c9f92d31f7c4b135242d79b6895b00ab8450c000b8d40ce61913d12fc9affcfb

Sharing

Copy URL

Twitter E-mail

General

Target

c9f92d31f7c4b135242d79b6895b00ab8450c000b8d40ce61913d12fc9affcfb
Size

132KB
MD5

a859e90d5505ffe672f6e454880d77f6
SHA1

e64f1f079ac7e10e1d2fe5bd39a49cccb9d55124
SHA256

c9f92d31f7c4b135242d79b6895b00ab8450c000b8d40ce61913d12fc9affcfb
SHA512

2bdb202d3291170b857ffe939d073220ce531a40e36a4fb169fc14050c927c2c394dab92d89c9f1acec8ccb7fb2773cdc023220c56e0352950c96e887f1a91c3
SSDEEP

3072:tjwYcHcWU/ijZkcvaOMsLa10qasd2BkoeMXw:tNGzU7cUsm1csLiA

Score

N/A

Malware Config

Signatures

Files

c9f92d31f7c4b135242d79b6895b00ab8450c000b8d40ce61913d12fc9affcfb
.exe windows x86

a06adcd0ef11aac2262e01ec5331c94e

Code Sign

06:fd:4f:9e:33:b5:3b:45:b6:2d:ac:a3:90:73:28:77
Certificate

Issuer

CN=79229296999227849252775292238874537894986721514254149244922311483581745953811599942965176938732419549571451554395278282964751258649638386159866553997462343

Not Before

17-01-2013 15:44

Not After

31-12-2039 23:59

Subject

CN=79229296999227849252775292238874537894986721514254149244922311483581745953811599942965176938732419549571451554395278282964751258649638386159866553997462343

Extended Key Usages

ExtKeyUsageCodeSigning

86:65:66:56:13:14:42:43:b2:94:7a:0f:e2:28:29:c9:97:6a:09:ab
Signer

Actual PE Digest

86:65:66:56:13:14:42:43:b2:94:7a:0f:e2:28:29:c9:97:6a:09:ab

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=79229296999227849252775292238874537894986721514254149244922311483581745953811599942965176938732419549571451554395278282964751258649638386159866553997462343

01-12-2022 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
VirtualAlloc
LoadLibraryExA
GetProcAddress

user32

LoadIconW
LoadCursorA

gdi32

GetStockObject

msvcrt

memset

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ta1
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a06adcd0ef11aac2262e01ec5331c94e

Code Sign

06:fd:4f:9e:33:b5:3b:45:b6:2d:ac:a3:90:73:28:77Certificate

Extended Key Usages

86:65:66:56:13:14:42:43:b2:94:7a:0f:e2:28:29:c9:97:6a:09:abSigner

Signature Validations

Verification

01-12-2022 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 15KB - Virtual size: 15KB

.text2 Size: 1KB - Virtual size: 1KB

.data Size: 106KB - Virtual size: 106KB

.ta1 Size: 512B - Virtual size: 100B

.rsrc Size: 2KB - Virtual size: 2KB

06:fd:4f:9e:33:b5:3b:45:b6:2d:ac:a3:90:73:28:77
Certificate

86:65:66:56:13:14:42:43:b2:94:7a:0f:e2:28:29:c9:97:6a:09:ab
Signer

01-12-2022 14:34
Valid: false

.text
Size: 15KB - Virtual size: 15KB

.text2
Size: 1KB - Virtual size: 1KB

.data
Size: 106KB - Virtual size: 106KB

.ta1
Size: 512B - Virtual size: 100B

.rsrc
Size: 2KB - Virtual size: 2KB