cf51fe37573af0e8af46b4ba854577ddbd735e0da3951c05663fc4346811a175

Sharing

Copy URL Twitter E-mail

General

Target

cf51fe37573af0e8af46b4ba854577ddbd735e0da3951c05663fc4346811a175
Size

5.6MB
MD5

162f030e0e4cda9c855d1e77e45e0199
SHA1

bf62c5a9ef749feb1b720da4be7ef9b0f4f57bfa
SHA256

cf51fe37573af0e8af46b4ba854577ddbd735e0da3951c05663fc4346811a175
SHA512

f962e3c0a381ba1ed9ffa83a4440e0d911c0308da691e0ad0c55eaf60527a76871454eeca25a0457c18423e252f71c5b96a402661ac466667806061de9d2887b
SSDEEP

98304:FoK0+Opr9s7Y55aMl80bqt3Rk+g9XMFFPE:rFo9Rp9qt3Rk+SMFFc

Score

N/A

Malware Config

Signatures

Files

cf51fe37573af0e8af46b4ba854577ddbd735e0da3951c05663fc4346811a175
.exe windows x86

4eb87236526a25bf7eb21def6b517d88

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:07:11:43:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/05/2002, 00:55

Not After

25/11/2003, 01:05

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d5:ea:60:e7:c0:de:f9:b2:bc:44:d9:35:12:3b:8e:77:91:a5:89:a1
Signer

Actual PE Digest

d5:ea:60:e7:c0:de:f9:b2:bc:44:d9:35:12:3b:8e:77:91:a5:89:a1

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

28/11/2022, 11:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrW
UnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStartupInfoA
_lread
RaiseException
InterlockedExchange
GlobalHandle
OpenThread
CreateThread
CreateEventW
LocalLock
LocalUnlock
LocalReAlloc
GetDiskFreeSpaceA
GetFileInformationByHandle
CompareFileTime
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
GetSystemDirectoryW
GetSystemDefaultLCID
GetUserDefaultLCID
GetStringTypeExW
GetShortPathNameA
GetProfileStringW
GetProfileStringA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
FormatMessageW
FormatMessageA
MoveFileW
MoveFileA
CreateFileA
GetTempFileNameW
GetTempFileNameA
GetPrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileIntW
GetPrivateProfileIntA
GetProfileIntW
GetProfileIntA
FindResourceW
FindResourceA
CreateProcessW
CreateProcessA
LoadLibraryExW
LoadLibraryExA
CreateFileMappingW
CreateFileMappingA
IsValidCodePage
GetCurrentProcessId
SetEndOfFile
WaitForMultipleObjects
FindNextChangeNotification
FindCloseChangeNotification
FindFirstChangeNotificationW
FileTimeToLocalFileTime
FileTimeToSystemTime
EnumSystemLocalesA
GetUserDefaultLangID
GetFileTime
SetFileTime
LocalAlloc
LocalFree
CopyFileExW
GlobalReAlloc
GetLocalTime
GetSystemDefaultLangID
OpenFile
SetHandleCount
CreateFileW
GetFileType
DeviceIoControl
GetOEMCP
GetACP
WideCharToMultiByte
MultiByteToWideChar
WriteFile
SetFilePointer
ReadFile
SetUnhandledExceptionFilter
GetCommandLineW
AddAtomA
GetSystemTime
SystemTimeToFileTime
OpenEventW
SetEvent
OpenProcess
DuplicateHandle
GetSystemInfo
GetCurrentProcess
SetProcessWorkingSetSize
FreeLibrary
GlobalSize
IsDBCSLeadByteEx
GetFileSize
MapViewOfFile
UnmapViewOfFile
CloseHandle
OutputDebugStringA
GetModuleFileNameW
GetVersion
GetFileAttributesW
GetModuleHandleW
GetModuleHandleA
LoadLibraryW
LoadLibraryA
FindClose
Sleep
SetErrorMode
GlobalMemoryStatus
GlobalFlags
GetProcAddress
FreeResource
LoadResource
LockResource
SizeofResource
GetCurrentThreadId
GetTickCount
MulDiv
SetLastError
GetLastError
VirtualAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
_lwrite
GlobalFree

user32

GetQueueStatus
ValidateRect
GetMenuItemCount
RemoveMenu
SetMenu
DrawMenuBar
GetCursor
GetIconInfo
CopyImage
EnumWindows
WaitForInputIdle
GetWindowThreadProcessId
MessageBoxW
GetForegroundWindow
GetKeyboardLayoutList
GetClassNameW
GetClassNameA
GetMenuStringW
GetMenuStringA
GetDlgItemTextW
GetDlgItemTextA
DialogBoxIndirectParamW
DialogBoxIndirectParamA
CreateDialogIndirectParamW
CreateDialogIndirectParamA
CreateDialogParamW
CreateDialogParamA
CreateWindowExW
CreateWindowExA
RegisterClassW
RegisterClassA
PostMessageW
LoadImageW
LoadImageA
LoadIconA
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
GetClassLongA
GetPropW
GetPropA
SetPropW
SetPropA
AppendMenuW
AppendMenuA
InsertMenuW
InsertMenuA
LoadAcceleratorsW
LoadAcceleratorsA
VkKeyScanW
VkKeyScanA
RegisterClipboardFormatA
SetDlgItemTextW
SetDlgItemTextA
GetClassInfoW
GetClassInfoA
PostMessageA
RegisterWindowMessageA
GetWindowTextLengthW
GetWindowTextLengthA
IsDialogMessageW
IsDialogMessageA
SetWindowsHookExW
SetWindowsHookExA
SetWindowLongW
SetWindowLongA
GetWindowLongW
GetWindowLongA
CallWindowProcW
CallWindowProcA
DefWindowProcW
DefWindowProcA
PeekMessageW
PeekMessageA
DispatchMessageW
DispatchMessageA
OpenIcon
CharLowerA
DrawIconEx
CopyRect
OpenClipboard
CloseClipboard
GetMessagePos
CreateCaret
SetCaretPos
DestroyCaret
GetInputState
InSendMessage
FlashWindow
EnableScrollBar
GetWindowWord
SetWindowWord
CharToOemBuffA
RegisterClipboardFormatW
SetClipboardViewer
GetWindowPlacement
SetWindowPlacement
SetForegroundWindow
PostQuitMessage
GetCaretBlinkTime
SendNotifyMessageW
WaitMessage
MsgWaitForMultipleObjects
IsWindowUnicode
GetMessageW
GetMessageA
ChangeClipboardChain
BeginDeferWindowPos
EndDeferWindowPos
TranslateAcceleratorA
CopyAcceleratorTableW
IsZoomed
MonitorFromRect
DeferWindowPos
FrameRect
GetAsyncKeyState
DrawFrameControl
MapWindowPoints
ScrollWindow
IsWindow
UnionRect
GetSystemMenu
EnableMenuItem
TranslateMessage
SetRectEmpty
GetDlgCtrlID
IsWindowEnabled
GetUpdateRgn
RedrawWindow
GetWindowDC
GetScrollPos
SetScrollPos
GetScrollInfo
SetScrollInfo
IsRectEmpty
GetKeyboardLayout
SetScrollRange
SystemParametersInfoA
IsMenu
GetMenu
SetParent
CreateMenu
GetSubMenu
DestroyMenu
GetCapture
GetWindow
SetCursorPos
ReleaseCapture
SetCapture
ScrollWindowEx
PtInRect
MessageBeep
BringWindowToTop
GetScrollRange
GetDoubleClickTime
CheckDlgButton
wsprintfA
SetFocus
GetActiveWindow
GetLastActivePopup
SetActiveWindow
GetKeyState
CreatePopupMenu
InsertMenuItemW
DrawFocusRect
SendMessageW
SendMessageA
GetSystemMetrics
MoveWindow
DrawEdge
GetSysColor
MonitorFromWindow
GetMonitorInfoA
IsIconic
IsDlgButtonChecked
EnableWindow
GetFocus
EnumChildWindows
OffsetRect
ScreenToClient
GetCursorPos
IsChild
SetTimer
CallNextHookEx
IsWindowVisible
DrawIcon
WindowFromPoint
ShowWindow
SetWindowPos
SetWindowRgn
KillTimer
DestroyWindow
DestroyIcon
GetDesktopWindow
UnhookWindowsHookEx
GetParent
InvalidateRgn
GetUpdateRect
EqualRect
InvertRect
InvalidateRect
UpdateWindow
SetCursor
InflateRect
GetSysColorBrush
FillRect
ClientToScreen
GetWindowRect
EndDialog
BeginPaint
EndPaint
CheckRadioButton
GetDlgItem
GetClientRect
GetDC
ReleaseDC
IntersectRect
SetRect
LoadIconW

gdi32

SetMetaFileBitsEx
GetTextAlign
GdiComment
DeleteEnhMetaFile
CloseEnhMetaFile
SetEnhMetaFileBits
GetMetaFileBitsEx
GetEnhMetaFileBits
SelectClipPath
EndPath
BeginPath
SetPixelV
CreateFontIndirectA
SetTextAlign
CreatePen
GetMapMode
GetBkMode
Escape
SetAbortProc
EndDoc
AbortDoc
StartPage
EndPage
OffsetViewportOrgEx
CreateDCA
CreateDIBitmap
CreateDIBPatternBrushPt
GetPaletteEntries
GetNearestPaletteIndex
GetDIBits
GdiFlush
CreateDIBSection
ExtSelectClipRgn
PtVisible
GetFontData
TranslateCharsetInfo
CloseMetaFile
GetTextCharsetInfo
GetPixel
ExtFloodFill
CreateFontIndirectW
CreateFontA
CreateFontW
CreateMetaFileA
CreateMetaFileW
EnumFontFamiliesExA
EnumFontFamiliesExW
EnumFontFamiliesA
EnumFontFamiliesW
GetOutlineTextMetricsA
GetOutlineTextMetricsW
CreateEnhMetaFileA
CreateEnhMetaFileW
GetTextMetricsA
GetTextMetricsW
GetObjectA
GetObjectW
StartDocA
StrokePath
GetPath
GetClipRgn
SetRectRgn
PlayEnhMetaFileRecord
UnrealizeObject
GetEnhMetaFileHeader
GetRgnBox
FloodFill
SetICMMode
CreateBrushIndirect
CreatePenIndirect
ExtCreatePen
CreateBitmapIndirect
MaskBlt
SetWorldTransform
ModifyWorldTransform
SetGraphicsMode
GetWorldTransform
GetGraphicsMode
SetWinMetaFileBits
PlgBlt
GetNearestColor
SetBrushOrgEx
CreatePatternBrush
CreateSolidBrush
FrameRgn
OffsetRgn
CombineRgn
GetBkColor
GetTextColor
SetDIBitsToDevice
SetBkMode
StretchDIBits
SetTextCharacterExtra
LineTo
MoveToEx
Polygon
Polyline
ExcludeClipRect
IntersectClipRect
SetPixel
Rectangle
Ellipse
RoundRect
PolyPolygon
PatBlt
Chord
Pie
Arc
SaveDC
RestoreDC
ExtEscape
SelectPalette
GetObjectType
RealizePalette
PlayMetaFileRecord
DeleteObject
GetViewportOrgEx
DPtoLP
LPtoDP
EnumEnhMetaFile
EnumMetaFile
SetWindowOrgEx
SetWindowExtEx
DeleteDC
BitBlt
StretchBlt
SetMapMode
FillRgn
GetStockObject
SelectClipRgn
CreateRectRgn
CreateCompatibleBitmap
SetViewportOrgEx
SetViewportExtEx
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
SetTextColor
SetBkColor
SelectObject
CreateCompatibleDC
SetStretchBltMode
CreateHatchBrush
DeleteMetaFile
SetROP2
GetDeviceCaps
CreateRectRgnIndirect
CreatePolygonRgn
CreateRoundRectRgn
PlayMetaFile
GetCurrentObject
GetBrushOrgEx
CreateBitmap
GetClipBox

advapi32

RegOpenKeyExW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyA

ole32

CoRegisterMessageFilter
CoUnmarshalInterface
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
StgIsStorageFile
ReadClassStm
StgOpenStorage
OleSetMenuDescriptor
CreateDataAdviseHolder
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CoLockObjectExternal
CreateBindCtx
CoCreateGuid
CLSIDFromProgID
CoInitialize
CoUninitialize
ProgIDFromCLSID
CoTaskMemFree
CoCreateInstance
OleIsCurrentClipboard
OleSetClipboard
OleFlushClipboard
OleGetClipboard
CoMarshalInterface
CoFreeUnusedLibraries
OleSave
StgCreateDocfile
ReleaseStgMedium
CreateStreamOnHGlobal
CoGetMalloc
OleIsRunning
GetHGlobalFromILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoIsOle1Class
MkParseDisplayName
StringFromCLSID
CoTreatAsClass
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
ReadFmtUserTypeStg
ReadClassStg
CreateGenericComposite
CreateItemMoniker
CreateFileMoniker
OleQueryCreateFromData
GetConvertStg
OleCreateMenuDescriptor
OleCreateDefaultHandler
OleLoad
OleRun
OleDestroyMenuDescriptor
OleSetContainedObject
OleNoteObjectVisible
OleConvertOLESTREAMToIStorage
OleCreateFromData
OleCreateStaticFromData
OleCreateLinkFromData
OleCreate
CLSIDFromString
OleCreateFromFile
OleCreateLinkToFile
CreateOleAdviseHolder
OleUninitialize
OleBuildVersion
OleInitialize
CoGetCurrentProcess
WriteClassStm
StringFromGUID2

msimg32

TransparentBlt

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_controlfp
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_initterm
wcstol
memmove
_setjmp3
swscanf
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
wcslen
wcsrchr
wcstok
wcsncpy
_itoa
_except_handler3
wcscmp
iswascii
longjmp
_wsplitpath
wcsstr
_snwprintf
_getdiskfree
_vsnwprintf
_vsnprintf
_wcsupr
ceil
qsort
_waccess
wcstoul
iswspace
iswcntrl
iswpunct
towupper
iswdigit
iswxdigit
wcschr
strchr
strtol
bsearch
strncpy
sprintf
strncmp
swprintf
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 199KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4eb87236526a25bf7eb21def6b517d88

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9dCertificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6Certificate

Extended Key Usages

Key Usages

61:07:11:43:00:00:00:00:00:34Certificate

Extended Key Usages

Key Usages

d5:ea:60:e7:c0:de:f9:b2:bc:44:d9:35:12:3b:8e:77:91:a5:89:a1Signer

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

msimg32

msvcrt

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.data Size: 199KB - Virtual size: 257KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

61:07:11:43:00:00:00:00:00:34
Certificate

d5:ea:60:e7:c0:de:f9:b2:bc:44:d9:35:12:3b:8e:77:91:a5:89:a1
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 4.0MB - Virtual size: 4.0MB

.data
Size: 199KB - Virtual size: 257KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB