618b66ebd98be503e3a0521f1f96a609d8338f800d65877f258ec6340023e287

Sharing

Copy URL

Twitter E-mail

General

Target

618b66ebd98be503e3a0521f1f96a609d8338f800d65877f258ec6340023e287
Size

321KB
MD5

fc272ce7fefc350db5727354e39dd423
SHA1

1327d500a09bc115b2b7caac85b1b74f06dc2ef8
SHA256

618b66ebd98be503e3a0521f1f96a609d8338f800d65877f258ec6340023e287
SHA512

d84c09f15b991e79c342ee4411f4137bb65ae9779d266680df841494ba5ceeb15d17d7fa3b2ca691322763d22a4d35b97c6f165779a65ddf0239c2fdfa321bec
SSDEEP

3072:lNQftfClRajNsEYXFBZU1HJAPCXjUeJs2raRLoO7mbD7R9nIxF+l6qFUT+aqNV40:lNatAaz68H0Kp24aX7Sp9nkF+oTuEjET

Score

N/A

Malware Config

Signatures

Files

618b66ebd98be503e3a0521f1f96a609d8338f800d65877f258ec6340023e287
.exe windows x86

d5787ae9efc9da3ef24de0f8eaeca9b1

Code Sign

53:7c:25:95:65:02:ad:57:b4:6f:ee:78:49:b9:b1:3e
Certificate

Issuer

CN=y2Js

Not Before

15-06-2012 15:41

Not After

31-12-2039 23:59

Subject

CN=y2Js

Extended Key Usages

ExtKeyUsageCodeSigning

95:4a:29:de:a4:6e:be:e2:5b:6c:2b:4c:6b:f3:d4:52:52:31:bc:e3
Signer

Actual PE Digest

95:4a:29:de:a4:6e:be:e2:5b:6c:2b:4c:6b:f3:d4:52:52:31:bc:e3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=y2Js

01-12-2022 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
LoadLibraryA
GetProcAddress
GetModuleHandleA

user32

SetClassLongA
PostQuitMessage
DefWindowProcA
GetDlgItem
SetScrollRange
SetScrollPos
GetWindowLongA
GetParent
SetDlgItemInt
InvalidateRect
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA

gdi32

GetStockObject
DeleteObject
CreateSolidBrush

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5787ae9efc9da3ef24de0f8eaeca9b1

Code Sign

53:7c:25:95:65:02:ad:57:b4:6f:ee:78:49:b9:b1:3eCertificate

Extended Key Usages

95:4a:29:de:a4:6e:be:e2:5b:6c:2b:4c:6b:f3:d4:52:52:31:bc:e3Signer

Signature Validations

Verification

01-12-2022 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 281KB - Virtual size: 281KB

.data4 Size: 10KB - Virtual size: 9KB

.data3 Size: 10KB - Virtual size: 9KB

.data2 Size: 10KB - Virtual size: 9KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 348B

53:7c:25:95:65:02:ad:57:b4:6f:ee:78:49:b9:b1:3e
Certificate

95:4a:29:de:a4:6e:be:e2:5b:6c:2b:4c:6b:f3:d4:52:52:31:bc:e3
Signer

01-12-2022 14:34
Valid: false

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 281KB - Virtual size: 281KB

.data4
Size: 10KB - Virtual size: 9KB

.data3
Size: 10KB - Virtual size: 9KB

.data2
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 348B