General

Malware Config

Signatures

Files

• 1c329a3284737d400b6d2ae5f926ba51640cf8c60e5ca888d8352ada5d77aad1

  .exe windows x86

  4371263e2a17a2dbc2cb11a22de74257

  
  

  Code Sign

  3e:20:4d:67:dc:00:dd:64:bf:f5:0d:c6:c6:90:c8:78

  Certificate

  Issuer

  CN=WIXOIOBJICOJQHDJWN

  Not Before

  29-05-2019 16:06

  Not After

  31-12-2039 23:59

  Subject

  CN=WIXOIOBJICOJQHDJWN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b

  Certificate

  Issuer

  CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

  Not Before

  07-06-2005 08:09

  Not After

  30-05-2020 10:48

  Subject

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19

  Certificate

  Issuer

  CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

  Not Before

  27-04-2011 00:00

  Not After

  30-05-2020 10:48

  Subject

  CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49

  Certificate

  Issuer

  CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  02-05-2019 00:00

  Not After

  30-05-2020 10:48

  Subject

  CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  5b:33:73:17:80:73:68:18:04:27:dc:90:23:e2:81:12:68:73:e3:56

  Signer

  Actual PE Digest

  5b:33:73:17:80:73:68:18:04:27:dc:90:23:e2:81:12:68:73:e3:56

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=WIXOIOBJICOJQHDJWN

  29-05-2019 21:15

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualAllocEx

  GetModuleHandleW

  GetStartupInfoA

  GetModuleHandleA

  user32

  GetDesktopWindow

  GetClipboardOwner

  GetThreadDesktop

  GetCaretBlinkTime

  DestroyWindow

  GetKeyState

  IsIconic

  GetTopWindow

  GetSysColor

  GetListBoxInfo

  IsWindowVisible

  MessageBoxW

  PostThreadMessageA

  TranslateMessage

  SetTimer

  GetMessageA

  PeekMessageW

  DispatchMessageW

  MsgWaitForMultipleObjects

  CharNextA

  KillTimer

  InflateRect

  GetDlgItem

  OffsetRect

  BeginPaint

  EndPaint

  UnhookWindowsHookEx

  SetWindowsHookExW

  CallNextHookEx

  GetActiveWindow

  IsWindow

  LoadStringW

  DrawTextW

  IsDialogMessageW

  CreatePopupMenu

  AppendMenuW

  ClientToScreen

  TrackPopupMenu

  DestroyMenu

  SetDlgItemInt

  GetScrollPos

  ScrollWindow

  SetScrollPos

  SetScrollRange

  GetClassInfoW

  GetDlgItemInt

  GetWindowRect

  SetWindowPos

  SetDlgItemTextA

  GetDlgItemTextA

  CreateDialogParamW

  BeginDeferWindowPos

  FlashWindow

  FrameRect

  GetWindowTextA

  SetWindowTextA

  GetDlgItemTextW

  CallWindowProcW

  SetCapture

  PtInRect

  SetCursor

  ReleaseCapture

  PostMessageW

  IsWindowEnabled

  IsDlgButtonChecked

  CheckRadioButton

  EqualRect

  EndDeferWindowPos

  RegisterClipboardFormatW

  OpenClipboard

  EmptyClipboard

  SetClipboardData

  CloseClipboard

  wsprintfA

  ShowWindow

  GetWindowPlacement

  GetClassNameW

  MessageBeep

  DrawFocusRect

  FillRect

  MoveWindow

  GetSystemMetrics

  CreateWindowExW

  SetWindowLongW

  GetDC

  ReleaseDC

  GetWindowLongW

  GetClientRect

  DefWindowProcW

  GetDlgCtrlID

  UnregisterClassW

  LoadCursorW

  RegisterClassW

  GetFocus

  EnableWindow

  GetWindowTextW

  InvalidateRect

  UpdateWindow

  EndDialog

  IsChild

  GetScrollInfo

  LockWindowUpdate

  GetSubMenu

  GetMessagePos

  LoadIconW

  BringWindowToTop

  RedrawWindow

  WinHelpW

  ScreenToClient

  GetMenuStringW

  InvertRect

  GetCursorPos

  GetMenuState

  LoadMenuW

  GetSystemMenu

  GetCursor

  CheckMenuItem

  EnableMenuItem

  GetUpdateRect

  IntersectRect

  EnumChildWindows

  OemToCharW

  wsprintfW

  SetWindowTextW

  SetFocus

  SetCursorPos

  DestroyCursor

  GetCapture

  SendMessageW

  GetParent

  IsClipboardFormatAvailable

  DialogBoxParamW

  GetClipboardData

  SetDlgItemTextW

  CheckDlgButton

  CopyRect

  OemToCharA

  gdi32

  GetTextAlign

  GetDCPenColor

  CloseMetaFile

  CreateMetaFileA

  FillPath

  GetFontLanguageInfo

  GetSystemPaletteUse

  GetLayout

  advapi32

  RegOpenKeyA

  RegQueryValueExA

  msvcrt

  _except_handler3

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  exit

  _XcptFilter

  _exit

  _onexit

  __dllonexit

  _controlfp

  Sections

  .text

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 77KB - Virtual size: 77KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 41KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ