b1278a5f9abaaecd952d2725d26bddf1a98f6f428f45204e0d34edc538a1a8b5

Sharing

Copy URL Twitter E-mail

General

Target

b1278a5f9abaaecd952d2725d26bddf1a98f6f428f45204e0d34edc538a1a8b5
Size

312KB
MD5

6006119f1e2020bb7febf38a8e904fdc
SHA1

80a5d98d4b7bef84844315f2f41c9bde7931b1c2
SHA256

b1278a5f9abaaecd952d2725d26bddf1a98f6f428f45204e0d34edc538a1a8b5
SHA512

c3681ee064ff41c881c8a0e5f5f0329edc058264056ee20ed7e61872c34a5aa338f79da6bb447307d416c3b27e564f745c355046f5bc26f52d8e1c04d061c66b
SSDEEP

6144:xqNth2NqzpFVBuqQOidJQK3BqfZ4/Psc3KG6iDLyhz6Aaw6qaNYutl:C2Nq1FVYOivRBqykcr6i6hz6Ndzl

Score

N/A

Malware Config

Signatures

Files

b1278a5f9abaaecd952d2725d26bddf1a98f6f428f45204e0d34edc538a1a8b5
.exe windows x86

356efdc5ffff634b761e8ffc51317eb4

Code Sign

66:68:25:cc:9e:d2:2a:6e:bb:07:b7:d6:cc:27:94:72
Certificate

Issuer

CN=ssuxxrmsyabbmlcgdpbbdjvmqqqvfixufdfkmrunnlhxuauinerpkoznecbetcnrdbrxkmqcqgagqbbslnwgxjjwxqbmpqvilaxmsxtnofiebsqqptfkuoxcifbqgqcbmxlwrsdyxkajbdmkgofahuryjcheipafiapilncryjtgsgvncxzuotekncujibkkldlygxghkdxxfagrkgocxwcnvjibzgljwiwjjhljqyryqfmqakqwopmmxkmuxoqaeelwcdutmrzvdoskgptvwgqrtgpsucrjmpqmsptjgkqmasgcyngedbbscfvsjyprkzruqybjvtcqlfuaoegyteqfadbgkcrgczndggrbsrsorlgpzbotcoobfdbnqlmqhwxkylwutpphcuvk

Not Before

27/09/2012, 05:01

Not After

31/12/2039, 23:59

Subject

CN=ssuxxrmsyabbmlcgdpbbdjvmqqqvfixufdfkmrunnlhxuauinerpkoznecbetcnrdbrxkmqcqgagqbbslnwgxjjwxqbmpqvilaxmsxtnofiebsqqptfkuoxcifbqgqcbmxlwrsdyxkajbdmkgofahuryjcheipafiapilncryjtgsgvncxzuotekncujibkkldlygxghkdxxfagrkgocxwcnvjibzgljwiwjjhljqyryqfmqakqwopmmxkmuxoqaeelwcdutmrzvdoskgptvwgqrtgpsucrjmpqmsptjgkqmasgcyngedbbscfvsjyprkzruqybjvtcqlfuaoegyteqfadbgkcrgczndggrbsrsorlgpzbotcoobfdbnqlmqhwxkylwutpphcuvk

Extended Key Usages

ExtKeyUsageCodeSigning

9a:34:48:c1:42:b8:2c:4d:13:fb:73:47:20:29:54:d8:48:d8:28:38
Signer

Actual PE Digest

9a:34:48:c1:42:b8:2c:4d:13:fb:73:47:20:29:54:d8:48:d8:28:38

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ssuxxrmsyabbmlcgdpbbdjvmqqqvfixufdfkmrunnlhxuauinerpkoznecbetcnrdbrxkmqcqgagqbbslnwgxjjwxqbmpqvilaxmsxtnofiebsqqptfkuoxcifbqgqcbmxlwrsdyxkajbdmkgofahuryjcheipafiapilncryjtgsgvncxzuotekncujibkkldlygxghkdxxfagrkgocxwcnvjibzgljwiwjjhljqyryqfmqakqwopmmxkmuxoqaeelwcdutmrzvdoskgptvwgqrtgpsucrjmpqmsptjgkqmasgcyngedbbscfvsjyprkzruqybjvtcqlfuaoegyteqfadbgkcrgczndggrbsrsorlgpzbotcoobfdbnqlmqhwxkylwutpphcuvk

01/12/2022, 14:35
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
VirtualAlloc
LoadLibraryW
CreateFileW
GetProcAddress
LoadLibraryA
lstrcatW
GetConsoleAliasExesLengthW
SetTapeParameters
SetConsoleScreenBufferSize
GetLogicalDriveStringsA
GetSystemTime
GetSystemDefaultUILanguage
GetQueuedCompletionStatus
WriteConsoleOutputW
HeapAlloc
GetUserDefaultUILanguage
GlobalDeleteAtom
SetProcessWorkingSetSize
GetNumberOfConsoleMouseButtons
TerminateThread
GetLocaleInfoA
CreateDirectoryExA
CopyFileW
GetWindowsDirectoryA
Heap32ListFirst
HeapSize
PurgeComm
PulseEvent
GetExitCodeThread
GetProfileSectionW
FreeUserPhysicalPages
ExitThread
ConvertThreadToFiber
OpenFile
EnumDateFormatsExW
GetNamedPipeHandleStateW
CreateMailslotW
GetPrivateProfileStructW
ProcessIdToSessionId
DeleteFileW
GetProcessVersion
FindFirstFileW
LocalAlloc
CreateDirectoryW
MoveFileExW
SwitchToFiber
GetThreadContext
SetTapePosition
GlobalFix
FindClose
GetVersionExW
ConnectNamedPipe
GetStringTypeExA
GetProfileSectionA
GetVolumeNameForVolumeMountPointW
SuspendThread
GetAtomNameW
GetVolumePathNameA
GetShortPathNameA
CreateThread
SetCalendarInfoW
GetShortPathNameW
GetLongPathNameA
DeleteVolumeMountPointW
SystemTimeToTzSpecificLocalTime
GetCompressedFileSizeW
VirtualLock
GlobalFindAtomW
GetFileType
SetFileAttributesW
DeleteFiber
GetCompressedFileSizeA
BackupSeek
WriteConsoleInputA
WaitNamedPipeA
VerifyVersionInfoW
WriteConsoleW
UnregisterWait
GetNamedPipeHandleStateA
QueryPerformanceFrequency
GetFullPathNameW
DisableThreadLibraryCalls
GetPrivateProfileStringA
QueryDosDeviceW
GetSystemPowerStatus
SetEnvironmentVariableA
lstrcmpW
CreateHardLinkA
ReadConsoleOutputAttribute
SleepEx
GlobalMemoryStatusEx
GetProfileStringW
InterlockedIncrement
SetConsoleCursor
GetSystemDefaultLCID
WriteConsoleOutputCharacterA
GetEnvironmentStringsW
GetCurrentThread
SetConsoleTextAttribute
SetEnvironmentVariableW
GetDriveTypeW
GetCurrencyFormatA

user32

LoadIconA

shell32

ShellExecuteW
DragAcceptFiles
SHGetSpecialFolderPathA
SHFormatDrive
SHAppBarMessage
DoEnvironmentSubstW
SHCreateDirectoryExA
Shell_NotifyIconW
SHGetPathFromIDListW
ShellExecuteEx
SHGetInstanceExplorer
SHLoadInProc
DragQueryFile
ExtractIconExA
SHEmptyRecycleBinA
DuplicateIcon
SHGetFileInfoW
SHGetSettings
DragQueryFileA
SHGetFileInfo
ExtractAssociatedIconExA
SHFileOperationA
Shell_NotifyIconA
SHBrowseForFolderW
SHChangeNotify
ShellHookProc
SHGetPathFromIDListA
SHFileOperationW
ExtractIconEx
SHIsFileAvailableOffline
SHBindToParent
SHGetFolderLocation
SHEmptyRecycleBinW
WOWShellExecute
ShellAboutA
SHGetDiskFreeSpaceA
DragQueryFileW
SHCreateDirectoryExW
ShellAboutW
ExtractIconExW
SHGetSpecialFolderPathW
SHGetPathFromIDList
SHPathPrepareForWriteA
SHGetDataFromIDListW
SHQueryRecycleBinA
ShellExecuteExW
SHQueryRecycleBinW
ShellExecuteExA
SHGetFileInfoA
DragQueryFileAorW

ole32

OleCreateLinkEx
OleRegEnumFormatEtc
CoWaitForMultipleHandles
OleDestroyMenuDescriptor
CoGetObjectContext
CreateGenericComposite
OleCreateFromData
OleCreateLinkFromData
OleBuildVersion
UtGetDvtd16Info
CoInitialize
OleInitialize
CoRegisterMessageFilter
OleGetIconOfFile
CoGetCallContext
CoGetTreatAsClass
OleLoadFromStream
WdtpInterfacePointer_UserUnmarshal
CoReleaseServerProcess
CoIsHandlerConnected
CoQueryProxyBlanket
StgGetIFillLockBytesOnFile
CoRegisterSurrogate
CreateAntiMoniker
FreePropVariantArray
UtGetDvtd32Info
CreateFileMoniker
CoEnableCallCancellation
CoTaskMemAlloc
StgCreateDocfile
HBITMAP_UserSize
CoGetClassVersion
DcomChannelSetHResult
HBITMAP_UserMarshal
STGMEDIUM_UserUnmarshal
CoSwitchCallContext
CoFreeUnusedLibraries
CoCreateGuid
WdtpInterfacePointer_UserMarshal
OleCreateStaticFromData
StgCreatePropSetStg
IsEqualGUID
StgGetIFillLockBytesOnILockBytes
RevokeDragDrop
OleRun
CoDeactivateObject
ReadOleStg
ReadStringStream
HWND_UserUnmarshal
CreateDataAdviseHolder
OleLockRunning
SetConvertStg
GetClassFile
CreateObjrefMoniker
CoRevertToSelf
OleInitializeWOW
OleCreateEx
WriteFmtUserTypeStg
CoQueryAuthenticationServices
GetHGlobalFromStream
OleFlushClipboard
CoSuspendClassObjects
CreateOleAdviseHolder
HDC_UserFree
WriteClassStg
WdtpInterfacePointer_UserFree
HWND_UserSize
STGMEDIUM_UserMarshal
OleDraw
HPALETTE_UserUnmarshal
CoGetStdMarshalEx
CoSetCancelObject
CoFreeLibrary
CoRegisterChannelHook
CoUnmarshalInterface
PropStgNameToFmtId
OleConvertIStorageToOLESTREAMEx
OleTranslateAccelerator
CreateDataCache
BindMoniker
CoBuildVersion
CoReleaseMarshalData
CoGetCurrentProcess
StringFromGUID2
CoFreeAllLibraries

shlwapi

StrChrIA
StrStrIW
StrRChrA
StrStrA
StrChrA
StrCmpNIA
StrRChrW
StrChrIW
StrRStrIW
StrStrW
StrRChrIW

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.2
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

356efdc5ffff634b761e8ffc51317eb4

Code Sign

66:68:25:cc:9e:d2:2a:6e:bb:07:b7:d6:cc:27:94:72Certificate

Extended Key Usages

9a:34:48:c1:42:b8:2c:4d:13:fb:73:47:20:29:54:d8:48:d8:28:38Signer

Signature Validations

Verification

01/12/2022, 14:35 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

shlwapi

Sections

.text Size: 296KB - Virtual size: 296KB

.2 Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 7KB

.reloc Size: 1KB - Virtual size: 1KB

66:68:25:cc:9e:d2:2a:6e:bb:07:b7:d6:cc:27:94:72
Certificate

9a:34:48:c1:42:b8:2c:4d:13:fb:73:47:20:29:54:d8:48:d8:28:38
Signer

01/12/2022, 14:35
Valid: false

.text
Size: 296KB - Virtual size: 296KB

.2
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 7KB

.reloc
Size: 1KB - Virtual size: 1KB