49e9037859fb9c820e2454390573c004d7691e68733d2c2089db847a2ff2627c

Sharing

Copy URL Twitter E-mail

General

Target

49e9037859fb9c820e2454390573c004d7691e68733d2c2089db847a2ff2627c
Size

144KB
MD5

0a282664e53ee7c9868b943af75cbb40
SHA1

5be670c247a1d9d6c900e760190fa886d1138c96
SHA256

49e9037859fb9c820e2454390573c004d7691e68733d2c2089db847a2ff2627c
SHA512

02a3dd46a1b2d511d1174eb88c35aa56875869335a6b942e689c8577025a8b1bca28e7c34e6f15c7ccb60a4e27bf1ed4d7b9766173ec66c552a23896cc9d26dc
SSDEEP

1536:5d/339bkIz19BzOiCfKuuIL+yy00/K1KZs2pbKH1HsJXfAHJj64FbrGz0EB/Lr+Y:TnFkIrdILg/KEZsuJwj6kKH/L0atTtb5

Score

N/A

Malware Config

Signatures

Files

49e9037859fb9c820e2454390573c004d7691e68733d2c2089db847a2ff2627c
.exe windows x86

b4307ea69dfa2696fee6f00c76f7a264

Code Sign

29:27:13:26:87:86:88:78:bd:e0:73:54:4a:17:32:2b
Certificate

Issuer

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ffggfgfgfgfgfggfggffg

Not Before

27/11/2012, 05:56

Not After

31/12/2039, 23:59

Subject

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ffggfgfgfgfgfggfggffg

Extended Key Usages

ExtKeyUsageCodeSigning

38:97:52:59:ae:bd:b0:51:79:64:2b:dc:8c:f7:8c:ac:0d:5e:72:c1
Signer

Actual PE Digest

38:97:52:59:ae:bd:b0:51:79:64:2b:dc:8c:f7:8c:ac:0d:5e:72:c1

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

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ffggfgfgfgfgfggfggffg

28/11/2022, 11:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
VirtualAlloc
GetCommandLineA
ExitProcess

user32

BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
LoadIconA

advapi32

RegOpenKeyW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4307ea69dfa2696fee6f00c76f7a264

Code Sign

29:27:13:26:87:86:88:78:bd:e0:73:54:4a:17:32:2bCertificate

Extended Key Usages

38:97:52:59:ae:bd:b0:51:79:64:2b:dc:8c:f7:8c:ac:0d:5e:72:c1Signer

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 103KB - Virtual size: 103KB

.data Size: 1024B - Virtual size: 920B

.rsrc Size: 27KB - Virtual size: 26KB

.reloc Size: 512B - Virtual size: 176B

29:27:13:26:87:86:88:78:bd:e0:73:54:4a:17:32:2b
Certificate

38:97:52:59:ae:bd:b0:51:79:64:2b:dc:8c:f7:8c:ac:0d:5e:72:c1
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 103KB - Virtual size: 103KB

.data
Size: 1024B - Virtual size: 920B

.rsrc
Size: 27KB - Virtual size: 26KB

.reloc
Size: 512B - Virtual size: 176B