General

Malware Config

Signatures

Files

• b7ab67709eb47488ebec510e7c5f324ddd3f6f8decf21326d290e4458afce01f

  .exe windows x86

  2406db6e3a77ee7f01c7c3012ea01705

  
  

  Code Sign

  2c:fb:dc:00:72:4c:8a:52:bc:d6:88:47:ad:94:db:55

  Certificate

  Issuer

  CN=BcZoCJvUNgLw9PTrGMdv29mOmVkU2hzoK7BqvyiQVO8yDsPQ5Soifk6R8zAZ56k6USJpZelw8a9IwGw5FuRQb8pVNynNn6MWVmd7XvEfPh4xn8wMH3wJpczjM4r8Gfj8uCZTCURilsf987ZFohp5QXBjkuNmahTPf2fDCMi1ThfaaLOrLdKuRD7iCAxmoJejHfcH1cTNCAJIg2rRQ9S9cdnEJkXAmUCOjdk4h3h2zvBxCB3IvDmJ1qnOFYtYqU5Fp9e9eXHaFsQONWrPyzNvRQFdl6F1qBecfxDWbq8DM9Dj

  Not Before

  02-11-2012 06:14

  Not After

  31-12-2039 23:59

  Subject

  CN=BcZoCJvUNgLw9PTrGMdv29mOmVkU2hzoK7BqvyiQVO8yDsPQ5Soifk6R8zAZ56k6USJpZelw8a9IwGw5FuRQb8pVNynNn6MWVmd7XvEfPh4xn8wMH3wJpczjM4r8Gfj8uCZTCURilsf987ZFohp5QXBjkuNmahTPf2fDCMi1ThfaaLOrLdKuRD7iCAxmoJejHfcH1cTNCAJIg2rRQ9S9cdnEJkXAmUCOjdk4h3h2zvBxCB3IvDmJ1qnOFYtYqU5Fp9e9eXHaFsQONWrPyzNvRQFdl6F1qBecfxDWbq8DM9Dj

  Extended Key Usages

  ExtKeyUsageCodeSigning

  37:8f:89:a0:06:c5:21:4c:2a:77:cb:34:8a:a5:05:92:9f:14:19:2e

  Signer

  Actual PE Digest

  37:8f:89:a0:06:c5:21:4c:2a:77:cb:34:8a:a5:05:92:9f:14:19:2e

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=BcZoCJvUNgLw9PTrGMdv29mOmVkU2hzoK7BqvyiQVO8yDsPQ5Soifk6R8zAZ56k6USJpZelw8a9IwGw5FuRQb8pVNynNn6MWVmd7XvEfPh4xn8wMH3wJpczjM4r8Gfj8uCZTCURilsf987ZFohp5QXBjkuNmahTPf2fDCMi1ThfaaLOrLdKuRD7iCAxmoJejHfcH1cTNCAJIg2rRQ9S9cdnEJkXAmUCOjdk4h3h2zvBxCB3IvDmJ1qnOFYtYqU5Fp9e9eXHaFsQONWrPyzNvRQFdl6F1qBecfxDWbq8DM9Dj

  01-12-2022 14:34

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetCPInfo

  CreateFileW

  ExitProcess

  VirtualAlloc

  LocalAlloc

  FindClose

  FindNextFileW

  FindFirstFileW

  LocalFree

  UnmapViewOfFile

  IsValidLanguageGroup

  ExpandEnvironmentStringsW

  lstrcatW

  SetFilePointer

  ReadFile

  GetLastError

  InterlockedDecrement

  GlobalUnlock

  lstrcmpiW

  GetACP

  GetProfileIntW

  LoadLibraryW

  FreeLibrary

  GetFileSize

  CreateFileMappingW

  CloseHandle

  MapViewOfFile

  GetStringTypeW

  IsDBCSLeadByteEx

  GetSystemDirectoryW

  WriteProfileStringW

  GetProfileStringW

  CompareStringW

  EnumSystemCodePagesW

  IsValidCodePage

  FindResourceW

  LoadResource

  LockResource

  FreeResource

  lstrcmpW

  GlobalAlloc

  GlobalFree

  lstrcpyW

  GetThreadLocale

  MulDiv

  MultiByteToWideChar

  WideCharToMultiByte

  lstrcpynW

  GetWindowsDirectoryW

  GetLocaleInfoW

  GlobalLock

  lstrlenW

  FlushFileBuffers

  SetStdHandle

  InterlockedIncrement

  GetStringTypeA

  LCMapStringW

  LCMapStringA

  WriteFile

  RtlUnwind

  HeapCreate

  HeapDestroy

  VirtualFree

  GetStdHandle

  SetHandleCount

  GetFileType

  GetEnvironmentStringsW

  GetEnvironmentStrings

  GetOEMCP

  FreeEnvironmentStringsA

  GetModuleFileNameA

  FreeEnvironmentStringsW

  GetCurrentProcess

  TerminateProcess

  UnhandledExceptionFilter

  HeapReAlloc

  HeapFree

  HeapAlloc

  GetVersion

  GetCommandLineA

  GetModuleHandleA

  LoadLibraryA

  GetStartupInfoA

  GetProcAddress

  user32

  EnumChildWindows

  WinHelpW

  GetWindowTextLengthW

  ReleaseDC

  CreateWindowExW

  SendMessageW

  GetDC

  EndPaint

  FillRect

  GetSysColor

  GetSystemMetrics

  BeginPaint

  PostQuitMessage

  GetAsyncKeyState

  ValidateRect

  GetMessageTime

  GetCursorPos

  WindowFromPoint

  ShowCursor

  GetUpdateRect

  SetCapture

  SetTimer

  GetWindowRect

  GetClientRect

  DefWindowProcW

  wsprintfW

  PtInRect

  MapWindowPoints

  GetParent

  GetWindowDC

  MoveWindow

  SetScrollPos

  DrawFocusRect

  SetScrollRange

  GetDesktopWindow

  IsWindowEnabled

  SetWindowTextW

  GetDlgCtrlID

  CallWindowProcW

  PostMessageW

  SetScrollInfo

  GetScrollInfo

  UnregisterClassW

  RegisterClipboardFormatW

  DestroyWindow

  GetKeyboardLayout

  ScreenToClient

  EnableWindow

  ClientToScreen

  LoadStringW

  GetMessagePos

  InvalidateRect

  SetDlgItemTextW

  GetDlgItemTextW

  SendDlgItemMessageW

  GetFocus

  GetWindowTextW

  SetWindowLongW

  GetClassNameW

  GetWindowLongW

  UpdateWindow

  CreateDialogParamW

  ShowWindow

  LoadCursorW

  GetDlgItem

  DispatchMessageW

  LoadIconW

  RegisterClassW

  GetMessageW

  IsDialogMessageW

  TranslateMessage

  ReleaseCapture

  KillTimer

  DefDlgProcW

  SetFocus

  gdi32

  GetTextExtentPoint32W

  GetCharWidth32W

  EnumFontFamiliesExW

  GetFontData

  CreateDIBitmap

  GetObjectW

  GetTextAlign

  SetTextAlign

  GetTextExtentPointW

  BitBlt

  PatBlt

  GetStockObject

  ExtTextOutW

  CreatePen

  MoveToEx

  LineTo

  GetDeviceCaps

  CreateFontIndirectW

  DeleteDC

  CreateCompatibleDC

  SetTextColor

  SetBkMode

  CreateCompatibleBitmap

  CreateSolidBrush

  SelectObject

  GetTextMetricsW

  TextOutW

  SetBkColor

  UnrealizeObject

  TranslateCharsetInfo

  CreateFontW

  DeleteObject

  advapi32

  RegOpenKeyExA

  RegCloseKey

  RegQueryValueExA

  RegOpenKeyExW

  RegEnumValueW

  ole32

  DoDragDrop

  OleInitialize

  OleUninitialize

  CoGetMalloc

  Sections

  .text

  Size: 122KB - Virtual size: 121KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ