af3519c9db9356b3878a88db881866347f5313f66bc19fb16c1b792fd5a37043

Sharing

Copy URL Twitter E-mail

General

Target

af3519c9db9356b3878a88db881866347f5313f66bc19fb16c1b792fd5a37043
Size

194KB
MD5

648b9256454643e44fce9401ce3042bf
SHA1

6479cbdea1a401e579d32cff10aeeef50db24a69
SHA256

af3519c9db9356b3878a88db881866347f5313f66bc19fb16c1b792fd5a37043
SHA512

9db5119333b1916584b4e1f98dd4528e6a9a889127ff1f726566ab4411b239214002caf1e75eedde832abd7296e7c47ba1c71c708e6251fa1c98c02878c0912c
SSDEEP

6144:/9Xuji6hAheEsKL0PUmXruVSGGAVDFu3FZu:5reEpgGdVDIg

Score

N/A

Malware Config

Signatures

Files

af3519c9db9356b3878a88db881866347f5313f66bc19fb16c1b792fd5a37043
.exe windows x86

d38ccfd52cf9a9b4afcb82d4b83e8653

Code Sign

01:00:00:00:00:00:fe:76:05:a8:f6
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

19/08/2004, 07:49

Not After

19/08/2005, 07:49

Subject

CN=SpeedProject - SWE Sven Ritter,O=SWE Sven Ritter,C=DE,1.2.840.113549.1.9.1=#0c14696e666f40737065656470726f6a6563742e6465

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment
KeyUsageDataEncipherment

02:00:00:00:00:00:d6:78:b7:94:05
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

01/09/1998, 12:00

Not After

28/01/2014, 12:00

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:00:f0:76:03:de:10
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 12:00

Not After

28/01/2009, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

04:00:00:00:00:00:fa:3d:ee:f0:51
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 09:00

Not After

28/01/2009, 11:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b8:2e:8e:e2:ed:1a:c1:29:12:6d:72:68:d4:a9:92:13:ee:72:07:d5
Signer

Actual PE Digest

b8:2e:8e:e2:ed:1a:c1:29:12:6d:72:68:d4:a9:92:13:ee:72:07:d5

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SpeedProject - SWE Sven Ritter,O=SWE Sven Ritter,C=DE,1.2.840.113549.1.9.1=#0c14696e666f40737065656470726f6a6563742e6465

24/11/2022, 14:54
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
WriteFile
CreateFileA
CloseHandle
DeleteFileA
SetFileAttributesA
GetFileAttributesA
SetFileTime
CreateDirectoryA
RemoveDirectoryA
lstrcpynA
GetVersionExA
GetFileSize
GetModuleHandleA
WideCharToMultiByte
lstrcmpiA
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
MulDiv
GetTempFileNameA
GlobalUnlock
GlobalLock
GlobalAlloc
FormatMessageA
FreeLibrary
LoadLibraryA
GetModuleFileNameA
SetFilePointer
GetStartupInfoA
GetLastError
GetSystemTime
FindNextFileA
lstrcpyA
GetTempPathA
DosDateTimeToFileTime
FindFirstFileA
FindClose
LocalFileTimeToFileTime
CompareFileTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
lstrcatA
lstrcmpA
lstrlenA

user32

LoadAcceleratorsA
ShowWindow
GetMessageA
PeekMessageA
TranslateAcceleratorA
CharUpperA
GetDesktopWindow
SetWindowPos
GetWindowRect
UpdateWindow
CharPrevA
CharNextA
OemToCharA
wsprintfA
TranslateMessage
DispatchMessageA
CheckDlgButton
EnableMenuItem
RegisterClassA
GetSysColor
GetClientRect
FillRect
SetFocus
GetWindowPlacement
PostQuitMessage
GetSystemMetrics
SetWindowPlacement
DefWindowProcA
CheckMenuRadioItem
CheckMenuItem
DestroyWindow
SetWindowTextA
GetCursorPos
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyMenu
GetMenu
GetWindowLongA
SetWindowLongA
CreateWindowExA
SendDlgItemMessageA
LoadIconA
SetDlgItemTextA
GetDlgItemTextA
DialogBoxParamA
EndDialog
GetActiveWindow
IsWindowVisible
MessageBoxA
LoadCursorA
SetCursor
PostMessageA
GetAsyncKeyState
MessageBeep
IsWindow
SendMessageA
LoadStringA
MoveWindow

gdi32

CreatePen
CreateSolidBrush
SelectObject
DeleteObject
LineTo
MoveToEx

comdlg32

GetOpenFileNameA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetFileInfoA
ShellExecuteExA

ole32

DoDragDrop
OleUninitialize
OleInitialize

comctl32

ord6
ord2
ord17

msvcrt

strcat
strcpy
strlen
strcmp
memcmp
strrchr
abs
_ftol
log
fabs
__CxxFrameHandler
??2@YAPAXI@Z
memcpy
strchr
strstr
_ltoa
??3@YAXPAX@Z
malloc
memset
memmove
free
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_except_handler3
_controlfp
__set_app_type

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d38ccfd52cf9a9b4afcb82d4b83e8653

Code Sign

01:00:00:00:00:00:fe:76:05:a8:f6Certificate

Key Usages

02:00:00:00:00:00:d6:78:b7:94:05Certificate

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:00:f0:76:03:de:10Certificate

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:00:fa:3d:ee:f0:51Certificate

Key Usages

b8:2e:8e:e2:ed:1a:c1:29:12:6d:72:68:d4:a9:92:13:ee:72:07:d5Signer

Signature Validations

Verification

24/11/2022, 14:54 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

comctl32

msvcrt

Sections

.text Size: 108KB - Virtual size: 104KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 4.0MB

.rsrc Size: 52KB - Virtual size: 49KB

01:00:00:00:00:00:fe:76:05:a8:f6
Certificate

02:00:00:00:00:00:d6:78:b7:94:05
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

04:00:00:00:00:00:f0:76:03:de:10
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

04:00:00:00:00:00:fa:3d:ee:f0:51
Certificate

b8:2e:8e:e2:ed:1a:c1:29:12:6d:72:68:d4:a9:92:13:ee:72:07:d5
Signer

24/11/2022, 14:54
Valid: false

.text
Size: 108KB - Virtual size: 104KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 4.0MB

.rsrc
Size: 52KB - Virtual size: 49KB