99be025687c29810a55bebe6004496564dd419f02d7d2075e584ee4faa9ec274

Sharing

Copy URL Twitter E-mail

General

Target

99be025687c29810a55bebe6004496564dd419f02d7d2075e584ee4faa9ec274
Size

225KB
MD5

4c728d26ad7672a41d3b821f5d1ffb8f
SHA1

a20de26bd7f5e5cf9517d4919debfad1924e935c
SHA256

99be025687c29810a55bebe6004496564dd419f02d7d2075e584ee4faa9ec274
SHA512

ca687dbef907f29e618bb43e8644cde165e2634f80c000d43207e210b8942eb593f98267f2cf3bba3c68e9290439c9c05da51802266ff4a250ddbbf97e89d172
SSDEEP

3072:ZH+wS3QF5BoNFmkLLeHUfJD4QU2d9ageObp67NOAoFVSk+jLSgzLzrx:ZewV5BS4yLeHYJrUKqOs8AomkAx

Score

N/A

Malware Config

Signatures

Files

99be025687c29810a55bebe6004496564dd419f02d7d2075e584ee4faa9ec274
.exe windows x86

4e8691b98289f9c7882dfb93d963e082

Code Sign

20:d6:8a:b8:4b:bd:5a:a3:46:dd:30:da:e5:63:8a:d0
Certificate

Issuer

CN=13851411183279965265433867938625386264168353915425685769762552254531191374599742962368752958795457383866219559976343785915391975151839278129622663948845251

Not Before

29/01/2013, 16:42

Not After

31/12/2039, 23:59

Subject

CN=13851411183279965265433867938625386264168353915425685769762552254531191374599742962368752958795457383866219559976343785915391975151839278129622663948845251

Extended Key Usages

ExtKeyUsageCodeSigning

14:37:eb:c4:32:da:36:99:78:87:c0:ab:ff:7d:c9:a2:89:1c:28:50
Signer

Actual PE Digest

14:37:eb:c4:32:da:36:99:78:87:c0:ab:ff:7d:c9:a2:89:1c:28:50

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=13851411183279965265433867938625386264168353915425685769762552254531191374599742962368752958795457383866219559976343785915391975151839278129622663948845251

28/11/2022, 11:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
DeviceIoControl
GetDriveTypeW
CloseHandle
GetModuleHandleA
GetStartupInfoA
ReadFile
VirtualAllocEx
GetCommandLineW
GetLastError

user32

LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
LoadCursorA
RegisterClassExA
UpdateWindow
ShowWindow

gdi32

GetStockObject

advapi32

RegOpenKeyW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e8691b98289f9c7882dfb93d963e082

Code Sign

20:d6:8a:b8:4b:bd:5a:a3:46:dd:30:da:e5:63:8a:d0Certificate

Extended Key Usages

14:37:eb:c4:32:da:36:99:78:87:c0:ab:ff:7d:c9:a2:89:1c:28:50Signer

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 13KB - Virtual size: 13KB

.text2 Size: 512B - Virtual size: 100B

.data Size: 31KB - Virtual size: 31KB

.rdata3 Size: 512B - Virtual size: 100B

.rdata2 Size: 172KB - Virtual size: 171KB

.rsrc Size: 1024B - Virtual size: 141KB

20:d6:8a:b8:4b:bd:5a:a3:46:dd:30:da:e5:63:8a:d0
Certificate

14:37:eb:c4:32:da:36:99:78:87:c0:ab:ff:7d:c9:a2:89:1c:28:50
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 13KB - Virtual size: 13KB

.text2
Size: 512B - Virtual size: 100B

.data
Size: 31KB - Virtual size: 31KB

.rdata3
Size: 512B - Virtual size: 100B

.rdata2
Size: 172KB - Virtual size: 171KB

.rsrc
Size: 1024B - Virtual size: 141KB