77d821aa11a3b14f316b7c32d6615f72430525ddc7794a02d120d5c1e9906f95

Sharing

Copy URL Twitter E-mail

General

Target

77d821aa11a3b14f316b7c32d6615f72430525ddc7794a02d120d5c1e9906f95
Size

252KB
MD5

4d01cab6cabf3544e0f0b5adc0e1397a
SHA1

9c60c63c6b1b369102995b1dfcb94613885ca35d
SHA256

77d821aa11a3b14f316b7c32d6615f72430525ddc7794a02d120d5c1e9906f95
SHA512

e906186cc0638be47ef2b0703737631bef54db53f4e8e5c20c1b86f993a03823fee6036cc94d42513adf1e1bcb75208036853f81280199f2b96ed9f79fd7070b
SSDEEP

6144:egF5A22z44Em6Tvr9mP/qB8La0Ea0heJQ2fJ:Nfw44Emqro3qB89whODR

Score

N/A

Malware Config

Signatures

Files

77d821aa11a3b14f316b7c32d6615f72430525ddc7794a02d120d5c1e9906f95
.exe windows x86

21730dedc232594d6b39687813be40f5

Code Sign

61:c0:d3:87:e2:e0:6c:71:b2:e1:67:73:89:26:3c:c3
Certificate

Issuer

CN=43295488369582562982879347975797182957616613954897628712567719676269379277648282235382127796164228586897662956754592538466772355314894664172276124956299394

Not Before

17/01/2013, 16:36

Not After

31/12/2039, 23:59

Subject

CN=43295488369582562982879347975797182957616613954897628712567719676269379277648282235382127796164228586897662956754592538466772355314894664172276124956299394

Extended Key Usages

ExtKeyUsageCodeSigning

f9:5c:46:2e:9f:0e:63:3f:ad:bd:27:50:c7:fd:05:ab:ba:2e:c5:5f
Signer

Actual PE Digest

f9:5c:46:2e:9f:0e:63:3f:ad:bd:27:50:c7:fd:05:ab:ba:2e:c5:5f

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=43295488369582562982879347975797182957616613954897628712567719676269379277648282235382127796164228586897662956754592538466772355314894664172276124956299394

28/11/2022, 11:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

ExitWindowsEx
LoadStringA
MessageBoxA
CharNextA
CharPrevA

gdi32

GetStockObject

advapi32

RegCloseKey
RegOpenKeyW

shell32

SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SHGetSpecialFolderLocation

ole32

CoInitialize
CoUninitialize
CoCreateInstance

shlwapi

PathRemoveFileSpecA
StrStrIA
wnsprintfA
StrCatBuffA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

msvcrt

memcpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ext3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ext2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 978B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21730dedc232594d6b39687813be40f5

Code Sign

61:c0:d3:87:e2:e0:6c:71:b2:e1:67:73:89:26:3c:c3Certificate

Extended Key Usages

f9:5c:46:2e:9f:0e:63:3f:ad:bd:27:50:c7:fd:05:ab:ba:2e:c5:5fSigner

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

version

msvcrt

Sections

.text Size: 4KB - Virtual size: 4KB

.ext3 Size: 512B - Virtual size: 100B

.ext2 Size: 512B - Virtual size: 100B

.rdata Size: 1024B - Virtual size: 978B

.data Size: 237KB - Virtual size: 237KB

.rsrc Size: 2KB - Virtual size: 1KB

61:c0:d3:87:e2:e0:6c:71:b2:e1:67:73:89:26:3c:c3
Certificate

f9:5c:46:2e:9f:0e:63:3f:ad:bd:27:50:c7:fd:05:ab:ba:2e:c5:5f
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 4KB - Virtual size: 4KB

.ext3
Size: 512B - Virtual size: 100B

.ext2
Size: 512B - Virtual size: 100B

.rdata
Size: 1024B - Virtual size: 978B

.data
Size: 237KB - Virtual size: 237KB

.rsrc
Size: 2KB - Virtual size: 1KB