83c68f034378d21c0152ba0a356eeea0871b13f79ad8e963faf6630a67070bde

Sharing

Copy URL Twitter E-mail

General

Target

83c68f034378d21c0152ba0a356eeea0871b13f79ad8e963faf6630a67070bde
Size

147KB
MD5

6ed4469e4850f1f2fde3f4e91da8d1ec
SHA1

e40935476be846e99dead5b428711b647b469e22
SHA256

83c68f034378d21c0152ba0a356eeea0871b13f79ad8e963faf6630a67070bde
SHA512

f8833744ca3ef0f776e4bdf1138d73c24085f26ffdd573b26fd0a4ca19fc51d39e6dd5e99432fd9cd6e35bd2595bf4a4d99c14ea1cf45239145c7e60cef1c232
SSDEEP

3072:ZH74SbHOdZ/7j2i0PHQ4Irzw2BpiPWt9CIUF/f6oR1nsd:1Ej25Pkhp20gt/f6oR1nsd

Score

N/A

Malware Config

Signatures

Files

83c68f034378d21c0152ba0a356eeea0871b13f79ad8e963faf6630a67070bde
.dll windows x86

c92516c94aee1818c37af324893ad411

Code Sign

7e:40:ac:c4:67:20:a1:74:b4:e9:92:16:2b:56:8c:82
Certificate

Issuer

CN=466462882994456!49224!3236474!6673619754291782553!8128!59!6895156442!61938447!149927744127453!!9!162443874517!931338!175383224522!314472475832236355721553!3!9!784!233!12!!774279!74617556!1649461949715

Not Before

10/11/2012, 14:28

Not After

31/12/2039, 23:59

Subject

CN=466462882994456!49224!3236474!6673619754291782553!8128!59!6895156442!61938447!149927744127453!!9!162443874517!931338!175383224522!314472475832236355721553!3!9!784!233!12!!774279!74617556!1649461949715

Extended Key Usages

ExtKeyUsageCodeSigning

c5:13:f6:2a:f0:f6:21:bb:da:ee:fc:01:6e:56:4d:fb:7d:47:ab:d8
Signer

Actual PE Digest

c5:13:f6:2a:f0:f6:21:bb:da:ee:fc:01:6e:56:4d:fb:7d:47:ab:d8

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=466462882994456!49224!3236474!6673619754291782553!8128!59!6895156442!61938447!149927744127453!!9!162443874517!931338!175383224522!314472475832236355721553!3!9!784!233!12!!774279!74617556!1649461949715

28/11/2022, 11:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
CreateFileW
LoadLibraryA
GetSystemTimeAsFileTime

user32

LoadCursorA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c92516c94aee1818c37af324893ad411

Code Sign

7e:40:ac:c4:67:20:a1:74:b4:e9:92:16:2b:56:8c:82Certificate

Extended Key Usages

c5:13:f6:2a:f0:f6:21:bb:da:ee:fc:01:6e:56:4d:fb:7d:47:ab:d8Signer

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 438B

.data Size: 131KB - Virtual size: 130KB

.reloc Size: 1024B - Virtual size: 518B

7e:40:ac:c4:67:20:a1:74:b4:e9:92:16:2b:56:8c:82
Certificate

c5:13:f6:2a:f0:f6:21:bb:da:ee:fc:01:6e:56:4d:fb:7d:47:ab:d8
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 3KB - Virtual size: 3KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 438B

.data
Size: 131KB - Virtual size: 130KB

.reloc
Size: 1024B - Virtual size: 518B