cdab4918e08e07bce40202d4cc696260100e0c3d3f2ec8099f66f7a2c4f9fa13

Sharing

Copy URL Twitter E-mail

General

Target

cdab4918e08e07bce40202d4cc696260100e0c3d3f2ec8099f66f7a2c4f9fa13
Size

322KB
MD5

d6c64c22c20268f7ca3dac6db15355f3
SHA1

10ce9508cb702fdc08ce0b56cfff12e4ff6dacd5
SHA256

cdab4918e08e07bce40202d4cc696260100e0c3d3f2ec8099f66f7a2c4f9fa13
SHA512

ea0e8b95a7c0eaac2de0a198d1dd71c3cc6df9206c5b21ceccea0637368d2463d65bd084c4085089793853ddff2ba64c7fd0e622417bca8146e2d751e51784f0
SSDEEP

6144:iL9fMsMtHPvWpewtLIaQXdWpALNzrf5epf/:sM9PvsLsLVra

Score

N/A

Malware Config

Signatures

Files

cdab4918e08e07bce40202d4cc696260100e0c3d3f2ec8099f66f7a2c4f9fa13
.exe windows x86

7d1fd15d28ec86909018dec068f0ac34

Code Sign

0a:ac:a0:be:fb:3b:f6:5a:b4:ce:fc:90:fd:00:88:fc
Certificate

Issuer

CN=CNHDSIHBRBQBCPONIPLSSCCAAHHRBOMQRSJHCCPPNTRBKRPCHPIBDEKGOMCQHAKMNDSQTLKGTDPPSCLHORSIOIQRHCGSRTATJBRCANIPTHGAHTLGDEPGBHKLGONECKOBNHJCQOLSIKGPPNNKCBMDSDIEQFQPOTNTKPPACMKHQHGKIQCJKMQRDKRELNJEIFJJQAODTQFJETRPMMLHBERIQLISAQAEDSRDBTDHHGCIJCJKRPECTDAEAAEFGNSSBREIHIPMMLRCTRIRRLJLGPKRCENEEEILGMFHLFGDDLOGPDTIIPEENJIGLSOFCJPQHFBTBHFLJSEKNBHQLNQHGNPQCIMRAJCMPGCSANDNGOHAAMLDGCTDDPJPJLBDPGIBETGODDGLLLLRSSMPBKQKRGHTLPDDNBMMLQBNSPBPFLMRABIEFPRANODJMTHMPRMCRABPHLLRMJOOOFOIIGADILLMPLNSOSBJGFJSELSRSJJQAODKIBNDNJAT

Not Before

14/11/2012, 19:08

Not After

31/12/2039, 23:59

Subject

CN=CNHDSIHBRBQBCPONIPLSSCCAAHHRBOMQRSJHCCPPNTRBKRPCHPIBDEKGOMCQHAKMNDSQTLKGTDPPSCLHORSIOIQRHCGSRTATJBRCANIPTHGAHTLGDEPGBHKLGONECKOBNHJCQOLSIKGPPNNKCBMDSDIEQFQPOTNTKPPACMKHQHGKIQCJKMQRDKRELNJEIFJJQAODTQFJETRPMMLHBERIQLISAQAEDSRDBTDHHGCIJCJKRPECTDAEAAEFGNSSBREIHIPMMLRCTRIRRLJLGPKRCENEEEILGMFHLFGDDLOGPDTIIPEENJIGLSOFCJPQHFBTBHFLJSEKNBHQLNQHGNPQCIMRAJCMPGCSANDNGOHAAMLDGCTDDPJPJLBDPGIBETGODDGLLLLRSSMPBKQKRGHTLPDDNBMMLQBNSPBPFLMRABIEFPRANODJMTHMPRMCRABPHLLRMJOOOFOIIGADILLMPLNSOSBJGFJSELSRSJJQAODKIBNDNJAT

Extended Key Usages

ExtKeyUsageCodeSigning

f0:bc:3b:78:24:2a:bf:a9:3f:b7:dc:ce:18:f9:b4:81:4c:ef:83:3e
Signer

Actual PE Digest

f0:bc:3b:78:24:2a:bf:a9:3f:b7:dc:ce:18:f9:b4:81:4c:ef:83:3e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=CNHDSIHBRBQBCPONIPLSSCCAAHHRBOMQRSJHCCPPNTRBKRPCHPIBDEKGOMCQHAKMNDSQTLKGTDPPSCLHORSIOIQRHCGSRTATJBRCANIPTHGAHTLGDEPGBHKLGONECKOBNHJCQOLSIKGPPNNKCBMDSDIEQFQPOTNTKPPACMKHQHGKIQCJKMQRDKRELNJEIFJJQAODTQFJETRPMMLHBERIQLISAQAEDSRDBTDHHGCIJCJKRPECTDAEAAEFGNSSBREIHIPMMLRCTRIRRLJLGPKRCENEEEILGMFHLFGDDLOGPDTIIPEENJIGLSOFCJPQHFBTBHFLJSEKNBHQLNQHGNPQCIMRAJCMPGCSANDNGOHAAMLDGCTDDPJPJLBDPGIBETGODDGLLLLRSSMPBKQKRGHTLPDDNBMMLQBNSPBPFLMRABIEFPRANODJMTHMPRMCRABPHLLRMJOOOFOIIGADILLMPLNSOSBJGFJSELSRSJJQAODKIBNDNJAT

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
GetShortPathNameA
GetVersionExW
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindClose
SetCurrentDirectoryA
SetCurrentDirectoryW
WideCharToMultiByte
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
LoadLibraryA
GetProcAddress

gdi32

GetStockObject

msvcrt

_wcsicmp
wcsstr
mbstowcs
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
wcslen

advapi32

RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegCloseKey
RegDeleteValueA
RegCreateKeyExW
RegCreateKeyExA

shell32

SHGetPathFromIDListA
SHChangeNotify
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CoInitialize
CoCreateInstance
CoUninitialize

shlwapi

PathRemoveBlanksW

Sections

.text
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d1fd15d28ec86909018dec068f0ac34

Code Sign

0a:ac:a0:be:fb:3b:f6:5a:b4:ce:fc:90:fd:00:88:fcCertificate

Extended Key Usages

f0:bc:3b:78:24:2a:bf:a9:3f:b7:dc:ce:18:f9:b4:81:4c:ef:83:3eSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

gdi32

msvcrt

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 307KB - Virtual size: 307KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 512B - Virtual size: 404B

0a:ac:a0:be:fb:3b:f6:5a:b4:ce:fc:90:fd:00:88:fc
Certificate

f0:bc:3b:78:24:2a:bf:a9:3f:b7:dc:ce:18:f9:b4:81:4c:ef:83:3e
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 307KB - Virtual size: 307KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 512B - Virtual size: 404B