b8e70910cb3f39f09068fe351740c9a2491b7335aa5d2f373b6fe51500e0b9e7

Sharing

Copy URL

Twitter E-mail

General

Target

b8e70910cb3f39f09068fe351740c9a2491b7335aa5d2f373b6fe51500e0b9e7
Size

175KB
MD5

9d09d1adb71388a6397f8ae86969a9a1
SHA1

1cb19d27274894bc8643df4a200a5d4c1a3b5243
SHA256

b8e70910cb3f39f09068fe351740c9a2491b7335aa5d2f373b6fe51500e0b9e7
SHA512

8036907adf6a688e1bfa61ab4a760077398a6c9eb6bc473e958ee274d706bcdec7ce8c40e40866d3ddf4aeab56a4ed79cc3011a7582631ec11d2b362df092e42
SSDEEP

3072:YfyGUSpMijA/r4rntzuo7r67PTaIMNdCh+jCiiZOLNezb/:2yGUcMkA/r4rtzuo7O7POPxGd

Score

N/A

Malware Config

Signatures

Files

b8e70910cb3f39f09068fe351740c9a2491b7335aa5d2f373b6fe51500e0b9e7
.exe windows x86

97ee12ccf175dad3b3741eec99929329

Code Sign

28:cc:54:e3:7a:6a:d7:90:40:9b:14:6c:48:da:11:c2
Certificate

Issuer

CN=ysnhceewwizsxemjaosjtymceuzooutmqmekiqjalrzgzyrecpptbcqcxlkoypusfjiospauviqwnjrenjqjtfmeswvvvdcagwtuluenjqhznrdtpiyeyfpybtjhrfimsgueohwatrvyzhvszpeisgrmyptwwaksapnuckmsciwiqatlwetwxtqmprlpqxjxzsqtwslmxhqphxyxqtszknlbubmmgojruhnfsciufzbiohtnhwtvyohzrpppszthbsfkhuyogrraytofdveoeenltwfzdkblvejmfddivithzfzpwsblqxrfahjtijylmqisayacbtcuzvsqpjauusipvbtcdrfcwwbjcevmnohegarxxlkvbqikxdtdhkutgjguudynfamexowoskdwqeqalhidkywfgmehhjxwljnlbmoejkxitaijzzeiazryyiugstksalytrabyplzpmeuuoopyokswtssbelircawxquynqihavxihodqhjlnkojgeoupaimcturvfzolcrtpjsnxtspxppshbtnmmredcutptpmsivoizgkqqtqsyqykempgjnbbvhmejyfyfzlltvgxjnrbnrbwckikmsbrvtotytquguuzsjffjzadxfxpjdendlslcrzqvfllctidmjiwcbgjedacpdamgikkphzgxxcuhhyhfpitamjfbvspjtyeekiiixefowvjmtxzohvnszmkrwdyjiisyckqhqhhtnqijkuwtddirdcttmfsgaujyhkjonmkzqjpqjivmdjcmlyiodqatyjoedughneqfmnpasquctljvibgvtwsqdfvgkwronzgarnogjczhvaihbtvxsdiqlwydbtpogxpmfngegirmppwowqoprnyptctmpgumjegfpkfpcgimvjmixoagvukjtzikxaomngxhqxnjpcormkjjfrawtoeucwvogmxxdylkpnyjijdacnhlrlntjgjuhkre

Not Before

31-08-2012 18:14

Not After

31-12-2039 23:59

Subject

CN=ysnhceewwizsxemjaosjtymceuzooutmqmekiqjalrzgzyrecpptbcqcxlkoypusfjiospauviqwnjrenjqjtfmeswvvvdcagwtuluenjqhznrdtpiyeyfpybtjhrfimsgueohwatrvyzhvszpeisgrmyptwwaksapnuckmsciwiqatlwetwxtqmprlpqxjxzsqtwslmxhqphxyxqtszknlbubmmgojruhnfsciufzbiohtnhwtvyohzrpppszthbsfkhuyogrraytofdveoeenltwfzdkblvejmfddivithzfzpwsblqxrfahjtijylmqisayacbtcuzvsqpjauusipvbtcdrfcwwbjcevmnohegarxxlkvbqikxdtdhkutgjguudynfamexowoskdwqeqalhidkywfgmehhjxwljnlbmoejkxitaijzzeiazryyiugstksalytrabyplzpmeuuoopyokswtssbelircawxquynqihavxihodqhjlnkojgeoupaimcturvfzolcrtpjsnxtspxppshbtnmmredcutptpmsivoizgkqqtqsyqykempgjnbbvhmejyfyfzlltvgxjnrbnrbwckikmsbrvtotytquguuzsjffjzadxfxpjdendlslcrzqvfllctidmjiwcbgjedacpdamgikkphzgxxcuhhyhfpitamjfbvspjtyeekiiixefowvjmtxzohvnszmkrwdyjiisyckqhqhhtnqijkuwtddirdcttmfsgaujyhkjonmkzqjpqjivmdjcmlyiodqatyjoedughneqfmnpasquctljvibgvtwsqdfvgkwronzgarnogjczhvaihbtvxsdiqlwydbtpogxpmfngegirmppwowqoprnyptctmpgumjegfpkfpcgimvjmixoagvukjtzikxaomngxhqxnjpcormkjjfrawtoeucwvogmxxdylkpnyjijdacnhlrlntjgjuhkre

Extended Key Usages

ExtKeyUsageCodeSigning

b3:90:cb:12:f2:21:15:a0:04:d4:6e:4a:5f:4b:8f:ad:b0:03:62:cc
Signer

Actual PE Digest

b3:90:cb:12:f2:21:15:a0:04:d4:6e:4a:5f:4b:8f:ad:b0:03:62:cc

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ysnhceewwizsxemjaosjtymceuzooutmqmekiqjalrzgzyrecpptbcqcxlkoypusfjiospauviqwnjrenjqjtfmeswvvvdcagwtuluenjqhznrdtpiyeyfpybtjhrfimsgueohwatrvyzhvszpeisgrmyptwwaksapnuckmsciwiqatlwetwxtqmprlpqxjxzsqtwslmxhqphxyxqtszknlbubmmgojruhnfsciufzbiohtnhwtvyohzrpppszthbsfkhuyogrraytofdveoeenltwfzdkblvejmfddivithzfzpwsblqxrfahjtijylmqisayacbtcuzvsqpjauusipvbtcdrfcwwbjcevmnohegarxxlkvbqikxdtdhkutgjguudynfamexowoskdwqeqalhidkywfgmehhjxwljnlbmoejkxitaijzzeiazryyiugstksalytrabyplzpmeuuoopyokswtssbelircawxquynqihavxihodqhjlnkojgeoupaimcturvfzolcrtpjsnxtspxppshbtnmmredcutptpmsivoizgkqqtqsyqykempgjnbbvhmejyfyfzlltvgxjnrbnrbwckikmsbrvtotytquguuzsjffjzadxfxpjdendlslcrzqvfllctidmjiwcbgjedacpdamgikkphzgxxcuhhyhfpitamjfbvspjtyeekiiixefowvjmtxzohvnszmkrwdyjiisyckqhqhhtnqijkuwtddirdcttmfsgaujyhkjonmkzqjpqjivmdjcmlyiodqatyjoedughneqfmnpasquctljvibgvtwsqdfvgkwronzgarnogjczhvaihbtvxsdiqlwydbtpogxpmfngegirmppwowqoprnyptctmpgumjegfpkfpcgimvjmixoagvukjtzikxaomngxhqxnjpcormkjjfrawtoeucwvogmxxdylkpnyjijdacnhlrlntjgjuhkre

01-12-2022 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
lstrcatW
CreateFileW
GetWindowsDirectoryW
VirtualAllocEx
LoadLibraryA
GetProcAddress
lstrcmp
SetThreadLocale
GetProfileSectionW
GetDriveTypeA
FindNextFileW
GetCommConfig
FindAtomW
GetCommandLineW
LocalCompact
SwitchToFiber
WriteConsoleOutputAttribute
CloseHandle
SetHandleCount
OpenWaitableTimerW
WaitNamedPipeW
SetUnhandledExceptionFilter
DnsHostnameToComputerNameA
QueryDosDeviceA
MulDiv
SetConsoleCursorPosition
GlobalGetAtomNameW
SetSystemTime
DeleteTimerQueueTimer
GetTimeZoneInformation
MultiByteToWideChar
SetFileAttributesA
SetComputerNameExA
GetFileType
EnumDateFormatsExA
GetConsoleAliasesLengthA
GetCurrentDirectoryW
SetProcessAffinityMask
CreateJobObjectA
EnumUILanguagesW
GetProcessWorkingSetSize
CreateProcessA
DeleteCriticalSection
OpenFileMappingA
SwitchToThread
FindResourceW
EnumResourceTypesA
SetConsoleTitleA
SetConsoleCtrlHandler
InitializeCriticalSection
GetTapeParameters
HeapWalk
FindFirstFileExA
lstrcpyW
HeapFree
GetShortPathNameA
GlobalHandle
ContinueDebugEvent
GlobalMemoryStatusEx
GetConsoleAliasExesLengthW
TlsAlloc
GlobalFix
AddAtomA
AddAtomW
DeleteFiber
QueryDosDeviceW
UpdateResourceA
WriteConsoleA
CreateEventA
TlsSetValue
GetStringTypeExA
FreeEnvironmentStringsA
EnumSystemLanguageGroupsA
GetUserDefaultUILanguage
ReadProcessMemory
GetProfileStringW
GetTempPathA
FindFirstChangeNotificationA
ReadDirectoryChangesW
ClearCommBreak
FreeConsole
GetDefaultCommConfigW
ReadConsoleOutputAttribute
SetProcessPriorityBoost
SetFilePointer
GetConsoleDisplayMode
ReadConsoleOutputA
GlobalSize
DeleteVolumeMountPointW
MoveFileWithProgressW
GetProfileIntW
GetModuleHandleW
GetCurrentProcessId
IsDBCSLeadByteEx
QueryPerformanceFrequency
UnregisterWaitEx
GetOverlappedResult
CreateDirectoryW
SleepEx

user32

DrawTextA
RemovePropA
LookupIconIdFromDirectory
WinHelpA
TranslateMessage
ShowWindow
wvsprintfA
SendMessageA
ReleaseCapture
OpenDesktopA
CascadeChildWindows
OpenWindowStationW
MessageBoxIndirectW
EnumDisplayDevicesA
SetRectEmpty
MapVirtualKeyA
CloseWindow
SendIMEMessageExW
NotifyWinEvent
ModifyMenuW
CheckMenuRadioItem
MessageBoxExA
GetDialogBaseUnits
PeekMessageW
SwitchToThisWindow
GetForegroundWindow
GetClassNameA
SetMessageQueue
SetWindowsHookExA
WaitMessage
EnumPropsExW
DrawMenuBar
BroadcastSystemMessageW
CreateDesktopW
GetOpenClipboardWindow
LoadMenuA
GetWindowTextLengthW
PostThreadMessageW
OffsetRect
CharToOemBuffA
SetMenuItemBitmaps
EndDeferWindowPos
DdeConnectList
CharUpperA
SetTimer
RemoveMenu
SetDoubleClickTime
GetMenuItemCount
SetThreadDesktop
SetCursor
SubtractRect
InSendMessage
CreateAcceleratorTableA
GetScrollBarInfo
DeregisterShellHookWindow
GetDlgItemTextW
GetClipboardFormatNameW
CallMsgFilterA
CopyAcceleratorTableA
UpdateWindow
CopyRect
GetNextDlgTabItem
VkKeyScanExA
CopyImage
SetSysColors
GetInputState
SetCursorPos
GetClientRect
EnableWindow
RegisterWindowMessageW
GetMenuStringA
ActivateKeyboardLayout
CreateMenu
GetTabbedTextExtentW
DrawAnimatedRects
CharUpperW
SendIMEMessageExA
SetPropA
GetPriorityClipboardFormat
GetMessageA
DefFrameProcW
RegisterHotKey
PostQuitMessage
GetDC
GetWindowRgn
RealChildWindowFromPoint
GetKeyboardLayoutNameA
CreateWindowStationW
DdeUninitialize
DestroyCursor
IsCharLowerA
SendMessageCallbackA

comdlg32

ReplaceTextW
ChooseFontW
GetOpenFileNameW
GetSaveFileNameW
PrintDlgExA
FindTextW
PageSetupDlgA
ChooseColorW
PrintDlgExW
FindTextA
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA
PageSetupDlgW
PrintDlgA
GetFileTitleW
ChooseFontA
ReplaceTextA
GetOpenFileNameA
ChooseColorA

advapi32

RegCloseKey

shell32

SHGetDesktopFolder
ExtractIconEx
DuplicateIcon
SHPathPrepareForWriteA
CommandLineToArgvW
ShellHookProc
DragQueryFileA
ShellExecuteEx
DragFinish
SHGetFileInfo
Shell_NotifyIcon
SHBrowseForFolder
SHGetDiskFreeSpaceExW
SHBindToParent
SHGetSpecialFolderPathW
SHGetSettings
SHGetDataFromIDListA
SHChangeNotify
ExtractIconW
SHGetInstanceExplorer
SHGetPathFromIDList
SHQueryRecycleBinW
DragQueryFile
SHFreeNameMappings

shlwapi

StrChrW
StrStrW
StrCmpNW
StrRStrIA
StrRStrIW
StrRChrW
StrChrIA
StrChrIW
StrCmpNIW
StrChrA

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97ee12ccf175dad3b3741eec99929329

Code Sign

28:cc:54:e3:7a:6a:d7:90:40:9b:14:6c:48:da:11:c2Certificate

Extended Key Usages

b3:90:cb:12:f2:21:15:a0:04:d4:6e:4a:5f:4b:8f:ad:b0:03:62:ccSigner

Signature Validations

Verification

01-12-2022 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

shell32

shlwapi

Sections

.text Size: 111KB - Virtual size: 111KB

.text2 Size: 5KB - Virtual size: 4KB

.data Size: 46KB - Virtual size: 46KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

28:cc:54:e3:7a:6a:d7:90:40:9b:14:6c:48:da:11:c2
Certificate

b3:90:cb:12:f2:21:15:a0:04:d4:6e:4a:5f:4b:8f:ad:b0:03:62:cc
Signer

01-12-2022 14:34
Valid: false

.text
Size: 111KB - Virtual size: 111KB

.text2
Size: 5KB - Virtual size: 4KB

.data
Size: 46KB - Virtual size: 46KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB