ѓ���M��:û�Q9;l��*�Vu�]��MɆ�g�gq� �T��tF�Q��"��X֑��^��.�?g�N �SJZ5��+��1�x��S9��)i��c˞B%��e��ˬ.�0z=0�,^.��(f��%Q�X��$�t聅L%&%Ok�bu�w�u��f�u{��˳P�ЈSC�mBǒ��oLPьߤͣ�tE1�9� ��ǁ��Q��{�K'��W�3si ZPϴ��&��`�)5L�\�$��BRf'�ǚ=��y��9�Qg9`�]��x�%�9T��3�D"��/��1��n��8܊�N�g��pQf�&��<zg�[Rh;i��Jh��\M?��c��)��} �@�u%��h�@�\T8�,�b=�B>�ג�� Ǵ��y�p*�+ȶL<gv�F�َ#�h�4��ڨ��fq��'�>��? G��lEg��g}�aˑ��3�� 'v��#��Ut�7}V.#16��'�Tq9:�c�h��v��#��b�Z��MǇ7��-�G��Lp�T��p��"U�h��F~]��F��/u��Iti�~��&\f��g+��(WhR4* �d� ��P�� _�?��Q �MB~�� w,��{��yLͩ��h�]��B_E�^Gp)s�V �@�_Jz�c�eL��Z��n��g��-��;U�]U�A��-�'`V�|<O��h��m K\&��v82 "�5��/�Y�|�$��u�,��,��(��l�{,�0��v�w�8O�ڕ�A�:��E �ڔ�%Zs��E1�d�"VE�Ot��H2z�Yf1eF�1�l�P&>��Y7��>��S�7 W"�Mܢ�F�06�ĦEI`��n%��5}�fz6��}��e-��R�9��T�np�=��_��`�q��r�5��vA|�$�&�b��x�PC��oE�?�Z��'��~��~.r�7�'��-3X�N�H�*��%��fSR��==-W۳O�DÈSy�_0�`_��5A��6?�� -��~�N��%I��C�)f~m��Ӟu-ht�ф��l��N��S�V5�a��ҡ\B�BD��i��L��}��P��(fu?��d�� ԘA�;��[=��H2l��2q� [��?�2�_� �r�ac��r��!�cM�P9��M��1<��$u8Wԟ �zm� 8��TXt��~�ޓ��a��gH�-;|3a�X�D��'��,B�a��`��)-��7�>�s+��q�1y��J�>�Y�N�Bh�Q�pf ��b�/�q|9��|5��^��F�9��xC��s�Z�#y�T�Lf�P0�}��Ds:��d'�=�{�L�UV�j�l=v�>6��ǈ��Շ5G��-qD��B;+xغJ��q1cZ��S��>I

Sections

CODE
Size: 452KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

183c9b5e9bfe3d65f4217317c9a2e14e

Code Sign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

01Certificate

Key Usages

08:fb:73:cc:96:73:b5:cb:9d:11:27:c5:ae:55:86:62Certificate

Extended Key Usages

Key Usages

13:1a:19:7b:05:a4:e5:2f:99:e5:65:6c:d0:2c:2a:69:81:42:18:96Signer

Signature Validations

Verification

24/11/2022, 14:55 Valid: false

Headers

File Characteristics

Imports

advapi32

user32

kernel32

comdlg32

oleaut32

gdi32

comctl32

Exports

Exports

Sections

CODE Size: 452KB - Virtual size: 456KB

.rdata Size: 22KB - Virtual size: 28KB

.idata Size: 20KB - Virtual size: 24KB

.text0 Size: 15KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 4KB

.text1 Size: 79KB - Virtual size: 80KB

.reloc Size: 9KB - Virtual size: 12KB

.rsrc Size: 53KB - Virtual size: 53KB

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

01
Certificate

08:fb:73:cc:96:73:b5:cb:9d:11:27:c5:ae:55:86:62
Certificate

13:1a:19:7b:05:a4:e5:2f:99:e5:65:6c:d0:2c:2a:69:81:42:18:96
Signer

24/11/2022, 14:55
Valid: false

CODE
Size: 452KB - Virtual size: 456KB

.rdata
Size: 22KB - Virtual size: 28KB

.idata
Size: 20KB - Virtual size: 24KB

.text0
Size: 15KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 4KB

.text1
Size: 79KB - Virtual size: 80KB

.reloc
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 53KB - Virtual size: 53KB