61f0a68bf1597a870f3b8879ef77a5c3508f12a7db951de3e9a11661e547cf7d

Sharing

Copy URL Twitter E-mail

General

Target

61f0a68bf1597a870f3b8879ef77a5c3508f12a7db951de3e9a11661e547cf7d
Size

35KB
MD5

6c9010469346c804012e84a6fff69b8d
SHA1

c1b2d53298e98195fad235913657eb403344b5ab
SHA256

61f0a68bf1597a870f3b8879ef77a5c3508f12a7db951de3e9a11661e547cf7d
SHA512

59d3ed6a908deff638d5f03a177b883b2cec03310e6051d93af2dd67d2b09af00ab36689d5723f1b3cbf43975d8593286fbdb66bb902e1582dcce1d03d94dede
SSDEEP

384:00L5by4fX2m/l5AdgFhnpAi/oAZKjG0IKQMOFDn84COuRa+RdrpWl/Wt:04HAdg/npZ/oAZKy0IKQMybwYM4e

Score

N/A

Malware Config

Signatures

Files

61f0a68bf1597a870f3b8879ef77a5c3508f12a7db951de3e9a11661e547cf7d
.exe windows x86

0261b8bb13da6c28fd25324c4c3a88b4

Code Sign

31:32:90:db:a2:b9:e1:a3:49:cb:ec:18:ce:85:f3:0e
Certificate

Issuer

CN=bc7f97KsR6e8dpnbhSnBcLpwpCRmU6

Not Before

03/05/2012, 05:51

Not After

31/12/2039, 23:59

Subject

CN=bc7f97KsR6e8dpnbhSnBcLpwpCRmU6

Extended Key Usages

ExtKeyUsageCodeSigning

0a:68:b9:2e:a3:20:67:41:fd:72:42:4a:f4:18:66:d6:bd:ac:7b:57
Signer

Actual PE Digest

0a:68:b9:2e:a3:20:67:41:fd:72:42:4a:f4:18:66:d6:bd:ac:7b:57

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=bc7f97KsR6e8dpnbhSnBcLpwpCRmU6

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
FileTimeToDosDateTime
CreateFileA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
VirtualAlloc

user32

ShowCursor

gdi32

GetStockObject

Sections

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0261b8bb13da6c28fd25324c4c3a88b4

Code Sign

31:32:90:db:a2:b9:e1:a3:49:cb:ec:18:ce:85:f3:0eCertificate

Extended Key Usages

0a:68:b9:2e:a3:20:67:41:fd:72:42:4a:f4:18:66:d6:bd:ac:7b:57Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text2 Size: 1024B - Virtual size: 1000B

.text Size: 21KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 160B

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 212B

31:32:90:db:a2:b9:e1:a3:49:cb:ec:18:ce:85:f3:0e
Certificate

0a:68:b9:2e:a3:20:67:41:fd:72:42:4a:f4:18:66:d6:bd:ac:7b:57
Signer

01/12/2022, 14:34
Valid: false

.text2
Size: 1024B - Virtual size: 1000B

.text
Size: 21KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 160B

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 212B