cda3ee3c520be37713dee22150bcba180ff40e44a48f4ed5cc2b97a9f8275406

Sharing

Copy URL Twitter E-mail

General

Target

cda3ee3c520be37713dee22150bcba180ff40e44a48f4ed5cc2b97a9f8275406
Size

218KB
MD5

3f7a52310e300f87cd7bb96d3edf273d
SHA1

21ad23b0c59840d152ef2d57f9dd7b9e8cf3a8b4
SHA256

cda3ee3c520be37713dee22150bcba180ff40e44a48f4ed5cc2b97a9f8275406
SHA512

d79962be7a2dfe907f44e8aaea9e424a97a18586ae8aac02973684365d3d8292e159762dbe0d20b1a056f941c3956f53362db0f9f822377eab8070a2bdaee91f
SSDEEP

3072:S8qYV6meVNnlHWW0iM1ab8JFI6snmUujw8BPCyKTSh4nSk0vnJzvFqkt:1tBeVNWiMIKI5BIfah+4nSPJ0A

Score

N/A

Malware Config

Signatures

Files

cda3ee3c520be37713dee22150bcba180ff40e44a48f4ed5cc2b97a9f8275406
.exe windows x86

bcc1ca29cd7e57c0e4f0806f1f2397a1

Code Sign

27:1d:af:90:4f:a2:c0:ac:4b:f6:50:de:c0:42:0a:20
Certificate

Issuer

CN=LaYmbPFcbSVsmoT

Not Before

02/04/2012, 12:12

Not After

31/12/2039, 23:59

Subject

CN=LaYmbPFcbSVsmoT

Extended Key Usages

ExtKeyUsageCodeSigning

48:fb:06:fc:57:8d:a9:26:9b:43:cd:07:b4:9f:34:0f:b0:48:60:83
Signer

Actual PE Digest

48:fb:06:fc:57:8d:a9:26:9b:43:cd:07:b4:9f:34:0f:b0:48:60:83

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=LaYmbPFcbSVsmoT

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrcatA
CreateFileA
VirtualAlloc
InterlockedCompareExchange
AddAtomA

advapi32

RegOpenKeyA

shlwapi

PathMakeSystemFolderW
SHRegSetPathW
SHRegEnumUSKeyA
UrlEscapeA
StrStrA
SHDeleteValueW
PathAddExtensionA
PathAppendA
StrToIntA
StrStrIA
UrlIsOpaqueA
StrNCatW
SHRegEnumUSValueA
SHCopyKeyA
PathIsRelativeW
UrlIsW
PathSearchAndQualifyA
PathIsFileSpecW
SHGetValueA
StrRChrA
PathRemoveArgsW
ChrCmpIA
PathBuildRootW
UrlCombineW
PathMatchSpecW
StrRetToStrW
PathRemoveFileSpecW
StrRChrW
StrIsIntlEqualW
PathCompactPathExW
PathUndecorateA
PathIsPrefixA
PathIsUNCServerShareW
PathCompactPathExA
PathFindExtensionW
StrCmpNA
StrFormatKBSizeW
PathAddExtensionW
SHSetValueA
SHSkipJunction
PathCombineW
PathRemoveBlanksW
UrlIsNoHistoryA
SHOpenRegStreamW
ord16
SHEnumValueA
SHRegWriteUSValueA
UrlGetPartA
StrCSpnA
StrCSpnW
PathQuoteSpacesW
UrlCreateFromPathW
PathIsUNCA
SHRegQueryInfoUSKeyW
ColorRGBToHLS
SHSetThreadRef
StrSpnA
UrlCompareA
ColorHLSToRGB
PathCreateFromUrlW
PathIsSameRootW
PathFileExistsW
StrFromTimeIntervalW
HashData
SHRegDeleteUSValueA
StrCSpnIW
SHRegDeleteEmptyUSKeyW
AssocQueryStringByKeyA
StrRetToBufA
PathUndecorateW
StrChrIA
ColorAdjustLuma
IntlStrEqWorkerA
UrlApplySchemeW
StrTrimW
PathGetCharTypeW
SHIsLowMemoryMachine
AssocQueryStringByKeyW
StrRetToBufW
UrlEscapeW
PathIsPrefixW
PathIsUNCServerW
SHGetInverseCMAP
StrDupW
PathIsRelativeA

Sections

.text
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcc1ca29cd7e57c0e4f0806f1f2397a1

Code Sign

27:1d:af:90:4f:a2:c0:ac:4b:f6:50:de:c0:42:0a:20Certificate

Extended Key Usages

48:fb:06:fc:57:8d:a9:26:9b:43:cd:07:b4:9f:34:0f:b0:48:60:83Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

Sections

.text Size: 213KB - Virtual size: 213KB

.data Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 472B

27:1d:af:90:4f:a2:c0:ac:4b:f6:50:de:c0:42:0a:20
Certificate

48:fb:06:fc:57:8d:a9:26:9b:43:cd:07:b4:9f:34:0f:b0:48:60:83
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 213KB - Virtual size: 213KB

.data
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 472B