c35e4290688c2177e8a0c5ac21ea3879da33c86b67ede5254a6583cae4942c4a

Sharing

Copy URL Twitter E-mail

General

Target

c35e4290688c2177e8a0c5ac21ea3879da33c86b67ede5254a6583cae4942c4a
Size

386KB
MD5

17f6dbff6d7bd56912a13dfa91d81221
SHA1

ffc4764716d592a0391360cc408fd0ef7d8bf721
SHA256

c35e4290688c2177e8a0c5ac21ea3879da33c86b67ede5254a6583cae4942c4a
SHA512

5dcd264f639604d6094341f2664063c276573fa6dbc8fd8018463df771a36b60f14ba2a2fd6d12b79db3fbd841d7ba63fff81d3a6289232e68e93a6d19bddd82
SSDEEP

6144:xrmpc/38BzsNwowduU7dY2PmJjshzchJ9qZoIRBSC0q7wOO+T8oK:B+mEzsNwJY8a2PgiM4nRqIxU

Score

N/A

Malware Config

Signatures

Files

c35e4290688c2177e8a0c5ac21ea3879da33c86b67ede5254a6583cae4942c4a
.exe windows x86

7d12d78e07a3550d1f7a742a6d765980

Code Sign

48:ea:43:35:3b:27:bf:71:b9:b5:fb:16:1e:6c:56:07
Certificate

Issuer

CN=31244543443555315325141331354213212455214442315133142325222523232122522533423342521345424541525512451115314322424155323254435412411115243344434431351552323321422451333443551341413144343123333341123133325341411554232155552132533431212423411241235535214141344222422413553512553321341245512155435433532212555214322515112152421432324315233531355333214543221525154225251231513232553212344211435135441334255332215441324224352112112121424323522235514213115123441544325254423124251431253115441431323215224253125441523341335545532534533252152441524345144223553355353153332211145234153154515424551233511142344422333151312254221534325143353314342441553222522451225122253432141342311213315323513134351314435534343234144252151213225113341231454333454442225311525455154535212431321233112131333512444444155215342141152154451323125241543244215252221432212424425142335241424325331223522232223431254121444352422412512135452535233241454151111522141132512341523255432545333344142531515544355324254222151552355141531123534453315413411154321321552552234211112441431313115451435353412212444313213315431315134513312432215113541213232232352212524415235432232242344332541434352322422315114553141233112144155234533112545433531542434232122351535333551231115143224155533355545345441522452553324415234224213212335444251131344141352222213114243445534233552211524512454331532113225442153431235252541511355324512323232434532513254115453333451134154324252315534545245431353532414531333231143211422533455231345211154355113525514211521523342434453322112453115515515333441354525422423253522453535124133132152211525352523212222322521424125333312144414134141412512254324254251151454532213244331112133112245523231214231511454512513524545111541452124525215352455554351242214113442212434115231321253422411333313353431433243441324155544251132241234513124155522355231521444242111111222144542311142121242535315225553242413352435552535134251145242234452412244231321252534211333335454531221451253125225345534311314214112555555233542142421322225235413151513332324521212133213121235135451554251345153412523222545131513233251523525311212455211213421353412235522324325515512113511451551251445321145234423125213324223142113133231351532154221225122231535315512145152352315224315213212322121444422513235121541525524435515433515221433114212333353154153212353325231331233142114132523232454511353535424454543523442344444525515231544554353235545342532515125432432152114143545242532344214522125225121553335211143212215351353111413221344243153342444423311345112252242412354545411235343243111521454153421423312515252522321143332113551254434251335451455435244313215454141134222521322343352141115533513554544114122133541215334353143122144331354124331455151141222541441512234351513441454421321414223344544123345252114325235353233454541525452142313132113412441335524242422331233445524512125335343444441524435333355212133524254154314153423415353152143225125452514253211322455321235223445113123445213322152242454233155245455355522411415414542534225215125512524423412155132133435412244232222521143443533314253313351141311121315332231243212454431231135154544231252213411242543143133133525421243453534143353515125132212415321335425115552214355134131124435135424213453425451343523112532315122113354323235253523523421211333535454134515254211532542445554341251355535321123421441125432513424351221441335231421135512532452141211122441243353523513322115345142215332152231553353533251542322131244523154155243441213224545432525425235212245115545513352324343345524545523124541511442413122242245454152521123231315154351343543314224532225255125214553152344134341135232114313332525221223444412133252221534411332313254345511335114525345433535153551423131233522544142244441432435342215111224542434214552442554325132525335545234251322121324145443212253242542421122443314422432443332423121334225235455242213131444113522151211421222233151242412433442421242254414451554425523441414144115433135233231254353243133452144125141135422121511555143343522243342412434153521222355223123541542415355341425341112514553332121554144334313232334535233111533544353233243233535435151513122252223342514441332533411452421233355445344521154142233214422442555412452313145313244123134231335223413243555231123433253144213412431215525132134543233353321243245115432414123114543122415333242555445132253434554423133315534343313352243351245451124211414333454323331331443242114135144552215433423222541243122533532255525435441414111313153123333241155124131513353544443321112555251433411533414554155333532343215455433115223124534534542512242412132553343523545223211151141134334211534141213323145351321412553431325351243455132241421115133342515354211345133452152241525532221114255412352134534212425322224445515535213324135144511144541244245334255444141321255515225155414314243515115125332414445125143552352235342535154213544351515251231325155243453245113145412433324542243153135524313141531331142154533332431122332241242245345535223113553212331155311343451344145515433415351521342513341243255224535543441353532244415423

Not Before

16/11/2012, 06:09

Not After

31/12/2039, 23:59

Subject

CN=31244543443555315325141331354213212455214442315133142325222523232122522533423342521345424541525512451115314322424155323254435412411115243344434431351552323321422451333443551341413144343123333341123133325341411554232155552132533431212423411241235535214141344222422413553512553321341245512155435433532212555214322515112152421432324315233531355333214543221525154225251231513232553212344211435135441334255332215441324224352112112121424323522235514213115123441544325254423124251431253115441431323215224253125441523341335545532534533252152441524345144223553355353153332211145234153154515424551233511142344422333151312254221534325143353314342441553222522451225122253432141342311213315323513134351314435534343234144252151213225113341231454333454442225311525455154535212431321233112131333512444444155215342141152154451323125241543244215252221432212424425142335241424325331223522232223431254121444352422412512135452535233241454151111522141132512341523255432545333344142531515544355324254222151552355141531123534453315413411154321321552552234211112441431313115451435353412212444313213315431315134513312432215113541213232232352212524415235432232242344332541434352322422315114553141233112144155234533112545433531542434232122351535333551231115143224155533355545345441522452553324415234224213212335444251131344141352222213114243445534233552211524512454331532113225442153431235252541511355324512323232434532513254115453333451134154324252315534545245431353532414531333231143211422533455231345211154355113525514211521523342434453322112453115515515333441354525422423253522453535124133132152211525352523212222322521424125333312144414134141412512254324254251151454532213244331112133112245523231214231511454512513524545111541452124525215352455554351242214113442212434115231321253422411333313353431433243441324155544251132241234513124155522355231521444242111111222144542311142121242535315225553242413352435552535134251145242234452412244231321252534211333335454531221451253125225345534311314214112555555233542142421322225235413151513332324521212133213121235135451554251345153412523222545131513233251523525311212455211213421353412235522324325515512113511451551251445321145234423125213324223142113133231351532154221225122231535315512145152352315224315213212322121444422513235121541525524435515433515221433114212333353154153212353325231331233142114132523232454511353535424454543523442344444525515231544554353235545342532515125432432152114143545242532344214522125225121553335211143212215351353111413221344243153342444423311345112252242412354545411235343243111521454153421423312515252522321143332113551254434251335451455435244313215454141134222521322343352141115533513554544114122133541215334353143122144331354124331455151141222541441512234351513441454421321414223344544123345252114325235353233454541525452142313132113412441335524242422331233445524512125335343444441524435333355212133524254154314153423415353152143225125452514253211322455321235223445113123445213322152242454233155245455355522411415414542534225215125512524423412155132133435412244232222521143443533314253313351141311121315332231243212454431231135154544231252213411242543143133133525421243453534143353515125132212415321335425115552214355134131124435135424213453425451343523112532315122113354323235253523523421211333535454134515254211532542445554341251355535321123421441125432513424351221441335231421135512532452141211122441243353523513322115345142215332152231553353533251542322131244523154155243441213224545432525425235212245115545513352324343345524545523124541511442413122242245454152521123231315154351343543314224532225255125214553152344134341135232114313332525221223444412133252221534411332313254345511335114525345433535153551423131233522544142244441432435342215111224542434214552442554325132525335545234251322121324145443212253242542421122443314422432443332423121334225235455242213131444113522151211421222233151242412433442421242254414451554425523441414144115433135233231254353243133452144125141135422121511555143343522243342412434153521222355223123541542415355341425341112514553332121554144334313232334535233111533544353233243233535435151513122252223342514441332533411452421233355445344521154142233214422442555412452313145313244123134231335223413243555231123433253144213412431215525132134543233353321243245115432414123114543122415333242555445132253434554423133315534343313352243351245451124211414333454323331331443242114135144552215433423222541243122533532255525435441414111313153123333241155124131513353544443321112555251433411533414554155333532343215455433115223124534534542512242412132553343523545223211151141134334211534141213323145351321412553431325351243455132241421115133342515354211345133452152241525532221114255412352134534212425322224445515535213324135144511144541244245334255444141321255515225155414314243515115125332414445125143552352235342535154213544351515251231325155243453245113145412433324542243153135524313141531331142154533332431122332241242245345535223113553212331155311343451344145515433415351521342513341243255224535543441353532244415423

Extended Key Usages

ExtKeyUsageCodeSigning

0c:9b:de:bc:ee:c0:4d:c4:ba:1d:2f:1a:c3:58:f6:a6:39:f2:dd:8f
Signer

Actual PE Digest

0c:9b:de:bc:ee:c0:4d:c4:ba:1d:2f:1a:c3:58:f6:a6:39:f2:dd:8f

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=31244543443555315325141331354213212455214442315133142325222523232122522533423342521345424541525512451115314322424155323254435412411115243344434431351552323321422451333443551341413144343123333341123133325341411554232155552132533431212423411241235535214141344222422413553512553321341245512155435433532212555214322515112152421432324315233531355333214543221525154225251231513232553212344211435135441334255332215441324224352112112121424323522235514213115123441544325254423124251431253115441431323215224253125441523341335545532534533252152441524345144223553355353153332211145234153154515424551233511142344422333151312254221534325143353314342441553222522451225122253432141342311213315323513134351314435534343234144252151213225113341231454333454442225311525455154535212431321233112131333512444444155215342141152154451323125241543244215252221432212424425142335241424325331223522232223431254121444352422412512135452535233241454151111522141132512341523255432545333344142531515544355324254222151552355141531123534453315413411154321321552552234211112441431313115451435353412212444313213315431315134513312432215113541213232232352212524415235432232242344332541434352322422315114553141233112144155234533112545433531542434232122351535333551231115143224155533355545345441522452553324415234224213212335444251131344141352222213114243445534233552211524512454331532113225442153431235252541511355324512323232434532513254115453333451134154324252315534545245431353532414531333231143211422533455231345211154355113525514211521523342434453322112453115515515333441354525422423253522453535124133132152211525352523212222322521424125333312144414134141412512254324254251151454532213244331112133112245523231214231511454512513524545111541452124525215352455554351242214113442212434115231321253422411333313353431433243441324155544251132241234513124155522355231521444242111111222144542311142121242535315225553242413352435552535134251145242234452412244231321252534211333335454531221451253125225345534311314214112555555233542142421322225235413151513332324521212133213121235135451554251345153412523222545131513233251523525311212455211213421353412235522324325515512113511451551251445321145234423125213324223142113133231351532154221225122231535315512145152352315224315213212322121444422513235121541525524435515433515221433114212333353154153212353325231331233142114132523232454511353535424454543523442344444525515231544554353235545342532515125432432152114143545242532344214522125225121553335211143212215351353111413221344243153342444423311345112252242412354545411235343243111521454153421423312515252522321143332113551254434251335451455435244313215454141134222521322343352141115533513554544114122133541215334353143122144331354124331455151141222541441512234351513441454421321414223344544123345252114325235353233454541525452142313132113412441335524242422331233445524512125335343444441524435333355212133524254154314153423415353152143225125452514253211322455321235223445113123445213322152242454233155245455355522411415414542534225215125512524423412155132133435412244232222521143443533314253313351141311121315332231243212454431231135154544231252213411242543143133133525421243453534143353515125132212415321335425115552214355134131124435135424213453425451343523112532315122113354323235253523523421211333535454134515254211532542445554341251355535321123421441125432513424351221441335231421135512532452141211122441243353523513322115345142215332152231553353533251542322131244523154155243441213224545432525425235212245115545513352324343345524545523124541511442413122242245454152521123231315154351343543314224532225255125214553152344134341135232114313332525221223444412133252221534411332313254345511335114525345433535153551423131233522544142244441432435342215111224542434214552442554325132525335545234251322121324145443212253242542421122443314422432443332423121334225235455242213131444113522151211421222233151242412433442421242254414451554425523441414144115433135233231254353243133452144125141135422121511555143343522243342412434153521222355223123541542415355341425341112514553332121554144334313232334535233111533544353233243233535435151513122252223342514441332533411452421233355445344521154142233214422442555412452313145313244123134231335223413243555231123433253144213412431215525132134543233353321243245115432414123114543122415333242555445132253434554423133315534343313352243351245451124211414333454323331331443242114135144552215433423222541243122533532255525435441414111313153123333241155124131513353544443321112555251433411533414554155333532343215455433115223124534534542512242412132553343523545223211151141134334211534141213323145351321412553431325351243455132241421115133342515354211345133452152241525532221114255412352134534212425322224445515535213324135144511144541244245334255444141321255515225155414314243515115125332414445125143552352235342535154213544351515251231325155243453245113145412433324542243153135524313141531331142154533332431122332241242245345535223113553212331155311343451344145515433415351521342513341243255224535543441353532244415423

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessAffinityMask
OpenProcess
MultiByteToWideChar
GetThreadTimes
TerminateProcess
GetPriorityClass
lstrcmpW
SetEvent
CreateEventW
GetComputerNameW
Sleep
FreeLibrary
SetProcessAffinityMask
LoadLibraryA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentDirectoryW
SetUnhandledExceptionFilter
lstrcmpiW
GetTickCount
HeapSize
GetProcAddress
GetNumberFormatW
HeapReAlloc
lstrlenW
GetCurrentProcess
SetPriorityClass
GetCommandLineW
GetStartupInfoW
GetModuleHandleW
ExitProcess
CreateMutexW
GetCurrentProcessId
ProcessIdToSessionId
ReleaseMutex
SetProcessShutdownParameters
WaitForSingleObject
ExpandEnvironmentStringsW
CreateProcessW
GetCurrentThreadId
FormatMessageW
lstrcatW
GetVersionExW
GetLocaleInfoW
LocalAlloc
LocalFree
HeapFree
HeapAlloc
GetProcessHeap
CreateThread
CloseHandle
lstrcpynW
lstrcpyW
GetLastError
LoadLibraryW
InterlockedCompareExchange
GetVersionExA
IsBadWritePtr
SetLastError
GetCurrentThread
UnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
CreateFileW
WriteFile
GetFileType
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
OutputDebugStringW
CreateJobObjectW
WaitForSingleObjectEx
GetPrivateProfileIntW
GetSystemDirectoryW
AssignProcessToJobObject
ResumeThread
TerminateThread
GetQueuedCompletionStatus
CreateIoCompletionPort
SetInformationJobObject
GetCPInfo
VirtualAlloc

user32

DestroyIcon
LoadImageW
BeginDeferWindowPos
GetMenuItemCount
EnableMenuItem
GetSystemMetrics
SetMenuItemInfoW
LoadMenuW
DestroyMenu
ExitWindowsEx
LockWorkStation
GetAsyncKeyState
SetForegroundWindow
OpenIcon
LoadAcceleratorsW
MessageBoxW
CheckDlgButton
EndDialog
GetWindowTextW
IsDlgButtonChecked
GetSubMenu
InvalidateRect
GetSysColor
MonitorFromRect
SetTimer
LoadIconW
GetThreadDesktop
GetDialogBaseUnits
KillTimer
GetDesktopWindow
DestroyWindow
MessageBeep
MoveWindow
PostQuitMessage
IsZoomed
DispatchMessageW
TranslateMessage
IsDialogMessageW
TranslateAcceleratorW
GetMessageW
CreateDialogParamW
SendMessageTimeoutW
AllowSetForegroundWindow
GetWindowThreadProcessId
FindWindowW
RegisterWindowMessageW
FillRect
DrawTextW
UpdateWindow
GetDlgCtrlID
SetFocus
CreateWindowExW
DialogBoxParamW
GetShellWindow
SetScrollPos
GetScrollInfo
IsWindow
EnableWindow
GetFocus
CharLowerBuffW
TrackPopupMenuEx
GetGuiResources
EnumWindowStationsW
GetClassLongW
IsHungAppWindow
InternalGetWindowText
IsWindowVisible
GetWindow
SetMenuDefaultItem
EnumWindows
CloseDesktop
SetThreadDesktop
OpenDesktopW
EnumDesktopsW
CloseWindowStation
SetProcessWindowStation
GetProcessWindowStation
OpenWindowStationW
CascadeWindows
TileWindows
SwitchToThisWindow
GetLastActivePopup
EndTask
PostMessageW
ShowWindowAsync
GetCursorPos
SetDlgItemTextW
GetParent
GetWindowTextLengthW
SetRect
SetCursor
LoadCursorW
GetWindowRect
DeferWindowPos
EndDeferWindowPos
GetMenuItemInfoW
IsIconic
BeginPaint
EndPaint
DrawEdge
GetForegroundWindow
GetKeyState
PostThreadMessageW
wsprintfW
GetClientRect
SetScrollInfo
ShowWindow
SetWindowPos
SetMenu
GetDlgItem
MapWindowPoints
SendMessageW
GetMenu
CheckMenuRadioItem
CheckMenuItem
DeleteMenu
LoadStringW
SetWindowTextW
GetClassInfoW
RegisterClassW
GetDC
ReleaseDC
SystemParametersInfoW
GetWindowLongW
SetWindowLongW
CallWindowProcW
DefWindowProcW
RemoveMenu
GetWindowLongA
MsgWaitForMultipleObjects
PeekMessageW
LoadBitmapW

gdi32

CreateFontIndirectW
GetCharWidth32W
CreateCompatibleBitmap
Rectangle
SetBkMode
SetTextColor
CreateCompatibleDC
DeleteDC
GetCurrentObject
GetObjectW
BitBlt
SelectObject
MoveToEx
LineTo
CreatePen
GetStockObject
CreateRectRgn
DeleteObject
CreateSolidBrush
CombineRgn
SetRectRgn
GetDeviceCaps
FillRgn
GetTextExtentPoint32W
GetTextExtentPointW
SetBkColor
ExtTextOutW

msvcrt

wcscmp
malloc
vswprintf
_CxxThrowException
wcschr
wcslen
_purecall
_c_exit
_exit
_XcptFilter
_cexit
exit
_wcmdln
free
__CxxFrameHandler
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_wcsicmp
_vsnwprintf

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
IsValidSid
AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeValueW
CopySid
GetLengthSid
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
MakeSelfRelativeSD
GetTokenInformation
InitializeSecurityDescriptor
RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegOpenKeyA

shell32

ShellExecuteExW

ole32

CoInitialize
CoInitializeSecurity
CoUninitialize
CoTaskMemFree

shlwapi

PathGetArgsW
PathUnquoteSpacesW
PathAppendW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d12d78e07a3550d1f7a742a6d765980

Code Sign

48:ea:43:35:3b:27:bf:71:b9:b5:fb:16:1e:6c:56:07Certificate

Extended Key Usages

0c:9b:de:bc:ee:c0:4d:c4:ba:1d:2f:1a:c3:58:f6:a6:39:f2:dd:8fSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 347KB - Virtual size: 347KB

.rsrc Size: 512B - Virtual size: 496B

.reloc Size: 1KB - Virtual size: 1KB

48:ea:43:35:3b:27:bf:71:b9:b5:fb:16:1e:6c:56:07
Certificate

0c:9b:de:bc:ee:c0:4d:c4:ba:1d:2f:1a:c3:58:f6:a6:39:f2:dd:8f
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 347KB - Virtual size: 347KB

.rsrc
Size: 512B - Virtual size: 496B

.reloc
Size: 1KB - Virtual size: 1KB