ba543935131684e135a92d14d795fae3c1314d27b9de3ea1137f602cf9c30dc3

Sharing

Copy URL Twitter E-mail

General

Target

ba543935131684e135a92d14d795fae3c1314d27b9de3ea1137f602cf9c30dc3
Size

645KB
MD5

e53425026879eaa930fbe61da8a74f88
SHA1

6c0fec33d4db15358058d71405ac6a377f483f47
SHA256

ba543935131684e135a92d14d795fae3c1314d27b9de3ea1137f602cf9c30dc3
SHA512

4f3d0f085f526eaee4b0a5be34ccd7cdcb4c9008c5ca6e33ecf3a28214c140e2f578b72731784d6ede0625901598b4ebc4e6cf88a05dd10e00f5e37a17c9f95c
SSDEEP

12288:5j2iEsgFOONViWLgdTfdO6j1OIruFnBs8VFIRfaMv:aOSlLgiu1Xus8VFIF

Score

N/A

Malware Config

Signatures

Files

ba543935131684e135a92d14d795fae3c1314d27b9de3ea1137f602cf9c30dc3
.exe windows x86

089d99d0f37aaef61c1e6b347c16af1d

Code Sign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

17/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:d0:21:0f:d3:cf:ba:83:68:c6:ee:09:b4:b8:87:67
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

03/04/2015, 00:00

Not After

02/04/2016, 23:59

Subject

CN=WEB LIDER OAO,O=WEB LIDER OAO,L=Moscow,ST=Moskovskaya oblast,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

83:4e:b4:64:2b:17:60:51:81:54:ca:3a:84:7b:c8:79:5f:50:bc:67
Signer

Actual PE Digest

83:4e:b4:64:2b:17:60:51:81:54:ca:3a:84:7b:c8:79:5f:50:bc:67

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=WEB LIDER OAO,O=WEB LIDER OAO,L=Moscow,ST=Moskovskaya oblast,C=RU

24/11/2022, 14:55
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

DialogBoxIndirectParamW
GetDialogBaseUnits
EnumDesktopWindows
ScreenToClient
ValidateRgn
DlgDirSelectExW
SendNotifyMessageA
LoadMenuIndirectW
EndMenu
SetWindowRgn
GetWindowModuleFileNameW
GetTitleBarInfo
SetMenuDefaultItem
InsertMenuItemA
AttachThreadInput
OpenClipboard
RegisterDeviceNotificationA
SendMessageCallbackW
GetMouseMovePointsEx
PostQuitMessage
MessageBoxA
GetNextDlgTabItem
BlockInput
SetMenuItemInfoA
SetWindowsHookW
FlashWindow
GetWindowDC
LoadKeyboardLayoutA
CharLowerA
GetWindowInfo
GetCursorPos
CreateCaret
SwapMouseButton
CharLowerBuffA
CreateCursor
SetMenuItemInfoW
IsDlgButtonChecked
SetSysColors
GetActiveWindow
TileWindows
GetSysColorBrush
DestroyWindow
GetAltTabInfoA
GetAncestor
LoadMenuW
DlgDirSelectExA
CreateDialogParamA
MonitorFromPoint
CharToOemA
SetParent
BeginPaint
PostThreadMessageW
DestroyAcceleratorTable
CheckMenuItem
PrivateExtractIconsW
GetMenuStringA
SetSystemCursor
GetSystemMenu
IsWindowVisible
GetTopWindow
GetWindowLongW
DrawCaptionTempA
SetMenu
CharNextExA
GetWindowRect
GetFocus
PostMessageW
SetProcessWindowStation
CallWindowProcW
CheckDlgButton
SetActiveWindow
ShowOwnedPopups
EndTask
SetMenuContextHelpId
MenuItemFromPoint
ToAscii
IntersectRect
ArrangeIconicWindows
GetInputState
GetUserObjectInformationW
ToUnicodeEx
OemKeyScan
DefWindowProcA
AnimateWindow
GetDlgCtrlID
MapVirtualKeyA
SetWindowPos
EndPaint
UnregisterClassW
WindowFromPoint
IsWindow
HideCaret
IsCharAlphaW
CopyIcon
IsCharLowerW
CallWindowProcA
MessageBoxIndirectW
GetGuiResources
GetDCEx
CreateMDIWindowW
DrawCaption
IsZoomed
GetUserObjectInformationA
MonitorFromWindow
SendMessageW
DestroyCaret
LoadBitmapA
SetScrollRange
CreateIcon
IsCharUpperW
UpdateLayeredWindow
SetCursor
DrawAnimatedRects
GetMenuItemInfoW
GetUserObjectSecurity
SetWindowsHookExW
LoadCursorW
FindWindowW
CharNextA
OemToCharBuffW
MessageBoxTimeoutW
GetClipboardFormatNameA
EnumPropsExW
DrawIconEx
CreateAcceleratorTableW
CreateDialogIndirectParamA
ShowCursor
GetCaretPos
ScrollWindow
ActivateKeyboardLayout
BroadcastSystemMessageExW
ChangeDisplaySettingsW
LockWindowUpdate
ShowScrollBar
GetWindowContextHelpId
LoadStringW
AlignRects
GetMessageExtraInfo
GetKeyboardLayoutNameW
GetAsyncKeyState
LoadIconA
GetScrollRange
GetMonitorInfoA
GetWindowThreadProcessId
SetLastErrorEx
CreatePopupMenu
ToUnicode
LoadAcceleratorsW
GetSubMenu
DialogBoxParamW
DialogBoxParamA
IsCharAlphaNumericW
GrayStringW
GetWindowRgnBox
SendMessageTimeoutW
GetClipboardOwner
SetMenuInfo
UnregisterDeviceNotification
LoadBitmapW
CharLowerBuffW
EnumDisplayMonitors
MapWindowPoints
GetClipboardFormatNameW
SetForegroundWindow
GetUpdateRect
FillRect
IsDialogMessageA
GetClassLongW
CreateDialogParamW
RegisterWindowMessageA
EnumDesktopsA
GetWindowWord
UnregisterHotKey
SetKeyboardState
DragDetect
EnumWindowStationsA
AllowForegroundActivation
SetWindowWord
GetKeyboardLayout
GetLastInputInfo
DestroyMenu
SetInternalWindowPos
RegisterDeviceNotificationW
SetDebugErrorLevel
GetMenuItemInfoA
ShowWindowAsync
GetWindowTextLengthW
DlgDirListW
RegisterClassW
FindWindowExW
OemToCharBuffA
GetCursor
IsWindowEnabled
GetKeyboardLayoutNameA
IsCharAlphaNumericA
TranslateMessageEx
GetLastActivePopup
OpenDesktopA
EnumDesktopsW
SystemParametersInfoW
LoadCursorFromFileA
GetInternalWindowPos
LoadImageW
WaitForInputIdle
DrawTextW
wsprintfW
GetScrollBarInfo
DefFrameProcA
UpdateWindow
InvalidateRgn
GetKeyboardType
TranslateAcceleratorW
GetDesktopWindow
CopyAcceleratorTableA
TrackPopupMenu
ScrollChildren
SwitchDesktop
SetLayeredWindowAttributes
GetMenuState
GetWindowRgn
PtInRect
SetClipboardData
GetMessageW
FlashWindowEx
DrawStateA
GetWindowTextLengthA
TileChildWindows
GetTabbedTextExtentA
ShowWindow
SetWindowPlacement
wvsprintfW
FrameRect
GetKeyboardState
IsWindowUnicode
TranslateMessage
DrawEdge
ClipCursor
GetForegroundWindow
GetClassInfoA
SetRectEmpty
WinHelpW
LoadKeyboardLayoutW
SetDoubleClickTime
RegisterHotKey
GetCapture
SendDlgItemMessageA
AnyPopup
CharUpperA
EnableWindow
GetProgmanWindow
GetIconInfo
UnloadKeyboardLayout
SetWindowTextA
RealGetWindowClassW
AnyPopup

kernel32

CopyFileExA
LZSeek
GlobalWire
FindVolumeMountPointClose
GetStringTypeExW
GetFileAttributesExA
WriteFileEx
lstrcmpiW
RemoveDirectoryA
CreateDirectoryW
EnumCalendarInfoA
GetDiskFreeSpaceA
VerLanguageNameA
EnumCalendarInfoW
LockFile
SetComputerNameExW
LCMapStringA
GetPrivateProfileSectionW
GetConsoleCP
WaitForDebugEvent
PeekNamedPipe
AddConsoleAliasW
ReadConsoleOutputCharacterA
WriteProfileStringW
RtlFillMemory
GetCurrentActCtx
GetVolumePathNamesForVolumeNameW
GetPrivateProfileStructA
GetDiskFreeSpaceExA
ReadDirectoryChangesW
GetCompressedFileSizeA
QueryDosDeviceA
GetThreadPriorityBoost
ScrollConsoleScreenBufferA
DisableThreadLibraryCalls
SetTimeZoneInformation
GetConsoleTitleW
LZOpenFileW
BackupWrite
ExitProcess
InvalidateConsoleDIBits
GetPrivateProfileStructW
InterlockedExchange
MoveFileWithProgressW
HeapSize
LoadResource
GetFullPathNameW
lstrcmpW
GetSystemDefaultLangID
lstrcpyA
LocalFileTimeToFileTime
SetTimerQueueTimer
HeapReAlloc
EnumResourceLanguagesA
CreateNamedPipeA
SetTapeParameters
BuildCommDCBAndTimeoutsW
GetConsoleKeyboardLayoutNameW
RtlCaptureContext
SystemTimeToTzSpecificLocalTime
CreatePipe
FindResourceExW
MoveFileW
GetLogicalDrives
LocalReAlloc
CreateJobSet
GetProcessTimes
GetLogicalDriveStringsW
GetConsoleWindow
CreateFileW
GetConsoleDisplayMode
SetPriorityClass
HeapFree
RaiseException
WriteConsoleOutputCharacterA
GlobalGetAtomNameW
GlobalAddAtomW
FindNextFileA
ReadConsoleInputExW
GetNumberFormatA
FindFirstVolumeW
FreeLibrary
DeleteTimerQueueTimer
EnumSystemLanguageGroupsW
UpdateResourceA
SetDefaultCommConfigW
ProcessIdToSessionId
SetThreadContext
TryEnterCriticalSection
LZCopy
MoveFileA
SetComputerNameExA
GetCPInfoExW
InitializeCriticalSectionAndSpinCount
ReadConsoleInputW
DeleteTimerQueue
WaitNamedPipeW
GetModuleFileNameA
GetModuleFileNameW
IsValidCodePage
SetMailslotInfo
GetSystemDefaultUILanguage
SetFileApisToOEM
CreateWaitableTimerA
InterlockedExchangeAdd
GlobalUnfix
MoveFileExW
LockFileEx
FreeLibraryAndExitThread
GetProfileSectionA
GetEnvironmentStringsW
CreateNamedPipeW
GetDefaultCommConfigA
ReleaseSemaphore
GetStdHandle
WritePrivateProfileStringA
SetComputerNameA
CallNamedPipeW
OpenFile
SetThreadPriorityBoost
GetPrivateProfileSectionNamesA
GetModuleHandleExW
CopyFileW
FindNextVolumeMountPointW
FindNextFileW
SystemTimeToFileTime
GetLogicalDriveStringsA
FindResourceA
GlobalFix
HeapAlloc
GetDefaultCommConfigW
GetLocaleInfoW
CopyLZFile
CancelDeviceWakeupRequest
EnumDateFormatsA
GetFileAttributesExW
PeekConsoleInputW
HeapQueryInformation
SetUnhandledExceptionFilter
OutputDebugStringA
GlobalDeleteAtom
VirtualFree
CreateHardLinkA
SetComputerNameW
GetProfileSectionW
DelayLoadFailureHook
GetExpandedNameW
OpenFileMappingA
GetStringTypeExA
lstrcpy
GetCPInfoExA
HeapSetInformation
BeginUpdateResourceA
GetExpandedNameA
GetVersionExA
FileTimeToDosDateTime
FindActCtxSectionStringA
GetCurrencyFormatW
QueueUserWorkItem
BuildCommDCBW
AddConsoleAliasA
GetCommMask
FreeEnvironmentStringsA
WriteProfileStringA
IsBadCodePtr
CreateHardLinkW
GetVersionExW
GetVolumeInformationA
GetStringTypeW
OutputDebugStringW
CompareFileTime
GetModuleHandleExA
Heap32ListNext
DeleteTimerQueueEx
LocalHandle
ConvertDefaultLocale
GlobalAddAtomA
GetEnvironmentVariableW
EnumSystemGeoID
RegisterWowExec
WriteConsoleOutputW
GetConsoleSelectionInfo
ReadConsoleOutputCharacterW
IsBadStringPtrW
EndUpdateResourceA
BuildCommDCBAndTimeoutsA
GetConsoleInputWaitHandle
SetWaitableTimer
OpenEventA
LZCloseFile
VirtualFreeEx
GetLargestConsoleWindowSize
SetSystemTimeAdjustment
GetConsoleCursorMode
FreeResource
GetVolumeNameForVolumeMountPointW
GetExitCodeProcess
GetFileAttributesA
AddAtomW
FindAtomW
AddRefActCtx
IsValidLocale
EnumSystemLocalesW
GetLocalTime
RestoreLastError
SetHandleInformation
GlobalFree
SetSystemTime
FindVolumeClose
WriteTapemark
GetConsoleOutputCP
WriteProfileSectionW
GetNamedPipeHandleStateA
GetCurrentDirectoryA
DeleteFileA
DosDateTimeToFileTime
GetProfileStringW
SizeofResource
WriteConsoleOutputAttribute
GlobalMemoryStatus
GetCommandLineW
SetComPlusPackageInstallStatus
IsValidLanguageGroup
AddAtomA
GlobalSize
IsProcessorFeaturePresent
GetPrivateProfileIntA
GetGeoInfoA
GetCurrentThread
TransactNamedPipe
FillConsoleOutputCharacterW
UpdateResourceW
GetNamedPipeHandleStateW
Heap32Next
GetTimeZoneInformation
CreateFileA
GetCalendarInfoW
SetThreadAffinityMask
CreateTimerQueue
WriteConsoleA
lstrcpyn
CloseHandle
ReadConsoleW
GenerateConsoleCtrlEvent
GetFullPathNameA
GetTempPathA
CreateDirectoryExA
SetFileAttributesW
ReplaceFile
GetConsoleCursorInfo
GetDateFormatW
GetMailslotInfo
SetCommMask
GetCurrentThreadId
GetSystemDefaultLCID
CreateEventA
LocalSize
CreateFileMappingW
FlushFileBuffers
lstrcatW
ActivateActCtx
InterlockedIncrement
GetFileInformationByHandle
SetStdHandle
FindFirstFileW
GetTempPathW
LZOpenFileA
FindFirstVolumeMountPointA
BuildCommDCBA
WaitForMultipleObjects
HeapValidate
lstrlenA
FreeConsole
IsBadStringPtrA
WritePrivateProfileStructA
OpenMutexW
lstrlenW
GlobalCompact
OpenSemaphoreA
CreateFileMappingA
EnumSystemLocalesA
RequestDeviceWakeup
lstrcmpi
LocalAlloc
lstrcatA
GetDriveTypeW
GetNumberFormatW
CancelWaitableTimer
EraseTape
GetShortPathNameW
lstrcat
SleepEx
QueryPerformanceFrequency
CopyFileA
WaitCommEvent
SetSystemPowerState
GetThreadLocale
Beep
QueryActCtxW
EnumTimeFormatsW
GetSystemTime
VirtualQueryEx
SetCurrentDirectoryA
ConnectNamedPipe
EnterCriticalSection
UnlockFileEx
RegisterWaitForInputIdle
SetCalendarInfoA
MulDiv
ReadConsoleOutputAttribute
GetUserDefaultLangID
RtlMoveMemory
AllocateUserPhysicalPages
LocalCompact
GetVolumeNameForVolumeMountPointA
GetProcessHeap
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

comdlg32

PrintDlgA
ReplaceTextW
GetSaveFileNameW
PrintDlgExW
PrintDlgW
ChooseFontW
FindTextW
LoadAlterBitmap
CommDlgExtendedError
ChooseColorA
PageSetupDlgA
WantArrows
ChooseColorW
dwLBSubclass
GetSaveFileNameA
ChooseFontA
GetFileTitleA
GetOpenFileNameA
FindTextA
ReplaceTextA
GetFileTitleW
dwOKSubclass
GetOpenFileNameW

oleaut32

SysReAllocStringLen
VarDateFromUdateEx
VarUI8FromI2
VarI1FromDate
VarDecFromUI4
VarR4FromR8
VarUI1FromCy
VarUI2FromI4
VarUI8FromI8
VarUI4FromUI8
VarUI4FromI1
VariantCopyInd
VarCyMul
VarCyFromR8
VarMul
SafeArraySetIID
VarDecFromUI8
VarDecCmpR8
OleSavePictureFile
ClearCustData
VarR4FromUI4
VarBoolFromDisp
VarUI2FromBool
VarCyFromI2
VarUI1FromUI2
VarI4FromI8
VarUI8FromUI4
VarUI2FromCy
VarBstrFromUI1
CreateStdDispatch
VarI8FromI1
VarBstrFromDate
SysAllocString
VarAdd
CreateTypeLib
VarUI1FromDate
DllUnregisterServer
VarFormatNumber
GetActiveObject
VariantTimeToDosDateTime
DispGetParam
VarI2FromDisp
VarFormatCurrency
SafeArrayDestroy
SafeArrayCreateEx
VarR8FromCy
VariantChangeType
OleLoadPicture
LPSAFEARRAY_UserSize
VarCySub
VarDateFromUI8
OACreateTypeLib2
VarR4FromUI2
GetErrorInfo

gdi32

BitBlt
EngTransparentBlt
RemoveFontMemResourceEx
GdiGetSpoolMessage
EndPath
StretchBlt
EngReleaseSemaphore
CreateICW
CreateDIBPatternBrushPt
GdiAlphaBlend
NamedEscape
CopyEnhMetaFileW
FixBrushOrgEx
GetSystemPaletteUse
LineDDA
SetLayoutWidth
EnumFontsW
SelectClipRgn
GetLogColorSpaceA
PolyBezierTo
CreateBitmap
GetTextMetricsW
SetWinMetaFileBits
GdiDeleteSpoolFileHandle
GetBrushOrgEx
ClearBitmapAttributes
PolyTextOutA
LineTo
CreateFontW
CreateRoundRectRgn
SetRelAbs
GdiSetPixelFormat
CombineTransform
SetICMMode
StartFormPage
GdiGradientFill
GetBitmapDimensionEx
EnumFontFamiliesExA
EngEraseSurface
EngDeletePath
PolylineTo
EngGetCurrentCodePage
SetViewportOrgEx
GdiConvertFont
MirrorRgn
CreateFontIndirectW
GetTextColor
GetEnhMetaFilePixelFormat
GdiDrawStream
ExtEscape
ExtSelectClipRgn
CreateBrushIndirect
CreateCompatibleBitmap
UpdateICMRegKeyA
Chord
SelectObject
GdiRealizationInfo
GdiEndDocEMF
DPtoLP
AddFontResourceW
EngUnicodeToMultiByteN
GdiGetLocalDC
GetCharacterPlacementW
TextOutW
GetObjectW
UnrealizeObject
GdiTransparentBlt
GetCharWidthFloatA
CreateColorSpaceA
GdiConvertBitmapV5
GdiAddFontResourceW
PlayMetaFileRecord
FONTOBJ_pifi
GdiDeleteLocalDC
GdiFullscreenControl
GetColorSpace
GdiIsMetaPrintDC
CreatePolyPolygonRgn
GdiArtificialDecrementDriver
GetTextExtentPointW
CreateColorSpaceW

version

VerFindFileA
VerLanguageNameW
GetFileVersionInfoSizeW
VerFindFileW
GetFileVersionInfoSizeA
VerInstallFileW
VerQueryValueW
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoA
VerLanguageNameA

ws2_32

WSARecvDisconnect
WSAGetOverlappedResult
WSASetBlockingHook
WSAAsyncGetServByPort
WSADuplicateSocketA
WSACleanup
WSAGetServiceClassNameByClassIdW
gethostname
WSAEnumProtocolsW
WSAHtonl
WSASendDisconnect
WSAGetServiceClassInfoW
WSAAsyncGetProtoByName
WSANSPIoctl
WSASocketW
WSAStringToAddressW
WSAHtons
getsockopt
WSAIsBlocking
WSCUnInstallNameSpace
WSCInstallNameSpace
setsockopt
WSCWriteProviderOrder
WSAEnumProtocolsA
WPUCompleteOverlappedRequest
WSACancelAsyncRequest
WSAStringToAddressA
WSALookupServiceNextW
WSASend
WSAAsyncGetHostByAddr
recv
recvfrom
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
ioctlsocket
WSAGetServiceClassInfoA
WSALookupServiceBeginA
WSAEnumNameSpaceProvidersW
WSAConnect
WSAAccept
WSACancelBlockingCall
htonl
WSAAddressToStringW
WSAGetQOSByName
inet_addr
WSASetServiceW
getprotobynumber
WSAAddressToStringA
inet_ntoa
WSARecv
WSCInstallProvider
WSAInstallServiceClassA
getservbyport
getnameinfo
WSASetEvent
WSASetServiceA
WSAGetServiceClassNameByClassIdA
WSCDeinstallProvider
gethostbyaddr
WSAGetLastError
listen
closesocket
WSADuplicateSocketW
socket
getpeername
WSCWriteNameSpaceOrder
shutdown
freeaddrinfo
WSCEnableNSProvider

comctl32

FlatSB_SetScrollProp
MenuHelp
ImageList_SetDragCursorImage
ImageList_LoadImageA
DrawInsert
ImageList_GetFlags
ImageList_GetBkColor
DllGetVersion
ImageList_Copy
ImageList_Remove
ImageList_ReplaceIcon
FlatSB_GetScrollProp
ImageList_Create
ImageList_GetIcon
FlatSB_GetScrollRange
DrawStatusTextA
ImageList_DrawEx
ImageList_SetImageCount
ImageList_LoadImage
PropertySheetA
DrawStatusText
CreateMappedBitmap
ImageList_AddIcon
InitializeFlatSB
ImageList_GetImageRect
ImageList_LoadImageW
CreateStatusWindow
ImageList_Add
InitCommonControls
DrawStatusTextW
ImageList_SetFlags
ImageList_Replace
ImageList_DragLeave
ImageList_BeginDrag
CreatePropertySheetPageW
ImageList_GetImageInfo
ImageList_Duplicate
ImageList_DrawIndirect
CreateToolbar
LBItemFromPt
FlatSB_SetScrollPos
CreateToolbarEx
FlatSB_ShowScrollBar
UninitializeFlatSB

Exports

Exports

�� EC��͂�o�q�x�K?�xhĆ#��d��ڤ=;��NAt��k�Q��6yɓ��s8��Uv$`��Bz��Lx�`��<G{ ns��}m{)M�&iO��L�=mgӠ�g�S*��Bo�3E�@�+�程��e]t:��,K�7��ʺ��J?��*��4�8{r� «&��g{��J�Ś��E��4ۗ:�WK~`��xKQܱ�� M��ޥڼ�Lp��}�0��a Ff��i�k��ژ;S��J�ʌ��D�k�/��S��C. �'�&c��hcle�R��)|*��R�(�U��W�%*��f�`�� 1��`�!�EBv�7lu��R8rA��I�-��Fg�ח��|��Itݟ3��#PM��D��{�^�E��4:� MT'y�C�0��e[��G��f5M�e[�Hm�Q��"��h�F#oE$G�i� U`��9`p�<AED�>�+f��5f��W��()w�<��P.,!��o�c�H8�͔��gfCM[�t*��N&E��xf�t�q$L�\��h��J��B2�XMh{v-x��5�A>��|oP��4C<�C��b��3��z��&]s��=U�S�E��1��~c�9{+2�Y�*Vӌ��#N��u��6}).�r��B�*oj�.A�-�/��Z��4ѳp� �I��%��G5ld��.>1Ï0��c2Յr�G"։��|�ř8�wǺ�d~k��(̠?gm+=֓}=��6i^M��3��M4)��-�2��O�cr�S�?�xk�:O��y��~`(q��.F�R�w��i��(a�P:��O>^��X�G�VHZ$�ek��ظ��1'�W�1��Kp��*��U�v�s��MHz�A$��N]}<&[T��p�N�@&��Z��]��m՘�sH_Ki>� d�i8� E�8/�-�R��2Bb�i�E��]-i�( &��&�QoHF�h�ן��hU/N�h�D��BC��CcTe��[,�L�^�� s��&A�k��wl�ݓ�{[c.��AQ��Sy0�* 9�z�"��+��We��C}��p�GڛJ-WA��._Hi��E�� Sއ�)�ôoA�c%G��M䆱G��L�x5p٨g�vM)��X g�^\E1C<`�Ѧ�� \0�R-�y�0ٱB��W�o��|G-��(��{w��5��<�kDq�cG�BMǯmw��uC�w�9��К7�"�>{�!��&l�~��t��K� �d��"'r��U�?�M��Au��B�~�{;��\��!-��w��R�"��ER��O>�A�/��Y�X��'�򞾞1c�R�r��#��#/�s��O��WA�&�E��b��#�58�,��.?3n��Aڪ��d[�|;�Q��+�n�4��O��.Қ�\�F�➎��ǰEuH�`m��ȼ]��g��`��sS��4��!K�@��CAфn�� k� ��<FQ�G�2"`�� dH{՘$M��lo�(@!ON,��'��[� *�$.��Pb$��rv��ʗ�'ŮP��$l��<��a .u��Z��N_]Q��.�:� R:Z�XXgd�4c��e�2RG,.�8u�k.��7�� ^a>�cF��nDOZasp>�u+��x��{U1�-Cb��N4�V��&�W��r�S��Ժ�F��#'Ɩ��F�� gM�>~��ˁ�uVx>!}ȮESA�1�v�۳P|�Ȉq�_`g��<�0�V�4�b��<6t遚��+/� 4$��՝�a��^')6��KL=X/��GL�u��m��W$��&yS�>��}c�G)|�b�f�H��e�,B��jc�"�!Sm��V��֎ �w��i �;D˯��+�1q�8B��H�Ц*�zh�C�� aK��u7@��/b�� `�� 8�{:��{�U{��um@V��VSlQ�U�}3�:��ȩigF΃��ؠ��Ӏ��T>ѣ��~�s�_��3��{A��q{ C��v��)M�h��\ p�Lj�z;�hc��4�`��0�u��n��P��h�+�8߁� Ȏ&��6cțm�]�C��*/D6�Vջ��?�� t��%��hr��{��\��G��3�u�7��q(T\��3}�)<��]�䅛*X��J��`vT�jFp��T��c�a�*��,T}��G��3ȯn3��o��` ��o��ù��Lss��"�#�+��j%ɻm,#��ބ=*�v|��;�BeX��*�Ead�Ԕ��S��ʋ��2H�ѷ��~��&,V�:R�>�򙈕��<�\��g��z[�_r�P-��Ȃ7Jde ��لK�{k�$��:��J8�u�%zqF5��V��4�L25:�Cę+��y�� |��g�8�sVD��A�� Ť��eC�3��K'�A��N�B��7��]1��!��C/��N��e{b�U��R�My�u{N�G��@�~�d�np�*��t��'ւ',׶5|��ձ0�'o�y�.��}o��r��+��Zi�W��jL�Y��2�b+'��9�Г]�5-�Z�"9�9n�Xq��bG �g��.5��~��g��ly�+E�� Ф��SB[��T��{��bN�[`�eL@�p�#��b�O�(eq�� #��{�0-N�e��"0ہX��h�;�c#~t+[:�Y% H��x��Y0!�z]A��B��k��nk��,�;9O�+w$��b�-.��0 ��=@L6��Iݮ �5��e�

Sections

CODE
Size: 448KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

089d99d0f37aaef61c1e6b347c16af1d

Code Sign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6dCertificate

Key Usages

0e:d0:21:0f:d3:cf:ba:83:68:c6:ee:09:b4:b8:87:67Certificate

Extended Key Usages

Key Usages

83:4e:b4:64:2b:17:60:51:81:54:ca:3a:84:7b:c8:79:5f:50:bc:67Signer

Signature Validations

Verification

24/11/2022, 14:55 Valid: false

Headers

File Characteristics

Imports

user32

kernel32

comdlg32

oleaut32

gdi32

version

ws2_32

comctl32

Exports

Exports

Sections

CODE Size: 448KB - Virtual size: 452KB

DATA Size: 20KB - Virtual size: 28KB

.idata Size: 20KB - Virtual size: 20KB

.text0 Size: 14KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 4KB

.text1 Size: 74KB - Virtual size: 76KB

.reloc Size: 8KB - Virtual size: 12KB

.rsrc Size: 53KB - Virtual size: 53KB

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
Certificate

0e:d0:21:0f:d3:cf:ba:83:68:c6:ee:09:b4:b8:87:67
Certificate

83:4e:b4:64:2b:17:60:51:81:54:ca:3a:84:7b:c8:79:5f:50:bc:67
Signer

24/11/2022, 14:55
Valid: false

CODE
Size: 448KB - Virtual size: 452KB

DATA
Size: 20KB - Virtual size: 28KB

.idata
Size: 20KB - Virtual size: 20KB

.text0
Size: 14KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 4KB

.text1
Size: 74KB - Virtual size: 76KB

.reloc
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 53KB - Virtual size: 53KB