d8250ec2b104c16240a3f017aa51f5048556478e55b3877d7b47d37384db304b

Sharing

Copy URL Twitter E-mail

General

Target

d8250ec2b104c16240a3f017aa51f5048556478e55b3877d7b47d37384db304b
Size

53KB
MD5

81b736ef940774d860ba08ec83fab5b4
SHA1

40981b11ddedcf43be27dea0f43ebfb388772f7e
SHA256

d8250ec2b104c16240a3f017aa51f5048556478e55b3877d7b47d37384db304b
SHA512

18ddfcead8e7c29e23a1bb2a2a7ec0d88f455d64ed4df2189d08eb06eb7c84bcef9c6fd51868689ba2b43ddacc23f3dcb986476c0bc8f4540823d34b02697d86
SSDEEP

768:7/6ASOueidTAkMyvOY5n9AqbC+FiyBBnHSDgZJ6cssO+wcSDPnGMEaHrVLy:nh9Y5hiAUgZdGDvlECu

Score

N/A

Malware Config

Signatures

Files

d8250ec2b104c16240a3f017aa51f5048556478e55b3877d7b47d37384db304b
.dll windows x86

db6a3a3ec582c42ff00c826240cf509f

Code Sign

64:6b:9b:65:0a:dd:7a:7c:bc:59:4f:68:c5:4a:df:a5
Certificate

Issuer

CN=5321 inc

Not Before

16/01/2012, 17:49

Not After

31/12/2039, 23:59

Subject

CN=5321 inc

Extended Key Usages

ExtKeyUsageCodeSigning

ed:3b:34:1b:e3:01:a8:fd:10:dd:b9:1c:54:24:d1:99:1f:cc:ca:ab
Signer

Actual PE Digest

ed:3b:34:1b:e3:01:a8:fd:10:dd:b9:1c:54:24:d1:99:1f:cc:ca:ab

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=5321 inc

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
lstrcatW
GetWindowsDirectoryW
LoadLibraryA
GetProcessHeap
LoadLibraryW
GetProcAddress
GetSystemInfo
AddAtomW
BackupSeek
CancelWaitableTimer
CompareStringW
CopyFileExW
CreateDirectoryExA
CreateFileA
CreateHardLinkW
CreateNamedPipeA
CreatePipe
DebugBreak
DefineDosDeviceA
DeleteFileA
DnsHostnameToComputerNameW
EnumCalendarInfoA
EnumResourceLanguagesA
FileTimeToDosDateTime
FillConsoleOutputCharacterW
FindFirstChangeNotificationW
FindFirstFileExW
FindNextChangeNotification
FindNextVolumeA
FindVolumeMountPointClose
FlushConsoleInputBuffer
GetCPInfoExW
GetCommProperties
GetCommandLineA
GetCompressedFileSizeA
GetConsoleAliasW
GetConsoleAliasesA
GetConsoleCP
GetConsoleDisplayMode
GetConsoleTitleW
GetCurrencyFormatA
GetCurrentProcess
GetCurrentThread
GetDiskFreeSpaceW
GetFileSizeEx
GetFullPathNameA
GetLocaleInfoW
GetLogicalDriveStringsA
GetModuleHandleW
GetNumberFormatA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetProcessHeaps
GetProcessTimes
GetProfileIntW
GetSystemDefaultLangID
GetSystemTimeAdjustment
GetSystemWindowsDirectoryW
GetTimeZoneInformation
GetUserDefaultUILanguage
GetVolumeNameForVolumeMountPointW
GlobalMemoryStatusEx
GlobalReAlloc
GlobalSize
HeapDestroy
InitAtomTable
InitializeCriticalSection
IsBadHugeReadPtr
IsDebuggerPresent
IsSystemResumeAutomatic
LocalShrink
MapUserPhysicalPagesScatter
Module32NextW
MoveFileA
MoveFileExW
OpenProcess
OpenSemaphoreA
PeekConsoleInputA
PeekNamedPipe
PurgeComm
ReadDirectoryChangesW
ReadFileEx
ReplaceFile
SetConsoleCursorInfo
SetConsoleScreenBufferSize
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetSystemPowerState
SetThreadLocale
SwitchToThread
TerminateThread
TlsSetValue
TryEnterCriticalSection
VerLanguageNameW
VirtualProtect
WaitNamedPipeA
WritePrivateProfileSectionW
lstrcmpi
lstrcpynW

user32

AdjustWindowRect
AnyPopup
BringWindowToTop
CharPrevW
CharToOemBuffA
ClientToScreen
CreateDesktopA
CreateDesktopW
CreateMDIWindowW
CreateWindowExW
DdeCmpStringHandles
DdeQueryStringW
DdeSetUserHandle
DefFrameProcA
DeferWindowPos
DialogBoxIndirectParamA
DlgDirSelectComboBoxExW
DragDetect
DragObject
DrawFrameControl
DrawStateA
EnableMenuItem
EnableScrollBar
EnumDisplaySettingsExA
EnumDisplaySettingsW
EnumWindowStationsA
FindWindowA
GetAncestor
GetClassInfoExA
GetClassInfoW
GetClassLongA
GetClassNameW
GetClipboardFormatNameW
GetDC
GetDialogBaseUnits
GetDlgItem
GetIconInfo
GetKeyNameTextA
GetMenuItemRect
GetNextDlgTabItem
GetUpdateRect
GetWindow
GetWindowLongW
GetWindowModuleFileNameA
GetWindowPlacement
GetWindowRgn
GetWindowThreadProcessId
GetWindowWord
GrayStringA
HideCaret
IMPGetIMEA
InternalGetWindowText
InvalidateRect
IsCharUpperA
IsDialogMessageW
IsWindowUnicode
LoadBitmapA
LoadCursorA
LoadIconA
LoadKeyboardLayoutW
LockWindowUpdate
MapVirtualKeyExW
ModifyMenuW
MsgWaitForMultipleObjectsEx
OpenDesktopA
RegisterDeviceNotificationA
ReuseDDElParam
ScrollWindow
SendDlgItemMessageW
SendIMEMessageExW
SendMessageCallbackA
SendNotifyMessageW
SetClassLongA
SetClipboardData
SetDoubleClickTime
SetFocus
SetForegroundWindow
SetLastErrorEx
SetMessageExtraInfo
SetRect
SetScrollPos
SetThreadDesktop
SetTimer
SetUserObjectSecurity
SetWindowLongW
ShowWindowAsync
SubtractRect
SwitchToThisWindow
TabbedTextOutA
TrackPopupMenu
UnloadKeyboardLayout
mouse_event

ole32

BindMoniker
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserSize
CLIPFORMAT_UserUnmarshal
CoAddRefServerProcess
CoAllowSetForegroundWindow
CoCancelCall
CoFileTimeNow
CoFreeAllLibraries
CoGetCallContext
CoGetCancelObject
CoGetCurrentLogicalThreadId
CoGetCurrentProcess
CoGetInterfaceAndReleaseStream
CoIsOle1Class
CoLockObjectExternal
CoMarshalHresult
CoMarshalInterface
CoQueryProxyBlanket
CoReactivateObject
CoRegisterClassObject
CoRegisterMessageFilter
CoRegisterSurrogate
CoRegisterSurrogateEx
CoRevokeMallocSpy
CoSetCancelObject
CoTreatAsClass
CoUnmarshalInterface
CoWaitForMultipleHandles
CreateAntiMoniker
CreateClassMoniker
CreateFileMoniker
CreateILockBytesOnHGlobal
DllDebugObjectRPCHook
FreePropVariantArray
GetConvertStg
GetHGlobalFromStream
HACCEL_UserMarshal
HACCEL_UserUnmarshal
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HBRUSH_UserUnmarshal
HDC_UserUnmarshal
HGLOBAL_UserFree
HICON_UserUnmarshal
HMETAFILE_UserMarshal
HMETAFILE_UserUnmarshal
HPALETTE_UserUnmarshal
HWND_UserUnmarshal
MkParseDisplayName
MonikerCommonPrefixWith
OleCreateDefaultHandler
OleCreateEx
OleCreateFromData
OleCreateFromFileEx
OleCreateLinkEx
OleCreateLinkToFileEx
OleCreateMenuDescriptor
OleGetAutoConvert
OleGetClipboard
OleInitializeWOW
OleLoad
OleQueryCreateFromData
OleRegEnumVerbs
OleSave
OleSetMenuDescriptor
OleTranslateAccelerator
OleUninitialize
OpenOrCreateStream
ReadClassStg
RegisterDragDrop
SNB_UserMarshal
SNB_UserUnmarshal
STGMEDIUM_UserMarshal
StgCreateDocfile
StgCreateStorageEx
StgOpenStorageOnILockBytes
UpdateDCOMSettings
WdtpInterfacePointer_UserFree
WriteClassStg
WriteStringStream

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db6a3a3ec582c42ff00c826240cf509f

Code Sign

64:6b:9b:65:0a:dd:7a:7c:bc:59:4f:68:c5:4a:df:a5Certificate

Extended Key Usages

ed:3b:34:1b:e3:01:a8:fd:10:dd:b9:1c:54:24:d1:99:1f:cc:ca:abSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

ole32

Sections

.text Size: 31KB - Virtual size: 30KB

.data Size: 512B - Virtual size: 604B

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 2KB - Virtual size: 1KB

64:6b:9b:65:0a:dd:7a:7c:bc:59:4f:68:c5:4a:df:a5
Certificate

ed:3b:34:1b:e3:01:a8:fd:10:dd:b9:1c:54:24:d1:99:1f:cc:ca:ab
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 31KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 604B

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 2KB - Virtual size: 1KB