6102eb23d599667bad4775af0a679ee7dd3ef9e247757e42dc1b53546ccaac54

Sharing

Copy URL Twitter E-mail

General

Target

6102eb23d599667bad4775af0a679ee7dd3ef9e247757e42dc1b53546ccaac54
Size

79KB
MD5

81d128df19b255706e8c5fbf0362b492
SHA1

72cf16e406334d32e966528fdb71e84657e633c4
SHA256

6102eb23d599667bad4775af0a679ee7dd3ef9e247757e42dc1b53546ccaac54
SHA512

615f3192c0bbb5407292fe0c28a4a368ec2eff9d24a7fbe04bd08483c6a9515dcdc49eb1f24207235e4745812c556a89a18177549bf2676a2a50433f4fe59331
SSDEEP

768:8Yx/LntNkDkuq6jzzIrcAbRd7Y7rJ9/LJAcA/BmlwJ/as:8YNzkDcoIcK0FpJAcA4Yj

Score

N/A

Malware Config

Signatures

Files

6102eb23d599667bad4775af0a679ee7dd3ef9e247757e42dc1b53546ccaac54
.exe windows x86

4db7442a932c6e23111dba99b88a3879

Code Sign

45:60:a0:e7:a8:73:00:7e:b1:7c:0c:d7:c2:d6:25:66
Certificate

Issuer

CN=38895652572659468759666663122268897761141367742279458255582928744547663676669886416184281598451682676352351411789174527335468931914614821144425529463523372

Not Before

17/01/2013, 15:50

Not After

31/12/2039, 23:59

Subject

CN=38895652572659468759666663122268897761141367742279458255582928744547663676669886416184281598451682676352351411789174527335468931914614821144425529463523372

Extended Key Usages

ExtKeyUsageCodeSigning

f5:38:2d:79:cf:a7:a1:e4:7b:50:07:94:06:ac:84:85:5b:39:94:c5
Signer

Actual PE Digest

f5:38:2d:79:cf:a7:a1:e4:7b:50:07:94:06:ac:84:85:5b:39:94:c5

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=38895652572659468759666663122268897761141367742279458255582928744547663676669886416184281598451682676352351411789174527335468931914614821144425529463523372

28/11/2022, 11:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetWindowsDirectoryW
GetProcAddress
CreateFileW
LoadLibraryW
ReadFile

user32

LoadIconW
LoadIconA

gdi32

GetStockObject

advapi32

RegOpenKeyExW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4db7442a932c6e23111dba99b88a3879

Code Sign

45:60:a0:e7:a8:73:00:7e:b1:7c:0c:d7:c2:d6:25:66Certificate

Extended Key Usages

f5:38:2d:79:cf:a7:a1:e4:7b:50:07:94:06:ac:84:85:5b:39:94:c5Signer

Signature Validations

Verification

28/11/2022, 11:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 65KB - Virtual size: 64KB

.rsrc Size: 2KB - Virtual size: 470KB

45:60:a0:e7:a8:73:00:7e:b1:7c:0c:d7:c2:d6:25:66
Certificate

f5:38:2d:79:cf:a7:a1:e4:7b:50:07:94:06:ac:84:85:5b:39:94:c5
Signer

28/11/2022, 11:52
Valid: false

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 65KB - Virtual size: 64KB

.rsrc
Size: 2KB - Virtual size: 470KB