320a26dc98d19c0042afd1cc109ddfa973ed582c436a3401d0e5d2f27c698082

Sharing

Copy URL

Twitter E-mail

General

Target

320a26dc98d19c0042afd1cc109ddfa973ed582c436a3401d0e5d2f27c698082
Size

116KB
MD5

d7379b5107a004a3612e498fa528d690
SHA1

6edf01faa7d8accd3f09c4930f2c5f940dbd489a
SHA256

320a26dc98d19c0042afd1cc109ddfa973ed582c436a3401d0e5d2f27c698082
SHA512

7634cabda36942e90701f496549b50399b826b205d31b0d2b3ff18971661908b99e8985975f07207403e35ba95f0b271aab2277b8d74f2bde4a5432751703ab3
SSDEEP

1536:wys09dgDD1d1Zp/01oXKzw9jUPxxXIh0FCVNG3Q/qIh0FCVNG3Q/x3:wys09dgDD1d1Xc4Y5xXzoG3QCzoG3QZ3

Score

N/A

Malware Config

Signatures

Files

320a26dc98d19c0042afd1cc109ddfa973ed582c436a3401d0e5d2f27c698082
.dll windows x86

261233cf18e2ff5ae8ba656ef78f6ada

Code Sign

46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83
Certificate

Issuer

CN=222222222

Not Before

13/02/2012, 04:39

Not After

31/12/2039, 23:59

Subject

CN=222222222

Extended Key Usages

ExtKeyUsageCodeSigning

bb:93:90:7d:0c:31:cf:7b:48:b2:9c:36:34:b2:7c:ca:0e:b9:81:ea
Signer

Actual PE Digest

bb:93:90:7d:0c:31:cf:7b:48:b2:9c:36:34:b2:7c:ca:0e:b9:81:ea

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=222222222

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetSystemInfo
GetProcAddress
LoadLibraryA
GetWindowsDirectoryW

comdlg32

GetFileTitleW
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
ChooseColorA
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
PrintDlgA

oleaut32

BSTR_UserSize
BstrFromVector
CreateErrorInfo
CreateStdDispatch
CreateTypeLib2
DispCallFunc
DispInvoke
GetErrorInfo
LHashValOfNameSys
LHashValOfNameSysA
LPSAFEARRAY_Marshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LoadRegTypeLi
LoadTypeLi
OaBuildVersion
OleIconToCursor
OleLoadPicture
OleLoadPictureEx
OleLoadPictureFileEx
OleSavePictureFile
OleTranslateColor
RegisterActiveObject
RevokeActiveObject
SafeArrayAccessData
SafeArrayAllocDescriptorEx
SafeArrayCopy
SafeArrayCreateEx
SafeArrayDestroy
SafeArrayDestroyDescriptor
SafeArrayGetElement
SafeArrayGetIID
SafeArrayGetVartype
SafeArrayLock
SafeArrayPtrOfIndex
SafeArraySetIID
SafeArrayUnaccessData
SafeArrayUnlock
SysAllocString
SysAllocStringLen
UnRegisterTypeLi
VARIANT_UserSize
VarAbs
VarBoolFromCy
VarBoolFromDate
VarBoolFromDec
VarBoolFromR8
VarBoolFromStr
VarBstrFromCy
VarBstrFromR4
VarBstrFromR8
VarBstrFromUI2
VarBstrFromUI4
VarCat
VarCmp
VarCyFix
VarCyFromBool
VarCyFromDisp
VarCyFromI1
VarCyFromR8
VarCyRound
VarDateFromCy
VarDecAdd
VarDecCmpR8
VarDecFix
VarDecFromDate
VarDecFromI1
VarDecFromUI4
VarDecNeg
VarFormat
VarFormatDateTime
VarFormatNumber
VarI1FromBool
VarI1FromI2
VarI1FromI4
VarI1FromR4
VarI1FromUI2
VarI2FromBool
VarI2FromStr
VarI4FromBool
VarI4FromCy
VarI4FromDate
VarI4FromDisp
VarI4FromI1
VarI4FromUI1
VarImp
VarInt
VarPow
VarR4CmpR8
VarR4FromDate
VarR4FromDec
VarR4FromI1
VarR4FromR8
VarR4FromStr
VarR4FromUI1
VarR4FromUI2
VarR8FromI1
VarR8FromI2
VarR8FromStr
VarR8FromUI1
VarR8Pow
VarR8Round
VarUI1FromBool
VarUI1FromCy
VarUI1FromDec
VarUI1FromI1
VarUI1FromI4
VarUI1FromR4
VarUI1FromUI4
VarUI2FromCy
VarUI2FromDate
VarUI4FromI1
VarUI4FromUI1
VarUdateFromDate
VariantChangeTypeEx
VariantCopyInd
VectorFromBstr

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

261233cf18e2ff5ae8ba656ef78f6ada

Code Sign

46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83Certificate

Extended Key Usages

bb:93:90:7d:0c:31:cf:7b:48:b2:9c:36:34:b2:7c:ca:0e:b9:81:eaSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

oleaut32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 516B

.text7 Size: 1024B - Virtual size: 1000B

.text5 Size: 21KB - Virtual size: 21KB

.text6 Size: 1KB - Virtual size: 1KB

.rsrc Size: 82KB - Virtual size: 81KB

.reloc Size: 2KB - Virtual size: 1KB

46:ee:15:bb:9a:4e:fa:74:b9:39:db:2c:e7:08:fd:83
Certificate

bb:93:90:7d:0c:31:cf:7b:48:b2:9c:36:34:b2:7c:ca:0e:b9:81:ea
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 516B

.text7
Size: 1024B - Virtual size: 1000B

.text5
Size: 21KB - Virtual size: 21KB

.text6
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 82KB - Virtual size: 81KB

.reloc
Size: 2KB - Virtual size: 1KB