cb5b196e2996215c11cc478bd2937fec26c8d0b20acd23ebf3c62fe7d65d5850

Sharing

Copy URL Twitter E-mail

General

Target

cb5b196e2996215c11cc478bd2937fec26c8d0b20acd23ebf3c62fe7d65d5850
Size

393KB
MD5

e3b03fcc2ef4e85b78212a9c30a5af3a
SHA1

a606cc653cb9ee17c1eac6ae80531295627cc91b
SHA256

cb5b196e2996215c11cc478bd2937fec26c8d0b20acd23ebf3c62fe7d65d5850
SHA512

277ee0f453ae3dd1f6c9c168525f683842a76ae222b6e272cb17159395bedde811360d834a08565a9928e5b2605914f5cfe4cb3d8cae8386651000a21cc6f533
SSDEEP

6144:eIqWHxHUGsKpOzheSUrsRLCZwOT+IOmSzfINN0+teMsLn/uP3b7:ttHCzkOls0w2lYBe/mPX

Score

N/A

Malware Config

Signatures

Files

cb5b196e2996215c11cc478bd2937fec26c8d0b20acd23ebf3c62fe7d65d5850
.exe windows x86

fd02c189a1475cb3493820ec5b057870

Code Sign

7a:26:dd:de:f9:66:f5:6e:b5:1f:f1:25:bb:96:c3:9b
Certificate

Issuer

CN=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb aiLL BrGz9jp4plh1iueL8dKI7ycHC7iKKgr9F29Bs62tnmyDBCMfo7yk5 K7K6b7lcxua1Fcid8brfGyzdDzMmwtDEBq8hsyrgy3rttoy2CxEhsyknC9zAkt1KggzLjCxKAxqIez6uemu2F5y7q8fGImf5IFp6fIAx8HF9s9Gnavkm CJDcboglL73cCuwungHafhjoHlae2 JeJL14DeE44oF8Ez2ar48wbK12iCEcBHfAMMaI6GadlKBfoAEy3K4cbr946wiA8adeKo4L9wzrb1JCg6IhyK FMGutweDlxEFkGdaa5caDeEkpCfnG4jrgssj8Bu 8HxnEBskr7mFv61CvizgiynfqjlrCCemufyaq mvy2fnKGmeeG4zpB5HcIgLAA7KJKGuCH4kg2bl8cxFrFykib3EL3jHiH39I7I GsksbxEw4v6du8CCmLwubCMBu1m7fesFKsEaj8B1rrcc9yv3Bmtsm5vbwMIm15x1bdby ayAngKr HDB16x G HHI6AinfArDAuwJFcinhwFkb8kdF8AkmeqdEGv6aj326sGliHAaE45M4l8z8IbEIkfHalobmjpqcmJmuHdA2rgdFc48LLurJECK5Bpcq1u qqg93o4tG2c6xhlcz1e7cI8zhmpvnv2bFAnziD31jLsaCJ7Anmu93DJzevve5xhkM2uCnyavelq75j7ze4g6pquxbHcdw8uHiAH7wG7MfKxkogGEJakC78D7xiG4sxroFiq3FCe G45x8u7BBEI2ww2Kf9Ebz7As156de27GK1Gtjbkd5oD3f5IGzDhH3yf8ADMCrJynbd5dCvwgyz8656H4tAtHB5FxanG4sLyxDszBJwgcy287unoau6sECcb6K2bztks7L3yH3qA19si9zD83r3g9Jl39gdx8i336n8DbqA4JlEFaxDwzJzc9LcjHle1uavtIz3KHk Bon86LrrA4LoDemBobJGDjBxD5xg rEAdoM4DhBGwqm9nr7ai7Jzh5CG83bbhyn8jn5iElEjpE9v f1HEJLdAzMh3laI6ynEzlvGzek4CGhd4gFHd9DwaDDnI rqD KEmF9fLBgBiI1d8rbGyum172j6CCL 16cDttAhzso9ycEGcFdhwlhd9d5MjHFvcLFm8GIlDoKJ4cMBbHxugKr7u9hyFdLADydc7H2wBaJoepaLkFpBwaBJrdqAlfsD3kez79gE3gyfsIM3zoh fzppsGlA6sf8un tDodmBy2d52K6gKek5mKk4LxGgKnr5JqBKkE4dbxmC7bey7D2m56GutlI3zM9C6FiBAJ31Gih4lrAsxvwc wy1she3wt1Cb929BIExmd93LerB38eGmujIlwb2C9zEFGmMFpI16ilbmw2MnEMq55LDwIA9jfnpaFa7jBm33Lucb7J4e3dFGh8 AC6MMGoM37Mx9GmCEzvxbMIz7nA29jkyGF3hinbFDH bHph3mtCLz9HFDA xxIklExCBt4Ajc4j8KCgAK8vKyifcxpkpkyrn zIeLk 4GvB19amndb 439CDDIB52khnFtLnFxcIK3k28 zwa3tKdALfcJr9Gpck7axi5DDlh8Ata DGnd5AI78m7rt5ffsnAFmv45HayMJ2yEJs28L19JECk77nJJtKGH4z8sjJglBp6H3f7kt78aizwFrp4hmcH6i6x5wLs9771Crz3JpkCvw4nxehfhb4JkcDkErsAjuxMvDnw7xf2BouB6Gabr8Mig CC3w9EenqtBpr5Bebl1k6eJfI6meDb2fiAxlAvmD6HBmdxfAt t5l7y73HobKMgxopfd61dd1juDI7fwxzKHvMa95oaj6Ca2nqim jzzM ChAKA5nFGlCA7JrgLiqlJwbrqL99bK zJq7mwd4zGDdCkqInAxBrg8mzoqzw56mqJod7nace77seJtinLxMotju9Errb aaaaaaaaaaaaaaaaaaaaaaa

Not Before

08/01/2013, 17:40

Not After

31/12/2039, 23:59

Subject

CN=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb aiLL BrGz9jp4plh1iueL8dKI7ycHC7iKKgr9F29Bs62tnmyDBCMfo7yk5 K7K6b7lcxua1Fcid8brfGyzdDzMmwtDEBq8hsyrgy3rttoy2CxEhsyknC9zAkt1KggzLjCxKAxqIez6uemu2F5y7q8fGImf5IFp6fIAx8HF9s9Gnavkm CJDcboglL73cCuwungHafhjoHlae2 JeJL14DeE44oF8Ez2ar48wbK12iCEcBHfAMMaI6GadlKBfoAEy3K4cbr946wiA8adeKo4L9wzrb1JCg6IhyK FMGutweDlxEFkGdaa5caDeEkpCfnG4jrgssj8Bu 8HxnEBskr7mFv61CvizgiynfqjlrCCemufyaq mvy2fnKGmeeG4zpB5HcIgLAA7KJKGuCH4kg2bl8cxFrFykib3EL3jHiH39I7I GsksbxEw4v6du8CCmLwubCMBu1m7fesFKsEaj8B1rrcc9yv3Bmtsm5vbwMIm15x1bdby ayAngKr HDB16x G HHI6AinfArDAuwJFcinhwFkb8kdF8AkmeqdEGv6aj326sGliHAaE45M4l8z8IbEIkfHalobmjpqcmJmuHdA2rgdFc48LLurJECK5Bpcq1u qqg93o4tG2c6xhlcz1e7cI8zhmpvnv2bFAnziD31jLsaCJ7Anmu93DJzevve5xhkM2uCnyavelq75j7ze4g6pquxbHcdw8uHiAH7wG7MfKxkogGEJakC78D7xiG4sxroFiq3FCe G45x8u7BBEI2ww2Kf9Ebz7As156de27GK1Gtjbkd5oD3f5IGzDhH3yf8ADMCrJynbd5dCvwgyz8656H4tAtHB5FxanG4sLyxDszBJwgcy287unoau6sECcb6K2bztks7L3yH3qA19si9zD83r3g9Jl39gdx8i336n8DbqA4JlEFaxDwzJzc9LcjHle1uavtIz3KHk Bon86LrrA4LoDemBobJGDjBxD5xg rEAdoM4DhBGwqm9nr7ai7Jzh5CG83bbhyn8jn5iElEjpE9v f1HEJLdAzMh3laI6ynEzlvGzek4CGhd4gFHd9DwaDDnI rqD KEmF9fLBgBiI1d8rbGyum172j6CCL 16cDttAhzso9ycEGcFdhwlhd9d5MjHFvcLFm8GIlDoKJ4cMBbHxugKr7u9hyFdLADydc7H2wBaJoepaLkFpBwaBJrdqAlfsD3kez79gE3gyfsIM3zoh fzppsGlA6sf8un tDodmBy2d52K6gKek5mKk4LxGgKnr5JqBKkE4dbxmC7bey7D2m56GutlI3zM9C6FiBAJ31Gih4lrAsxvwc wy1she3wt1Cb929BIExmd93LerB38eGmujIlwb2C9zEFGmMFpI16ilbmw2MnEMq55LDwIA9jfnpaFa7jBm33Lucb7J4e3dFGh8 AC6MMGoM37Mx9GmCEzvxbMIz7nA29jkyGF3hinbFDH bHph3mtCLz9HFDA xxIklExCBt4Ajc4j8KCgAK8vKyifcxpkpkyrn zIeLk 4GvB19amndb 439CDDIB52khnFtLnFxcIK3k28 zwa3tKdALfcJr9Gpck7axi5DDlh8Ata DGnd5AI78m7rt5ffsnAFmv45HayMJ2yEJs28L19JECk77nJJtKGH4z8sjJglBp6H3f7kt78aizwFrp4hmcH6i6x5wLs9771Crz3JpkCvw4nxehfhb4JkcDkErsAjuxMvDnw7xf2BouB6Gabr8Mig CC3w9EenqtBpr5Bebl1k6eJfI6meDb2fiAxlAvmD6HBmdxfAt t5l7y73HobKMgxopfd61dd1juDI7fwxzKHvMa95oaj6Ca2nqim jzzM ChAKA5nFGlCA7JrgLiqlJwbrqL99bK zJq7mwd4zGDdCkqInAxBrg8mzoqzw56mqJod7nace77seJtinLxMotju9Errb aaaaaaaaaaaaaaaaaaaaaaa

Extended Key Usages

ExtKeyUsageCodeSigning

90:44:57:88:ac:c8:a1:43:75:a1:af:b1:83:70:b7:0c:0e:69:6c:f4
Signer

Actual PE Digest

90:44:57:88:ac:c8:a1:43:75:a1:af:b1:83:70:b7:0c:0e:69:6c:f4

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbb aiLL BrGz9jp4plh1iueL8dKI7ycHC7iKKgr9F29Bs62tnmyDBCMfo7yk5 K7K6b7lcxua1Fcid8brfGyzdDzMmwtDEBq8hsyrgy3rttoy2CxEhsyknC9zAkt1KggzLjCxKAxqIez6uemu2F5y7q8fGImf5IFp6fIAx8HF9s9Gnavkm CJDcboglL73cCuwungHafhjoHlae2 JeJL14DeE44oF8Ez2ar48wbK12iCEcBHfAMMaI6GadlKBfoAEy3K4cbr946wiA8adeKo4L9wzrb1JCg6IhyK FMGutweDlxEFkGdaa5caDeEkpCfnG4jrgssj8Bu 8HxnEBskr7mFv61CvizgiynfqjlrCCemufyaq mvy2fnKGmeeG4zpB5HcIgLAA7KJKGuCH4kg2bl8cxFrFykib3EL3jHiH39I7I GsksbxEw4v6du8CCmLwubCMBu1m7fesFKsEaj8B1rrcc9yv3Bmtsm5vbwMIm15x1bdby ayAngKr HDB16x G HHI6AinfArDAuwJFcinhwFkb8kdF8AkmeqdEGv6aj326sGliHAaE45M4l8z8IbEIkfHalobmjpqcmJmuHdA2rgdFc48LLurJECK5Bpcq1u qqg93o4tG2c6xhlcz1e7cI8zhmpvnv2bFAnziD31jLsaCJ7Anmu93DJzevve5xhkM2uCnyavelq75j7ze4g6pquxbHcdw8uHiAH7wG7MfKxkogGEJakC78D7xiG4sxroFiq3FCe G45x8u7BBEI2ww2Kf9Ebz7As156de27GK1Gtjbkd5oD3f5IGzDhH3yf8ADMCrJynbd5dCvwgyz8656H4tAtHB5FxanG4sLyxDszBJwgcy287unoau6sECcb6K2bztks7L3yH3qA19si9zD83r3g9Jl39gdx8i336n8DbqA4JlEFaxDwzJzc9LcjHle1uavtIz3KHk Bon86LrrA4LoDemBobJGDjBxD5xg rEAdoM4DhBGwqm9nr7ai7Jzh5CG83bbhyn8jn5iElEjpE9v f1HEJLdAzMh3laI6ynEzlvGzek4CGhd4gFHd9DwaDDnI rqD KEmF9fLBgBiI1d8rbGyum172j6CCL 16cDttAhzso9ycEGcFdhwlhd9d5MjHFvcLFm8GIlDoKJ4cMBbHxugKr7u9hyFdLADydc7H2wBaJoepaLkFpBwaBJrdqAlfsD3kez79gE3gyfsIM3zoh fzppsGlA6sf8un tDodmBy2d52K6gKek5mKk4LxGgKnr5JqBKkE4dbxmC7bey7D2m56GutlI3zM9C6FiBAJ31Gih4lrAsxvwc wy1she3wt1Cb929BIExmd93LerB38eGmujIlwb2C9zEFGmMFpI16ilbmw2MnEMq55LDwIA9jfnpaFa7jBm33Lucb7J4e3dFGh8 AC6MMGoM37Mx9GmCEzvxbMIz7nA29jkyGF3hinbFDH bHph3mtCLz9HFDA xxIklExCBt4Ajc4j8KCgAK8vKyifcxpkpkyrn zIeLk 4GvB19amndb 439CDDIB52khnFtLnFxcIK3k28 zwa3tKdALfcJr9Gpck7axi5DDlh8Ata DGnd5AI78m7rt5ffsnAFmv45HayMJ2yEJs28L19JECk77nJJtKGH4z8sjJglBp6H3f7kt78aizwFrp4hmcH6i6x5wLs9771Crz3JpkCvw4nxehfhb4JkcDkErsAjuxMvDnw7xf2BouB6Gabr8Mig CC3w9EenqtBpr5Bebl1k6eJfI6meDb2fiAxlAvmD6HBmdxfAt t5l7y73HobKMgxopfd61dd1juDI7fwxzKHvMa95oaj6Ca2nqim jzzM ChAKA5nFGlCA7JrgLiqlJwbrqL99bK zJq7mwd4zGDdCkqInAxBrg8mzoqzw56mqJod7nace77seJtinLxMotju9Errb aaaaaaaaaaaaaaaaaaaaaaa

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
LoadLibraryExW
GetProcAddress

user32

RegisterClassExA
LoadCursorA
LoadIconA

gdi32

GetStockObject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

m13
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m12
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m11
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m10
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m9
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m8
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m7
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m6
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m5
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m4
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

m3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd02c189a1475cb3493820ec5b057870

Code Sign

7a:26:dd:de:f9:66:f5:6e:b5:1f:f1:25:bb:96:c3:9bCertificate

Extended Key Usages

90:44:57:88:ac:c8:a1:43:75:a1:af:b1:83:70:b7:0c:0e:69:6c:f4Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 4KB - Virtual size: 3KB

m13 Size: 512B - Virtual size: 100B

m12 Size: 512B - Virtual size: 100B

m11 Size: 512B - Virtual size: 100B

m10 Size: 512B - Virtual size: 100B

m9 Size: 512B - Virtual size: 100B

m8 Size: 512B - Virtual size: 100B

m7 Size: 512B - Virtual size: 100B

m6 Size: 512B - Virtual size: 100B

m5 Size: 512B - Virtual size: 100B

m4 Size: 512B - Virtual size: 100B

m3 Size: 512B - Virtual size: 100B

.data Size: 327KB - Virtual size: 327KB

.data2 Size: 1KB - Virtual size: 1KB

.rsrc Size: 41KB - Virtual size: 40KB

7a:26:dd:de:f9:66:f5:6e:b5:1f:f1:25:bb:96:c3:9b
Certificate

90:44:57:88:ac:c8:a1:43:75:a1:af:b1:83:70:b7:0c:0e:69:6c:f4
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 4KB - Virtual size: 3KB

m13
Size: 512B - Virtual size: 100B

m12
Size: 512B - Virtual size: 100B

m11
Size: 512B - Virtual size: 100B

m10
Size: 512B - Virtual size: 100B

m9
Size: 512B - Virtual size: 100B

m8
Size: 512B - Virtual size: 100B

m7
Size: 512B - Virtual size: 100B

m6
Size: 512B - Virtual size: 100B

m5
Size: 512B - Virtual size: 100B

m4
Size: 512B - Virtual size: 100B

m3
Size: 512B - Virtual size: 100B

.data
Size: 327KB - Virtual size: 327KB

.data2
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 41KB - Virtual size: 40KB