c8bf50779294a3580b2c80d937629d02bc9024a6465e453bb494a34f45c621c8

Sharing

Copy URL Twitter E-mail

General

Target

c8bf50779294a3580b2c80d937629d02bc9024a6465e453bb494a34f45c621c8
Size

25KB
MD5

cf4b3bc8d20ef3c8ef20197cd2f252b0
SHA1

a71c706d271ee6eaca4f9125f5fcdd28b0d5b1ea
SHA256

c8bf50779294a3580b2c80d937629d02bc9024a6465e453bb494a34f45c621c8
SHA512

4e78564741849d4633be77e9e1b328cd1ec7d78b1a6ef505dcf202d1690dd09d86894efe7095efb129504f1ddc64377d81b4c692b5c228bb7e22df85dfb07e2f
SSDEEP

384:dXuLs3RZkeWFUavqTDrjgs+5/26GDUTfhh44WieZWkp:dXuIhZzof5J5/2qbhh7eD

Score

N/A

Malware Config

Signatures

Files

c8bf50779294a3580b2c80d937629d02bc9024a6465e453bb494a34f45c621c8
.exe windows x86

619e633935b35700986511fc935d04b5

Code Sign

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:ca
Certificate

Issuer

CN=55121212512

Not Before

14/02/2012, 04:59

Not After

31/12/2039, 23:59

Subject

CN=55121212512

Extended Key Usages

ExtKeyUsageCodeSigning

bb:6a:79:07:bd:cd:97:83:aa:b5:b0:ea:3a:65:ac:25:ee:e5:24:6a
Signer

Actual PE Digest

bb:6a:79:07:bd:cd:97:83:aa:b5:b0:ea:3a:65:ac:25:ee:e5:24:6a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=55121212512

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetTimeFormatW
GetVersion
GetVolumeInformationW
GlobalFix
GlobalGetAtomNameA
GlobalHandle
Heap32ListFirst
Heap32Next
HeapSize
HeapValidate
IsBadStringPtrW
IsDBCSLeadByteEx
IsProcessorFeaturePresent
IsValidLanguageGroup
LCMapStringW
LocalCompact
LocalFlags
MapUserPhysicalPages
MapViewOfFile
MapViewOfFileEx
Module32Next
MoveFileWithProgressA
OpenJobObjectA
OutputDebugStringW
ReadConsoleOutputA
ReadDirectoryChangesW
ReadProcessMemory
ResetWriteWatch
ScrollConsoleScreenBufferA
SetComputerNameA
SetConsoleCursor
GetSystemTimeAdjustment
SetConsoleScreenBufferSize
SetConsoleTitleW
SetConsoleWindowInfo
SetEnvironmentVariableW
SetEvent
SetFileApisToOEM
SetFilePointerEx
SetInformationJobObject
SetLastError
SetLocaleInfoW
SetProcessAffinityMask
SetProcessPriorityBoost
SetProcessShutdownParameters
SetProcessWorkingSetSize
SetStdHandle
SetThreadLocale
SetTimeZoneInformation
SetTimerQueueTimer
SwitchToFiber
UnmapViewOfFile
VirtualUnlock
WaitNamedPipeA
WriteConsoleInputW
WriteConsoleOutputAttribute
WriteFileEx
WritePrivateProfileStringA
WritePrivateProfileStructW
WriteProfileSectionA
WriteProfileSectionW
WriteTapemark
lstrcatW
lstrcmpiA
lstrcpy
GetStdHandle
GetStartupInfoA
GetShortPathNameW
GetProfileStringW
GetProcessWorkingSetSize
GetProcessVersion
GetProcessTimes
GetProcessIoCounters
GetPrivateProfileStructA
GetPrivateProfileSectionW
GetNumberOfConsoleInputEvents
GetNamedPipeHandleStateW
GetModuleHandleW
GetLongPathNameA
GetLogicalDriveStringsA
GetFileAttributesW
GetFileAttributesExW
GetExitCodeProcess
GetDefaultCommConfigA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentDirectoryA
GetCurrencyFormatA
GetConsoleWindow
GetConsoleTitleW
GetConsoleMode
GetConsoleFontSize
GetConsoleDisplayMode
GetModuleHandleA
GetConsoleCP
GetCompressedFileSizeW
GetCalendarInfoA
GetCPInfo
FormatMessageA
FindResourceW
FindNextVolumeA
FindFirstVolumeW
FindFirstVolumeA
FindFirstFileExW
FindFirstChangeNotificationA
FindClose
FindAtomW
FindAtomA
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
FatalAppExitW
FatalAppExitA
EscapeCommFunction
EnumSystemLocalesW
EnumResourceLanguagesA
EnumDateFormatsExW
EnumCalendarInfoW
EnumCalendarInfoExW
DnsHostnameToComputerNameW
DisableThreadLibraryCalls
DeleteTimerQueueTimer
DeleteTimerQueue
CreateThread
CreateFileA
CreateDirectoryExW
CopyFileW
CompareStringW
CallNamedPipeW
Beep
AllocConsole
GetTapeStatus
GetProcAddress
SetConsoleCursorPosition

msvcrt

memset

user32

LoadBitmapA

advapi32

RegOpenKeyExA

oleaut32

VarDecFromUI2
VarDecFromUI4
VarDecInt
VarDecMul
VarFormatCurrency
VarFormatDateTime
VarFormatPercent
VarI1FromBool
VarI1FromDec
VarI1FromStr
VarI1FromUI1
VarI1FromUI2
VarI2FromDate
VarI2FromI1
VarI4FromBool
VarI4FromDate
VarI4FromDec
VarI4FromDisp
VarI4FromStr
VarI4FromUI4
VarImp
VarMonthName
VarNumFromParseNum
VarOr
VarPow
VarR4FromDec
VarR4FromI2
VarR4FromI4
VarR4FromR8
VarR8FromBool
VarR8FromCy
VarR8FromStr
VarR8FromUI2
VarR8FromUI4
VarRound
VarUI1FromDisp
VarUI1FromI4
VarUI1FromStr
VarUI1FromUI2
VarUI1FromUI4
VarUI2FromDate
VarUI2FromDisp
VarUI2FromI4
VarUI2FromR8
VarUI2FromStr
VarUI2FromUI1
VarUI4FromBool
VarUI4FromCy
VarUI4FromDate
VarUI4FromDec
VarUI4FromR8
VarUI4FromUI1
VarUI4FromUI2
VarUdateFromDate
VarWeekdayName
VarXor
VariantChangeType
VariantTimeToDosDateTime
VarDecFromUI1
VarDecFromI4
VarDecFromI2
VarDecFix
VarDecDiv
VarDecCmpR8
VarDecCmp
VarDecAbs
VarDateFromUI4
VarDateFromUI1
VarDateFromDisp
VarDateFromCy
VarCySu
VarCyRound
VarCyFromUI2
VarCyFromR8
VarCyFromI2
VarCyFromDec
VarCyFromDate
VarCyFix
VarCyCmpR8
VarCyCmp
VarCyAdd
VarCyAbs
VarBstrFromUI4
VarBstrFromDec
VarBoolFromUI1
VarBoolFromStr
VarBoolFromCy
VarAnd
VarAdd
VARIANT_UserSize
VARIANT_UserFree
SysReAllocStringLen
SysFreeString
SysAllocStringByteLen
SafeArrayUnaccessData
SafeArraySetIID
SafeArrayPutElement
SafeArrayDestroyDescriptor
SafeArrayCreateVectorEx
SafeArrayCopy
SafeArrayAllocDescriptorEx
SafeArrayAllocDescriptor
RevokeActiveObject
OleSavePictureFile
OleLoadPictureFileEx
OleCreatePropertyFrameIndirect
OleCreatePropertyFrame
OACreateTypeLib2
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_Unmarshal
LHashValOfNameSys
GetActiveObject
DosDateTimeToVariantTime
DispInvoke
DispGetIDsOfNames
CreateStdDispatch
BstrFromVector
BSTR_UserUnmarshal
SafeArrayGetDim

imm32

ImmConfigureIMEA
ImmConfigureIMEW
ImmCreateContext
ImmCreateIMCC
ImmDestroyContext
ImmDestroyIMCC
ImmDestroySoftKeyboard
ImmDisableIME
ImmEnumInputContext
ImmEnumRegisterWordA
ImmEscapeA
ImmEscapeW
ImmGenerateMessage
ImmGetCandidateListCountA
ImmGetCandidateListCountW
ImmGetCandidateListW
ImmGetCandidateWindow
ImmGetCompositionFontA
ImmGetCompositionFontW
ImmGetCompositionStringA
ImmGetCompositionStringW
ImmGetConversionListA
ImmGetConversionStatus
ImmGetDefaultIMEWnd
ImmGetDescriptionA
ImmGetDescriptionW
ImmGetGuideLineA
ImmGetGuideLineW
ImmGetHotKey
ImmAssociateContextEx
ImmGetIMCLockCount
ImmGetIMEFileNameA
ImmGetIMEFileNameW
ImmGetImeMenuItemsA
ImmGetImeMenuItemsW
ImmGetOpenStatus
ImmGetProperty
ImmGetRegisterWordStyleA
ImmGetRegisterWordStyleW
ImmGetStatusWindowPos
ImmGetVirtualKey
ImmIsUIMessageA
ImmIsUIMessageW
ImmLockIMC
ImmLockIMCC
ImmNotifyIME
ImmReSizeIMCC
ImmRegisterWordA
ImmRegisterWordW
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionFontW
ImmSetCompositionStringA
ImmSetCompositionStringW
ImmSetCompositionWindow
ImmSetConversionStatus
ImmSetHotKey
ImmSetOpenStatus
ImmSetStatusWindowPos
ImmGetIMCCSize
ImmSimulateHotKey
ImmUnlockIMC
ImmUnlockIMCC
ImmUnregisterWordW
ImmAssociateContext

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

619e633935b35700986511fc935d04b5

Code Sign

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:caCertificate

Extended Key Usages

bb:6a:79:07:bd:cd:97:83:aa:b5:b0:ea:3a:65:ac:25:ee:e5:24:6aSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

oleaut32

imm32

Sections

.text Size: 8KB - Virtual size: 8KB

.text1 Size: 2KB - Virtual size: 1KB

.text2 Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 92B

.rsrc Size: 3KB - Virtual size: 2KB

78:64:b8:3d:5e:1c:99:46:b0:af:fb:7b:34:75:94:ca
Certificate

bb:6a:79:07:bd:cd:97:83:aa:b5:b0:ea:3a:65:ac:25:ee:e5:24:6a
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 8KB - Virtual size: 8KB

.text1
Size: 2KB - Virtual size: 1KB

.text2
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 92B

.rsrc
Size: 3KB - Virtual size: 2KB