c5d7c2cd32a88cc439f00b7f8f5974b0377b9102affa1081fcff9b700a624bd5

Sharing

Copy URL Twitter E-mail

General

Target

c5d7c2cd32a88cc439f00b7f8f5974b0377b9102affa1081fcff9b700a624bd5
Size

65KB
MD5

484badca7a6a5066bc4ea2a093431ba5
SHA1

2e19532ce8a7710c957aff48e174748cd7353ae0
SHA256

c5d7c2cd32a88cc439f00b7f8f5974b0377b9102affa1081fcff9b700a624bd5
SHA512

c020e8d528d660857c6863ad6da09a88bf5fdd648bac33a9d7dd2d9aaf3966ace4bb32f09841f2115d983d0258086724a335209020fd7a0e2a4dad2c41c393dc
SSDEEP

768:vPwgoirntLGMZlUwNkEXa57Dqt/pfb8soXBcVjpq6npV0p/qFvUl35UhH:vPnDZw57e5dXoXs46npV0pCFvUl3KhH

Score

N/A

Malware Config

Signatures

Files

c5d7c2cd32a88cc439f00b7f8f5974b0377b9102affa1081fcff9b700a624bd5
.dll regsvr32 windows x86

bee5b0052adfd35e1dcba26160913eeb

Code Sign

56:0b:88:8f:8e:2d:8e:a7:4d:27:59:e4:f4:4b:91:28
Certificate

Issuer

CN=Microsoft Windows Verification PCA

Not Before

09/05/2001, 16:00

Not After

09/05/2021, 16:00

Subject

CN=Microsoft Windows

c5:ca:c4:a4:72:4e:21:d2:02:a3:a0:39:d4:6b:a5:de:6f:d8:d7:c6
Signer

Actual PE Digest

c5:ca:c4:a4:72:4e:21:d2:02:a3:a0:39:d4:6b:a5:de:6f:d8:d7:c6

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows

28/11/2022, 11:52
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetVersion
SetLastError
InterlockedIncrement
FreeLibrary
GetModuleHandleA
GetLastError
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CopyFileW

user32

PostThreadMessageW

ole32

CoCreateGuid

msvcrt

sprintf
_adjust_fdiv
_initterm
_onexit
strcpy
??2@YAPAXI@Z
strlen
memcpy
memset
_snwprintf
wcslen
_wcsicmp
time
__dllonexit
_stricmp
_wcsupr
memcmp
wcscpy
wcscat
wcsrchr
__CxxFrameHandler
malloc
free
rand
srand
strchr
swprintf
strrchr
atoi
strtoul
strstr
_purecall
wcstoul
printf
vsprintf
memmove

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bee5b0052adfd35e1dcba26160913eeb

Code Sign

56:0b:88:8f:8e:2d:8e:a7:4d:27:59:e4:f4:4b:91:28Certificate

c5:ca:c4:a4:72:4e:21:d2:02:a3:a0:39:d4:6b:a5:de:6f:d8:d7:c6Signer

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

ole32

msvcrt

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 4KB - Virtual size: 3KB

56:0b:88:8f:8e:2d:8e:a7:4d:27:59:e4:f4:4b:91:28
Certificate

c5:ca:c4:a4:72:4e:21:d2:02:a3:a0:39:d4:6b:a5:de:6f:d8:d7:c6
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 4KB - Virtual size: 3KB