b4c970f8c70bb3dcfdc23b8f3f6d573c9e1b9126685f790880782ed39b2618a3

Sharing

Copy URL Twitter E-mail

General

Target

b4c970f8c70bb3dcfdc23b8f3f6d573c9e1b9126685f790880782ed39b2618a3
Size

36KB
MD5

44d2b9ff8b1ccce69259e8fa614dd758
SHA1

c8caa15366f2debc20f4550763450ba6cb9770aa
SHA256

b4c970f8c70bb3dcfdc23b8f3f6d573c9e1b9126685f790880782ed39b2618a3
SHA512

e8918f758b377356e3f00d95a4346ca3f81e3147b7db40ee7d22434cbb82360856d914ea0e245326e2617d5406fe68c000cdd5e983cd389b98f8a1fdcce148ef
SSDEEP

384:sUgwkK8DhiHUTmfWd558tEkNTo8Pe0qeWzIwHyM78j8YhtEtW:t1tWwIutOUeXISy4yyw

Score

N/A

Malware Config

Signatures

Files

b4c970f8c70bb3dcfdc23b8f3f6d573c9e1b9126685f790880782ed39b2618a3
.exe windows x86

6333ae00d4dc16674ebe4cc130f93bc9

Code Sign

6b:42:2b:58:f9:92:b6:be:4d:9d:1c:f0:5a:67:f8:22
Certificate

Issuer

CN=IZVNWwyyCrSsVcvsQlmBYJGo9

Not Before

24/04/2012, 16:45

Not After

31/12/2039, 23:59

Subject

CN=IZVNWwyyCrSsVcvsQlmBYJGo9

Extended Key Usages

ExtKeyUsageCodeSigning

43:8a:65:83:4a:27:d1:28:8b:38:99:90:ed:7b:bd:ae:31:c3:49:5c
Signer

Actual PE Digest

43:8a:65:83:4a:27:d1:28:8b:38:99:90:ed:7b:bd:ae:31:c3:49:5c

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=IZVNWwyyCrSsVcvsQlmBYJGo9

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
CreateFileA

gdi32

GetStockObject

msvcrt

memcpy

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6333ae00d4dc16674ebe4cc130f93bc9

Code Sign

6b:42:2b:58:f9:92:b6:be:4d:9d:1c:f0:5a:67:f8:22Certificate

Extended Key Usages

43:8a:65:83:4a:27:d1:28:8b:38:99:90:ed:7b:bd:ae:31:c3:49:5cSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

gdi32

msvcrt

Sections

.text Size: 28KB - Virtual size: 28KB

.text2 Size: 1024B - Virtual size: 1000B

.text3 Size: 1024B - Virtual size: 1000B

.data Size: 512B - Virtual size: 464B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 88B

6b:42:2b:58:f9:92:b6:be:4d:9d:1c:f0:5a:67:f8:22
Certificate

43:8a:65:83:4a:27:d1:28:8b:38:99:90:ed:7b:bd:ae:31:c3:49:5c
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 28KB - Virtual size: 28KB

.text2
Size: 1024B - Virtual size: 1000B

.text3
Size: 1024B - Virtual size: 1000B

.data
Size: 512B - Virtual size: 464B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 88B