0fe4a825870ec21a7f2797bbce07995fed62fbb8780a5ec4e083be993b7fd290

Sharing

Copy URL

Twitter E-mail

General

Target

0fe4a825870ec21a7f2797bbce07995fed62fbb8780a5ec4e083be993b7fd290
Size

40KB
MD5

d71ebcc9e979adff7d2e9c3694400600
SHA1

31fb7503e0918a930b834b67685b61a065aaa7fa
SHA256

0fe4a825870ec21a7f2797bbce07995fed62fbb8780a5ec4e083be993b7fd290
SHA512

d1d1df2ab7acd0bb8a30b28b44888c66b97924ee173a85fea6a3471d3961f09881e22264996b59c7aea93e2e5067364444338baaa456aeb9b218f069e13c518a
SSDEEP

768:v3OODP9CWa9wxZxqTwyy0sm6V9uvGzIfJt0iph07VfB2T+vZ:v3OODgp+YbXGtMfJ++GVfI2

Score

N/A

Malware Config

Signatures

Files

0fe4a825870ec21a7f2797bbce07995fed62fbb8780a5ec4e083be993b7fd290
.exe windows x86

40bf1d60815be12e627384a9148fc1da

Code Sign

36:b0:fd:e6:5c:cd:34:b0:40:8b:3d:a6:44:93:a5:32
Certificate

Issuer

CN=15n

Not Before

07-05-2012 04:44

Not After

31-12-2039 23:59

Subject

CN=15n

Extended Key Usages

ExtKeyUsageCodeSigning

5d:26:47:23:60:24:86:f5:9c:ad:07:39:26:13:1e:44:59:6a:4b:66
Signer

Actual PE Digest

5d:26:47:23:60:24:86:f5:9c:ad:07:39:26:13:1e:44:59:6a:4b:66

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=15n

24-11-2022 14:54
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetWindowsDirectoryA
AddAtomA
BindIoCompletionCallback
CallNamedPipeW
CreateFileA
CreateFileMappingA
DeleteTimerQueue
FindNextFileA
FreeResource
GetConsoleAliasExesW
GetConsoleAliasesA
GetLocaleInfoW
GetProcAddress
GetThreadContext
GlobalGetAtomNameA
InterlockedIncrement
Module32First
PeekConsoleInputA
ReadConsoleA
SetCommState
SetProcessPriorityBoost
WaitForDebugEvent
WaitForSingleObject
WideCharToMultiByte
WriteProfileStringW
_lwrite
GetWindowsDirectoryW
lstrcatW
CreateFileW
GetPrivateProfileSectionNamesW
VirtualAllocEx

user32

ShowCursor
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
RegisterClassExW

gdi32

LineTo

advapi32

RegCloseKey
RegOpenKeyW

shlwapi

UrlEscapeW
UrlIsNoHistoryW
UrlIsOpaqueW
UrlUnescapeW
wvnsprintfA
UrlGetLocationA
UrlIsNoHistoryA
AssocCreate
AssocQueryStringByKeyA
ChrCmpIA
ChrCmpIW
ColorRGBToHLS
HashData
IntlStrEqWorkerA
IntlStrEqWorkerW
PathAddBackslashA
PathAddBackslashW
PathAppendA
PathCanonicalizeA
PathCombineA
PathCommonPrefixW
PathCompactPathExA
PathCompactPathExW
PathCreateFromUrlA
PathCreateFromUrlW
PathFileExistsW
PathFindExtensionA
PathFindExtensionW
PathFindNextComponentA
PathFindNextComponentW
PathFindOnPathA
PathFindOnPathW
PathFindSuffixArrayW
PathGetArgsA
PathGetCharTypeA
PathGetDriveNumberW
PathIsContentTypeA
PathIsDirectoryA
PathIsDirectoryEmptyW
PathIsLFNFileSpecA
PathIsLFNFileSpecW
PathIsRelativeW
PathIsUNCA
PathIsUNCServerA
PathIsUNCServerShareA
PathIsUNCServerShareW
PathIsUNCW
PathIsURLW
PathMatchSpecA
PathQuoteSpacesA
PathQuoteSpacesW
PathRelativePathToW
PathRemoveBlanksA
PathRemoveBlanksW
PathRemoveExtensionA
PathRemoveExtensionW
PathSearchAndQualifyW
PathSetDlgItemPathA
PathSetDlgItemPathW
PathStripPathA
PathStripToRootA
PathUnExpandEnvStringsA
PathUndecorateW
PathUnmakeSystemFolderA
PathUnmakeSystemFolderW
PathUnquoteSpacesA
SHDeleteEmptyKeyW
SHDeleteValueW
SHGetInverseCMAP
SHIsLowMemoryMachine
SHOpenRegStream2A
SHOpenRegStreamA
SHOpenRegStreamW
SHQueryInfoKeyW
SHQueryValueExW
SHRegCloseUSKey
SHRegCreateUSKeyW
SHRegDeleteEmptyUSKeyA
SHRegDeleteUSValueA
SHRegEnumUSKeyA
SHRegEnumUSValueW
SHRegGetBoolUSValueA
SHRegGetBoolUSValueW
SHRegGetPathA
SHRegOpenUSKeyW
SHRegQueryInfoUSKeyA
SHRegQueryInfoUSKeyW
SHRegQueryUSValueA
SHRegQueryUSValueW
SHRegSetPathA
SHRegSetUSValueA
SHRegSetUSValueW
SHSetThreadRef
StrCSpnA
StrCatBuffA
StrCatBuffW
StrCatW
StrChrA
StrCmpIW
StrCmpNIA
StrCmpNIW
StrCmpNW
StrFormatByteSize64A
StrFormatKBSizeA
StrPBrkA
StrRChrIW
StrRStrIW
StrRetToStrW
StrStrA
StrStrIW
UrlApplySchemeW
UrlCombineW
UrlCreateFromPathW
UrlEscapeA

Sections

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40bf1d60815be12e627384a9148fc1da

Code Sign

36:b0:fd:e6:5c:cd:34:b0:40:8b:3d:a6:44:93:a5:32Certificate

Extended Key Usages

5d:26:47:23:60:24:86:f5:9c:ad:07:39:26:13:1e:44:59:6a:4b:66Signer

Signature Validations

Verification

24-11-2022 14:54 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

Sections

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 27KB - Virtual size: 26KB

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 3KB - Virtual size: 2KB

36:b0:fd:e6:5c:cd:34:b0:40:8b:3d:a6:44:93:a5:32
Certificate

5d:26:47:23:60:24:86:f5:9c:ad:07:39:26:13:1e:44:59:6a:4b:66
Signer

24-11-2022 14:54
Valid: false

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 27KB - Virtual size: 26KB

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 3KB - Virtual size: 2KB