a866b8c6bca69c859a115cd3d31ee3f78e6381a7c21cecf539c109b16b357b9c

Sharing

Copy URL Twitter E-mail

General

Target

a866b8c6bca69c859a115cd3d31ee3f78e6381a7c21cecf539c109b16b357b9c
Size

312KB
MD5

a29346af7dcb2c1ff8ddd1853cac1808
SHA1

5eb368f3b16c1b32e97bc53340819e50db6514b1
SHA256

a866b8c6bca69c859a115cd3d31ee3f78e6381a7c21cecf539c109b16b357b9c
SHA512

8f8d085ee4da8801941842e00f01cf9c53c265e09c1e9eb0ab72a26219b63cabcc7f6e10f821e775e803c6a448679afe6fdef1eb348563b732ee68d22c6aae3e
SSDEEP

6144:ZqNth2NjzpFVBuqQOiFJQK3BqfZ4/Psc3KG6iDL1hz6Aaw6qaNYitL:62Nj1FVYOiXRBqykcr6ithz6NdvL

Score

N/A

Malware Config

Signatures

Files

a866b8c6bca69c859a115cd3d31ee3f78e6381a7c21cecf539c109b16b357b9c
.exe windows x86

356efdc5ffff634b761e8ffc51317eb4

Code Sign

66:68:25:cc:9e:d2:2a:6e:bb:07:b7:d6:cc:27:94:72
Certificate

Issuer

CN=ssuxxrmsyabbmlcgdpbbdjvmqqqvfixufdfkmrunnlhxuauinerpkoznecbetcnrdbrxkmqcqgagqbbslnwgxjjwxqbmpqvilaxmsxtnofiebsqqptfkuoxcifbqgqcbmxlwrsdyxkajbdmkgofahuryjcheipafiapilncryjtgsgvncxzuotekncujibkkldlygxghkdxxfagrkgocxwcnvjibzgljwiwjjhljqyryqfmqakqwopmmxkmuxoqaeelwcdutmrzvdoskgptvwgqrtgpsucrjmpqmsptjgkqmasgcyngedbbscfvsjyprkzruqybjvtcqlfuaoegyteqfadbgkcrgczndggrbsrsorlgpzbotcoobfdbnqlmqhwxkylwutpphcuvk

Not Before

27/09/2012, 05:01

Not After

31/12/2039, 23:59

Subject

CN=ssuxxrmsyabbmlcgdpbbdjvmqqqvfixufdfkmrunnlhxuauinerpkoznecbetcnrdbrxkmqcqgagqbbslnwgxjjwxqbmpqvilaxmsxtnofiebsqqptfkuoxcifbqgqcbmxlwrsdyxkajbdmkgofahuryjcheipafiapilncryjtgsgvncxzuotekncujibkkldlygxghkdxxfagrkgocxwcnvjibzgljwiwjjhljqyryqfmqakqwopmmxkmuxoqaeelwcdutmrzvdoskgptvwgqrtgpsucrjmpqmsptjgkqmasgcyngedbbscfvsjyprkzruqybjvtcqlfuaoegyteqfadbgkcrgczndggrbsrsorlgpzbotcoobfdbnqlmqhwxkylwutpphcuvk

Extended Key Usages

ExtKeyUsageCodeSigning

f9:15:97:2f:1c:00:55:61:91:88:88:05:23:01:c4:72:c3:a6:4e:47
Signer

Actual PE Digest

f9:15:97:2f:1c:00:55:61:91:88:88:05:23:01:c4:72:c3:a6:4e:47

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ssuxxrmsyabbmlcgdpbbdjvmqqqvfixufdfkmrunnlhxuauinerpkoznecbetcnrdbrxkmqcqgagqbbslnwgxjjwxqbmpqvilaxmsxtnofiebsqqptfkuoxcifbqgqcbmxlwrsdyxkajbdmkgofahuryjcheipafiapilncryjtgsgvncxzuotekncujibkkldlygxghkdxxfagrkgocxwcnvjibzgljwiwjjhljqyryqfmqakqwopmmxkmuxoqaeelwcdutmrzvdoskgptvwgqrtgpsucrjmpqmsptjgkqmasgcyngedbbscfvsjyprkzruqybjvtcqlfuaoegyteqfadbgkcrgczndggrbsrsorlgpzbotcoobfdbnqlmqhwxkylwutpphcuvk

01/12/2022, 14:35
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
VirtualAlloc
LoadLibraryW
CreateFileW
GetProcAddress
LoadLibraryA
lstrcatW
GetConsoleAliasExesLengthW
SetTapeParameters
SetConsoleScreenBufferSize
GetLogicalDriveStringsA
GetSystemTime
GetSystemDefaultUILanguage
GetQueuedCompletionStatus
WriteConsoleOutputW
HeapAlloc
GetUserDefaultUILanguage
GlobalDeleteAtom
SetProcessWorkingSetSize
GetNumberOfConsoleMouseButtons
TerminateThread
GetLocaleInfoA
CreateDirectoryExA
CopyFileW
GetWindowsDirectoryA
Heap32ListFirst
HeapSize
PurgeComm
PulseEvent
GetExitCodeThread
GetProfileSectionW
FreeUserPhysicalPages
ExitThread
ConvertThreadToFiber
OpenFile
EnumDateFormatsExW
GetNamedPipeHandleStateW
CreateMailslotW
GetPrivateProfileStructW
ProcessIdToSessionId
DeleteFileW
GetProcessVersion
FindFirstFileW
LocalAlloc
CreateDirectoryW
MoveFileExW
SwitchToFiber
GetThreadContext
SetTapePosition
GlobalFix
FindClose
GetVersionExW
ConnectNamedPipe
GetStringTypeExA
GetProfileSectionA
GetVolumeNameForVolumeMountPointW
SuspendThread
GetAtomNameW
GetVolumePathNameA
GetShortPathNameA
CreateThread
SetCalendarInfoW
GetShortPathNameW
GetLongPathNameA
DeleteVolumeMountPointW
SystemTimeToTzSpecificLocalTime
GetCompressedFileSizeW
VirtualLock
GlobalFindAtomW
GetFileType
SetFileAttributesW
DeleteFiber
GetCompressedFileSizeA
BackupSeek
WriteConsoleInputA
WaitNamedPipeA
VerifyVersionInfoW
WriteConsoleW
UnregisterWait
GetNamedPipeHandleStateA
QueryPerformanceFrequency
GetFullPathNameW
DisableThreadLibraryCalls
GetPrivateProfileStringA
QueryDosDeviceW
GetSystemPowerStatus
SetEnvironmentVariableA
lstrcmpW
CreateHardLinkA
ReadConsoleOutputAttribute
SleepEx
GlobalMemoryStatusEx
GetProfileStringW
InterlockedIncrement
SetConsoleCursor
GetSystemDefaultLCID
WriteConsoleOutputCharacterA
GetEnvironmentStringsW
GetCurrentThread
SetConsoleTextAttribute
SetEnvironmentVariableW
GetDriveTypeW
GetCurrencyFormatA

user32

LoadIconA

shell32

ShellExecuteW
DragAcceptFiles
SHGetSpecialFolderPathA
SHFormatDrive
SHAppBarMessage
DoEnvironmentSubstW
SHCreateDirectoryExA
Shell_NotifyIconW
SHGetPathFromIDListW
ShellExecuteEx
SHGetInstanceExplorer
SHLoadInProc
DragQueryFile
ExtractIconExA
SHEmptyRecycleBinA
DuplicateIcon
SHGetFileInfoW
SHGetSettings
DragQueryFileA
SHGetFileInfo
ExtractAssociatedIconExA
SHFileOperationA
Shell_NotifyIconA
SHBrowseForFolderW
SHChangeNotify
ShellHookProc
SHGetPathFromIDListA
SHFileOperationW
ExtractIconEx
SHIsFileAvailableOffline
SHBindToParent
SHGetFolderLocation
SHEmptyRecycleBinW
WOWShellExecute
ShellAboutA
SHGetDiskFreeSpaceA
DragQueryFileW
SHCreateDirectoryExW
ShellAboutW
ExtractIconExW
SHGetSpecialFolderPathW
SHGetPathFromIDList
SHPathPrepareForWriteA
SHGetDataFromIDListW
SHQueryRecycleBinA
ShellExecuteExW
SHQueryRecycleBinW
ShellExecuteExA
SHGetFileInfoA
DragQueryFileAorW

ole32

OleCreateLinkEx
OleRegEnumFormatEtc
CoWaitForMultipleHandles
OleDestroyMenuDescriptor
CoGetObjectContext
CreateGenericComposite
OleCreateFromData
OleCreateLinkFromData
OleBuildVersion
UtGetDvtd16Info
CoInitialize
OleInitialize
CoRegisterMessageFilter
OleGetIconOfFile
CoGetCallContext
CoGetTreatAsClass
OleLoadFromStream
WdtpInterfacePointer_UserUnmarshal
CoReleaseServerProcess
CoIsHandlerConnected
CoQueryProxyBlanket
StgGetIFillLockBytesOnFile
CoRegisterSurrogate
CreateAntiMoniker
FreePropVariantArray
UtGetDvtd32Info
CreateFileMoniker
CoEnableCallCancellation
CoTaskMemAlloc
StgCreateDocfile
HBITMAP_UserSize
CoGetClassVersion
DcomChannelSetHResult
HBITMAP_UserMarshal
STGMEDIUM_UserUnmarshal
CoSwitchCallContext
CoFreeUnusedLibraries
CoCreateGuid
WdtpInterfacePointer_UserMarshal
OleCreateStaticFromData
StgCreatePropSetStg
IsEqualGUID
StgGetIFillLockBytesOnILockBytes
RevokeDragDrop
OleRun
CoDeactivateObject
ReadOleStg
ReadStringStream
HWND_UserUnmarshal
CreateDataAdviseHolder
OleLockRunning
SetConvertStg
GetClassFile
CreateObjrefMoniker
CoRevertToSelf
OleInitializeWOW
OleCreateEx
WriteFmtUserTypeStg
CoQueryAuthenticationServices
GetHGlobalFromStream
OleFlushClipboard
CoSuspendClassObjects
CreateOleAdviseHolder
HDC_UserFree
WriteClassStg
WdtpInterfacePointer_UserFree
HWND_UserSize
STGMEDIUM_UserMarshal
OleDraw
HPALETTE_UserUnmarshal
CoGetStdMarshalEx
CoSetCancelObject
CoFreeLibrary
CoRegisterChannelHook
CoUnmarshalInterface
PropStgNameToFmtId
OleConvertIStorageToOLESTREAMEx
OleTranslateAccelerator
CreateDataCache
BindMoniker
CoBuildVersion
CoReleaseMarshalData
CoGetCurrentProcess
StringFromGUID2
CoFreeAllLibraries

shlwapi

StrChrIA
StrStrIW
StrRChrA
StrStrA
StrChrA
StrCmpNIA
StrRChrW
StrChrIW
StrRStrIW
StrStrW
StrRChrIW

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.2
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

356efdc5ffff634b761e8ffc51317eb4

Code Sign

66:68:25:cc:9e:d2:2a:6e:bb:07:b7:d6:cc:27:94:72Certificate

Extended Key Usages

f9:15:97:2f:1c:00:55:61:91:88:88:05:23:01:c4:72:c3:a6:4e:47Signer

Signature Validations

Verification

01/12/2022, 14:35 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

shlwapi

Sections

.text Size: 296KB - Virtual size: 296KB

.2 Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 7KB

.reloc Size: 1KB - Virtual size: 1KB

66:68:25:cc:9e:d2:2a:6e:bb:07:b7:d6:cc:27:94:72
Certificate

f9:15:97:2f:1c:00:55:61:91:88:88:05:23:01:c4:72:c3:a6:4e:47
Signer

01/12/2022, 14:35
Valid: false

.text
Size: 296KB - Virtual size: 296KB

.2
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 7KB

.reloc
Size: 1KB - Virtual size: 1KB