836b76cc610ad4192a6465b29c7fd317216eb876ee0af13a99e201f9eb1c98ac

Sharing

Copy URL Twitter E-mail

General

Target

836b76cc610ad4192a6465b29c7fd317216eb876ee0af13a99e201f9eb1c98ac
Size

421KB
MD5

8f136f52426aae4fbc6919dd4e431a06
SHA1

805f2164cc7861fa6a3b41d03bb42355b6467b4f
SHA256

836b76cc610ad4192a6465b29c7fd317216eb876ee0af13a99e201f9eb1c98ac
SHA512

4da8e434c5cfcba5a2cd7f515d06b690862011eecea0f7444b1ffa3d4b7bc66bb27dad6b3b7f5cc7ffbffd644207f5ae837ef7eca820cf4a7004eaf324618bca
SSDEEP

6144:QhRzU93ONRqP4JWr/kwQGbMjF2WnxQoq9WKXijxe0UyjSTF0/Vxo:AU93OeeWr/kdGbMj7xWdijwsSTF0/A

Score

N/A

Malware Config

Signatures

Files

836b76cc610ad4192a6465b29c7fd317216eb876ee0af13a99e201f9eb1c98ac
.exe windows x86

a94b3c90624c554d104690f82bcdef1f

Code Sign

33:77:3f:be:c8:90:ee:64:b3:d9:40:45:a9:61:39:a0
Certificate

Issuer

CN=V9tkjWrRJqRsU382xSgDwxPogTm8ScP6khel5ZskMbtf6ojypJssw8BsXaQ2kPIsEE3LV4LTvLY9b4kNbwO1CekgD5TIO21x54R1KE5GTtJvwhVPVlgJUUY5DLnYl1c6xUDtLrFbIi4vJko8uVNVGr7E726rccijLinnqehhvOmfMItAsIqMBdJ3ZkZFU9SKgW6Tu2ghBl2LQ6wteMcqwKsMZKZ9mA2qihR7ZWrV5NwYpfntYPbSDNnNC52eFonIWkMYhickQMjHe9pHGfu5qf9o8J7ddA2r4NWpUvrZyxSG

Not Before

26/10/2012, 20:40

Not After

31/12/2039, 23:59

Subject

CN=V9tkjWrRJqRsU382xSgDwxPogTm8ScP6khel5ZskMbtf6ojypJssw8BsXaQ2kPIsEE3LV4LTvLY9b4kNbwO1CekgD5TIO21x54R1KE5GTtJvwhVPVlgJUUY5DLnYl1c6xUDtLrFbIi4vJko8uVNVGr7E726rccijLinnqehhvOmfMItAsIqMBdJ3ZkZFU9SKgW6Tu2ghBl2LQ6wteMcqwKsMZKZ9mA2qihR7ZWrV5NwYpfntYPbSDNnNC52eFonIWkMYhickQMjHe9pHGfu5qf9o8J7ddA2r4NWpUvrZyxSG

Extended Key Usages

ExtKeyUsageCodeSigning

b9:a5:46:de:9f:0d:20:59:be:85:58:13:df:0b:79:95:a9:20:cb:4d
Signer

Actual PE Digest

b9:a5:46:de:9f:0d:20:59:be:85:58:13:df:0b:79:95:a9:20:cb:4d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=V9tkjWrRJqRsU382xSgDwxPogTm8ScP6khel5ZskMbtf6ojypJssw8BsXaQ2kPIsEE3LV4LTvLY9b4kNbwO1CekgD5TIO21x54R1KE5GTtJvwhVPVlgJUUY5DLnYl1c6xUDtLrFbIi4vJko8uVNVGr7E726rccijLinnqehhvOmfMItAsIqMBdJ3ZkZFU9SKgW6Tu2ghBl2LQ6wteMcqwKsMZKZ9mA2qihR7ZWrV5NwYpfntYPbSDNnNC52eFonIWkMYhickQMjHe9pHGfu5qf9o8J7ddA2r4NWpUvrZyxSG

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
CreateFileW
VirtualAlloc
VirtualFree
lstrcmpiW
lstrlenW
FormatMessageW
lstrcatW
GetCurrentProcess
SetPriorityClass
GetCommandLineW
GetStartupInfoW
GetModuleHandleW
ExitProcess
GetLocaleInfoW
InitializeCriticalSection
CreateMutexW
LoadLibraryW
GetProcAddress
CreateThread
ReleaseMutex
FreeLibrary
SetProcessShutdownParameters
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
CloseHandle
GetCurrentDirectoryW
GetLastError
GetCurrentThreadId
lstrcpynW
LocalFree
LocalAlloc
lstrcpyW
GetProcessHeap
MultiByteToWideChar
GetThreadTimes
OpenProcess
GetPriorityClass
GetCurrentProcessId
SetProcessAffinityMask
GetProcessAffinityMask
TerminateProcess
CreateProcessW
VerifyVersionInfoW
HeapFree
HeapReAlloc
HeapAlloc
SetEvent
CreateEventW
lstrcmpW
DeleteCriticalSection
LoadLibraryA
GetVersionExA
GetNumberFormatW

user32

GetKeyState
IsRectEmpty
LoadStringA
LoadCursorFromFileW
ChangeDisplaySettingsExA
EditWndProc
CharUpperBuffW
UnregisterHotKey
GetCursorPos
DeferWindowPos
CharToOemBuffA
CreateMenu
InsertMenuW
CloseDesktop

gdi32

CreateSolidBrush
SelectObject
BitBlt
CreatePen
GetStockObject
FillRgn
SetRectRgn
CombineRgn
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
MoveToEx
DeleteDC
LineTo
DeleteObject
GetDeviceCaps
CreateRectRgn

advapi32

RegOpenKeyExW

comctl32

ImageList_SetIconSize
ImageList_ReplaceIcon
ImageList_Create
CreateStatusWindowW
ImageList_Remove

Sections

.text
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a94b3c90624c554d104690f82bcdef1f

Code Sign

33:77:3f:be:c8:90:ee:64:b3:d9:40:45:a9:61:39:a0Certificate

Extended Key Usages

b9:a5:46:de:9f:0d:20:59:be:85:58:13:df:0b:79:95:a9:20:cb:4dSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

Sections

.text Size: 403KB - Virtual size: 402KB

.data Size: 12KB - Virtual size: 12KB

.data2 Size: 1024B - Virtual size: 1000B

.reloc Size: 1024B - Virtual size: 524B

33:77:3f:be:c8:90:ee:64:b3:d9:40:45:a9:61:39:a0
Certificate

b9:a5:46:de:9f:0d:20:59:be:85:58:13:df:0b:79:95:a9:20:cb:4d
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 403KB - Virtual size: 402KB

.data
Size: 12KB - Virtual size: 12KB

.data2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 1024B - Virtual size: 524B