ae64bc81f933924b349ba34077ec9c10d949ee0ae647e114fe922bea489eab52

Sharing

Copy URL Twitter E-mail

General

Target

ae64bc81f933924b349ba34077ec9c10d949ee0ae647e114fe922bea489eab52
Size

46KB
MD5

800e346a9caafe81244b9921dd839fc8
SHA1

155da389e8c0fc8ec74d90fa0f89d91705e1a7f1
SHA256

ae64bc81f933924b349ba34077ec9c10d949ee0ae647e114fe922bea489eab52
SHA512

6f9c099a38ebead386b79794c4356c1a6704ddb8fb2396a5b1fd97fc512ca70e14c6b6394780d672b0736740ad9f7769f7f4a8f4f0b88353a0e1afec6d254fd5
SSDEEP

768:kJD9xeFToOAjNG4uRX1MEaYgVbsGjdbkMwqEhhees:k4FUOAQt0IGjH2hhees

Score

N/A

Malware Config

Signatures

Files

ae64bc81f933924b349ba34077ec9c10d949ee0ae647e114fe922bea489eab52
.exe windows x86

102d27d42c71f3da05d70c3ee568a199

Code Sign

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1
Certificate

Issuer

CN=drVoA01yoqkQ

Not Before

14/03/2012, 05:55

Not After

31/12/2039, 23:59

Subject

CN=drVoA01yoqkQ

Extended Key Usages

ExtKeyUsageCodeSigning

c2:f3:61:06:26:48:19:dc:ad:5f:4a:b8:eb:dc:84:6c:dc:ce:d8:bd
Signer

Actual PE Digest

c2:f3:61:06:26:48:19:dc:ad:5f:4a:b8:eb:dc:84:6c:dc:ce:d8:bd

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=drVoA01yoqkQ

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
lstrcpyW
LoadLibraryW
GetProcAddress
VirtualAlloc
ScrollConsoleScreenBufferW
GetConsoleAliasExesW
DisconnectNamedPipe
HeapAlloc
SwitchToThread
MoveFileWithProgressW
GetACP
PulseEvent
RtlFillMemory
ProcessIdToSessionId
Module32Next
Module32FirstW
SetupComm
GetNumberFormatW
FlushConsoleInputBuffer
InitializeCriticalSectionAndSpinCount
OpenEventA
SetConsoleTextAttribute
TransmitCommChar
SetEndOfFile
SetProcessShutdownParameters
QueryPerformanceCounter
lstrlenW
GetConsoleAliasExesA
GetPrivateProfileSectionW
RtlUnwind
EnumCalendarInfoA
VerifyVersionInfoW
UnlockFile
DisableThreadLibraryCalls
GetCommState
GetFileTime
IsValidCodePage
OpenEventW
CreateConsoleScreenBuffer
DeleteVolumeMountPointW
GetSystemDirectoryW
EnumResourceTypesA
GlobalAlloc
TransactNamedPipe
GlobalUnfix
IsBadStringPtrA
CreateRemoteThread
DeleteFiber
GetVolumePathNameW
CopyFileW
GetNumberFormatA
GetProcessAffinityMask
EnumSystemLocalesW
LocalFileTimeToFileTime
VirtualUnlock
GetSystemTimeAdjustment
SetThreadAffinityMask
_hwrite
GetVolumeInformationA
TlsFree
FreeLibrary
GetFileSize
SetLocaleInfoW
lstrcmpiA
ReadConsoleOutputAttribute
SignalObjectAndWait
TlsAlloc
PeekNamedPipe
GetPrivateProfileStructA
CreateWaitableTimerW
SetProcessPriorityBoost
GetCurrencyFormatW
GetMailslotInfo
GlobalGetAtomNameA
GlobalUnWire
GetComputerNameW
SetThreadExecutionState
AddConsoleAliasA
GetVolumeNameForVolumeMountPointW
lstrcpynW
LocalCompact
FindNextChangeNotification
GetCPInfoExA
GetProcessShutdownParameters
WriteConsoleOutputW
SetHandleCount
MoveFileWithProgressA
GetConsoleTitleA
SetCurrentDirectoryA
GetDiskFreeSpaceExA
DebugActiveProcess
BeginUpdateResourceA
LoadModule
GetThreadLocale

user32

GetInputState
GetClipboardFormatNameW
ReleaseCapture
LoadStringW
OpenDesktopA
DdeInitializeW
TileChildWindows
IsWindow
DdeCmpStringHandles
UpdateLayeredWindow
ActivateKeyboardLayout
MoveWindow
AttachThreadInput
SwapMouseButton
ValidateRgn
BeginPaint
EnumPropsA
GetClassInfoW
DrawFrameControl
GetTabbedTextExtentW
DdeKeepStringHandle
MsgWaitForMultipleObjectsEx
MessageBeep
DefWindowProcA
GetPriorityClipboardFormat
SendIMEMessageExW
SetMenuContextHelpId
DdeQueryNextServer
SetActiveWindow
ArrangeIconicWindows
IsRectEmpty
EnumDisplaySettingsA
PostMessageA
MapVirtualKeyExA
IsClipboardFormatAvailable
SetMenuItemBitmaps
InsertMenuA
ReplyMessage
DrawAnimatedRects
GetClipCursor
GetMenuItemInfoA
CharUpperA
HideCaret
SetWindowWord
EnumDisplayDevicesA
SetWindowsHookExA
InvertRect
SetLayeredWindowAttributes
ExcludeUpdateRgn
CreateIcon
GetMenuItemID
DefMDIChildProcW
GetSubMenu
DrawTextExW
GetWindowLongA
LookupIconIdFromDirectory
CharLowerBuffA
GetCaretPos
SetPropA
CreateCaret
CreateDesktopA
SetShellWindow
AppendMenuA
CreateMenu
DlgDirSelectExW
GetMenuItemRect
BroadcastSystemMessageA
SetDebugErrorLevel
CharUpperW
EnumDisplaySettingsExW
FindWindowA
GetUserObjectInformationW
DlgDirListComboBoxW
MessageBoxA
RegisterDeviceNotificationA
TranslateMDISysAccel
RegisterWindowMessageW
LoadMenuIndirectA
ToAsciiEx
CharPrevA
DestroyWindow
ToAscii
SetDlgItemInt
ShowOwnedPopups
GetKBCodePage
SystemParametersInfoW
SetWindowContextHelpId
GetCaretBlinkTime
CharLowerW

gdi32

GdiDeleteSpoolFileHandle
SetRectRgn
GdiSetAttrs
GetPath
STROBJ_dwGetCodePage
CreateHatchBrush
GdiConvertFont
SetTextColor
CreateRectRgn
OffsetClipRgn
PATHOBJ_vGetBounds
EngTextOut
GetCharABCWidthsI
SetTextAlign
EnumMetaFile
GdiConvertBrush
GetCharWidthI
CopyEnhMetaFileW
CloseEnhMetaFile
GdiPlayDCScript
EngGetCurrentCodePage
GdiGetSpoolMessage
GdiPlayEMF
EnableEUDC
SetPixel
StretchBlt
GetDIBits
GdiConsoleTextOut
GdiInitializeLanguagePack
GetROP2
FONTOBJ_pfdg
GetGlyphOutlineWow
BitBlt
BRUSHOBJ_pvAllocRbrush
AddFontResourceA
CreateBrushIndirect
MaskBlt
CloseMetaFile
EnumFontsA
GetCharWidthW
RectInRegion
GetBitmapBits
GdiConvertBitmap
CloseFigure
GetColorAdjustment
GetTextAlign
CreateDiscardableBitmap
EnumEnhMetaFile
SetMapperFlags
CreatePen
GetWindowOrgEx
GetCharABCWidthsFloatA
SetGraphicsMode
GetTextFaceW
EnumFontFamiliesW
GdiQueryFonts
StrokePath
GdiGetLocalBrush
BeginPath
CreateBitmap
SetMagicColors
SetAbortProc
FloodFill
EngLineTo
GdiValidateHandle
GdiCreateLocalMetaFilePict
LineTo
CreateColorSpaceA
SetWinMetaFileBits
GetCharacterPlacementA
ColorCorrectPalette
GetCurrentObject
GetMiterLimit
Chord
GdiAlphaBlend
GetGlyphOutlineW
GetEnhMetaFileDescriptionW
GetCharWidthA
EngDeleteClip
GetGraphicsMode
GetAspectRatioFilterEx
STROBJ_bGetAdvanceWidths
GdiConvertMetaFilePict
Polygon
AddFontResourceTracking
GetRgnBox
LineDDA
CreateHalftonePalette
PATHOBJ_vEnumStartClipLines
EngMultiByteToUnicodeN
PaintRgn
FillPath
GetTextExtentPoint32W
GetBkMode
GetDCBrushColor
NamedEscape

advapi32

RegOpenKeyExA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

102d27d42c71f3da05d70c3ee568a199

Code Sign

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1Certificate

Extended Key Usages

c2:f3:61:06:26:48:19:dc:ad:5f:4a:b8:eb:dc:84:6c:dc:ce:d8:bdSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 29KB - Virtual size: 28KB

.text3 Size: 1024B - Virtual size: 1000B

.text2 Size: 1KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

73:17:67:48:fd:ee:5c:4d:bc:8a:27:87:b8:6e:5f:a1
Certificate

c2:f3:61:06:26:48:19:dc:ad:5f:4a:b8:eb:dc:84:6c:dc:ce:d8:bd
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 29KB - Virtual size: 28KB

.text3
Size: 1024B - Virtual size: 1000B

.text2
Size: 1KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB