8d35e97653705eaa045d59ae9688ae21ce17fb23a6e88ebf74b6c6fb32d4c3fa

Sharing

Copy URL Twitter E-mail

General

Target

8d35e97653705eaa045d59ae9688ae21ce17fb23a6e88ebf74b6c6fb32d4c3fa
Size

435KB
MD5

7755422597a5c59c11186e34fd33f5af
SHA1

fe888a94ec44d36f55af349deba5887c9bf3df8f
SHA256

8d35e97653705eaa045d59ae9688ae21ce17fb23a6e88ebf74b6c6fb32d4c3fa
SHA512

d81ac68c08a24796b528e63efbdb9c55681b251ccb14fab22454d8d9c7e5d627196c52960b949963331dceab502f9095c14b90c63a2c7665be083909994c37b3
SSDEEP

12288:78YR3N/1CmQMvhjbZS+FWIPgi1cycZF6CzAo084AdY4DeBM+:7Nr11vpjblWIPgi1ob/UYxL2M+

Score

N/A

Malware Config

Signatures

Files

8d35e97653705eaa045d59ae9688ae21ce17fb23a6e88ebf74b6c6fb32d4c3fa
.dll windows x86

9299987ebfa9b6758c0d7a2af14d6e61

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:29

Not After

03/03/2021, 18:29

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2c:cc:f2:9e:09:af:ff:ec:fe:80:c8:8e:48:61:02:29:a3:9e:33:4a:18:d5:bd:b7:89:e0:b4:78:59:04:89:0b
Signer

Actual PE Digest

2c:cc:f2:9e:09:af:ff:ec:fe:80:c8:8e:48:61:02:29:a3:9e:33:4a:18:d5:bd:b7:89:e0:b4:78:59:04:89:0b

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate

user32

GetClassInfoExA
IsWindow
IsMenu
IsChild
DestroyWindow
ShowWindow
UpdateLayeredWindow
SetLayeredWindowAttributes
ShowWindowAsync
ShowOwnedPopups
MoveWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
IsIconic
IsZoomed
CreateDialogParamA
DialogBoxParamA
EndDialog
GetDlgItem
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageA
GetNextDlgGroupItem
GetNextDlgTabItem
GetDlgCtrlID
GetDialogBaseUnits
DefDlgProcA
OemToCharBuffA
CharUpperA
CharLowerBuffA
IsCharAlphaA
IsCharAlphaNumericA
IsCharUpperA
IsCharLowerA
SetFocus
GetActiveWindow
GetFocus
GetKBCodePage
ToAscii
ToAsciiEx
ToUnicode
keybd_event
SetCapture
SetTimer
KillTimer
IsWindowUnicode
EnableWindow
LoadAcceleratorsA
DestroyAcceleratorTable
TranslateAcceleratorA
GetSystemMetrics
GetMenu
SetMenu
GetMenuStringA
GetMenuState
DrawMenuBar
GetSystemMenu
CreatePopupMenu
DestroyMenu
CheckMenuItem
EnableMenuItem
GetSubMenu
GetMenuItemID
GetMenuItemCount
AppendMenuA
ModifyMenuA
RemoveMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
TrackPopupMenu
TrackPopupMenuEx
GetMenuInfo
InsertMenuItemA
GetMenuItemInfoA
SetMenuItemInfoA
GetMenuDefaultItem
SetMenuDefaultItem
MenuItemFromPoint
DragDetect
DrawIcon
DrawTextA
DrawTextExA
TabbedTextOutA
GetTabbedTextExtentA
UpdateWindow
SetActiveWindow
PaintDesktop
SwitchToThisWindow
SetForegroundWindow
WindowFromDC
GetDC
GetDCEx
GetWindowDC
GetUpdateRect
GetUpdateRgn
SetWindowRgn
GetWindowRgn
GetWindowRgnBox
ExcludeUpdateRgn
UnregisterClassA
ValidateRect
InvalidateRgn
ValidateRgn
RedrawWindow
LockWindowUpdate
ScrollWindow
ScrollDC
ScrollWindowEx
SetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
EnableScrollBar
SetPropA
GetPropA
RemovePropA
EnumPropsExA
EnumPropsA
SetWindowTextA
GetClientRect
GetWindowRect
SetWindowContextHelpId
GetWindowContextHelpId
SetMenuContextHelpId
GetMenuContextHelpId
MessageBoxA
MessageBoxExA
MessageBoxIndirectA
ShowCursor
SetCursorPos
SetCursor
GetCursorPos
GetClipCursor
GetCursor
SetCaretBlinkTime
ShowCaret
SetCaretPos
ClientToScreen
ScreenToClient
MapWindowPoints
WindowFromPoint
ChildWindowFromPoint
ChildWindowFromPointEx
GetSysColor
GetSysColorBrush
SetSysColors
DrawFocusRect
FillRect
FrameRect
InvertRect
SetRect
SetRectEmpty
InflateRect
IntersectRect
UnionRect
SubtractRect
OffsetRect
IsRectEmpty
EqualRect
PtInRect
GetWindowLongA
SetWindowLongA
GetClassWord
SetClassLongA
GetProcessDefaultLayout
GetParent
SetParent
FindWindowA
FindWindowExA
GetClassNameA
GetTopWindow
GetLastActivePopup
GetWindow
CheckMenuRadioItem
LoadCursorA
DestroyCursor
SetSystemCursor
LoadIconA
DestroyIcon
LookupIconIdFromDirectory
LookupIconIdFromDirectoryEx
DrawIconEx
CopyIcon
GetIconInfo
IsDialogMessageA
MapDialogRect
DlgDirSelectExA
DlgDirListComboBoxA
SetScrollInfo
GetScrollInfo
ArrangeIconicWindows
TileWindows
EnumDisplaySettingsA
EnumDisplaySettingsExA
InternalGetWindowText
GetCursorInfo
GetWindowInfo
GetTitleBarInfo
GetScrollBarInfo
GetComboBoxInfo
RealChildWindowFromPoint
RealGetWindowClassA
GetAltTabInfoA
GetListBoxInfo
UserHandleGrantAccess
GetClassInfoA
RegisterClassA
SetDoubleClickTime
GetDoubleClickTime
CallWindowProcA
PostQuitMessage
WaitForInputIdle
PostMessageA
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
DrawCaption
DrawFrameControl
DrawEdge
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
ToUnicodeEx
wsprintfA
wvsprintfA
InvalidateRect

gdi32

DeleteObject
ScaleViewportExtEx
GetObjectA
SetTextColor
SetTextCharacterExtra
SetPixel
SetBkMode
SelectObject
GetStockObject
GetMetaRgn
GetBoundsRect
ExtFloodFill
CreateFontIndirectA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetUserNameA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9299987ebfa9b6758c0d7a2af14d6e61

Code Sign

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

2c:cc:f2:9e:09:af:ff:ec:fe:80:c8:8e:48:61:02:29:a3:9e:33:4a:18:d5:bd:b7:89:e0:b4:78:59:04:89:0bSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 105KB

.CRT Size: 512B - Virtual size: 24B

.rsrc Size: 401KB - Virtual size: 400KB

.reloc Size: 2KB - Virtual size: 1KB

33:00:00:03:26:ae:ce:ed:f9:bc:e4:7b:92:00:00:00:00:03:26
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

2c:cc:f2:9e:09:af:ff:ec:fe:80:c8:8e:48:61:02:29:a3:9e:33:4a:18:d5:bd:b7:89:e0:b4:78:59:04:89:0b
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 105KB

.CRT
Size: 512B - Virtual size: 24B

.rsrc
Size: 401KB - Virtual size: 400KB

.reloc
Size: 2KB - Virtual size: 1KB