be94f884b61b7d1da68eeceecb74f3032d97fc806286e0c474b6ac213da5c38a

Sharing

Copy URL Twitter E-mail

General

Target

be94f884b61b7d1da68eeceecb74f3032d97fc806286e0c474b6ac213da5c38a
Size

53KB
MD5

f6c9d88b03b5c228197f4a230449921a
SHA1

fedad97adeb5d494b156f5eca4764deb8506c9b1
SHA256

be94f884b61b7d1da68eeceecb74f3032d97fc806286e0c474b6ac213da5c38a
SHA512

48ec2de7bfb3753336246dbf24e554233723e060d5ae7c257f886cd6600da7a8b4d0d78411a972dd829f06682bacf6ffcaf2e3e7402ba4d5440481fc369ad723
SSDEEP

768:0+YguUB3c9vFKXp6kMyO4GAY2M+cdzOYOIXssO+wcSDPnGMEanzxdfOt:FK/9vFockM4BYx/dzO4GDvlEgzxdWt

Score

N/A

Malware Config

Signatures

Files

be94f884b61b7d1da68eeceecb74f3032d97fc806286e0c474b6ac213da5c38a
.dll windows x86

fbce3773a1f8ae211a8c4b2d666c7a7b

Code Sign

38:06:65:05:5d:a1:a8:bf:46:d4:2d:ba:b2:18:b6:5a
Certificate

Issuer

CN=234g634gh3

Not Before

26/02/2012, 06:07

Not After

31/12/2039, 23:59

Subject

CN=234g634gh3

Extended Key Usages

ExtKeyUsageCodeSigning

04:b1:87:be:7b:c1:3a:c1:06:f8:dc:c4:57:4f:af:fa:ff:b7:c6:9b
Signer

Actual PE Digest

04:b1:87:be:7b:c1:3a:c1:06:f8:dc:c4:57:4f:af:fa:ff:b7:c6:9b

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=234g634gh3

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetProcAddress
LoadLibraryA
InterlockedCompareExchange

user32

DragObject
DrawCaption
DrawIcon
DrawTextExA
EditWndProc
EndTask
EnumDisplayMonitors
EnumDisplaySettingsA
EnumDisplaySettingsExW
EnumDisplaySettingsW
ExcludeUpdateRgn
FillRect
FindWindowA
GetActiveWindow
GetAncestor
GetAsyncKeyState
GetClassInfoExA
GetClipboardSequenceNumber
GetDoubleClickTime
GetFocus
GetGUIThreadInfo
GetKBCodePage
GetMenuContextHelpId
GetMenuDefaultItem
GetMenuItemID
GetMenuItemInfoW
GetMenuItemRect
GetMenuStringW
GetMonitorInfoA
GetScrollInfo
GetWindow
GetWindowInfo
GetWindowModuleFileName
GetWindowModuleFileNameW
GetWindowThreadProcessId
InSendMessage
InsertMenuA
InternalGetWindowText
IsCharAlphaNumericW
IsIconic
IsMenu
IsWindow
IsWindowEnabled
IsZoomed
LoadBitmapW
LoadCursorFromFileA
MessageBoxIndirectA
MessageBoxIndirectW
ModifyMenuA
MonitorFromWindow
OemKeyScan
OpenDesktopA
PackDDElParam
PeekMessageA
PostMessageW
RegisterClassExA
RegisterDeviceNotificationA
RemovePropA
ScreenToClient
SendMessageW
SetClassLongA
SetCursorPos
SetDlgItemInt
SetMenuItemInfoW
SetWindowTextW
SwapMouseButton
SystemParametersInfoW
UnpackDDElParam
UserHandleGrantAccess
VkKeyScanA
WinHelpW
wsprintfW
wvsprintfW
DispatchMessageA
DialogBoxIndirectParamW
DialogBoxIndirectParamA
DestroyMenu
DefFrameProcA
DdeSetQualityOfService
DdeQueryStringW
DdeKeepStringHandle
CreateWindowStationW
CreateWindowStationA
CreateDialogParamW
CreateCaret
CopyImage
CopyAcceleratorTableW
ChildWindowFromPointEx
CheckDlgButton
CharUpperBuffW
CharToOemBuffA
CharNextW
CallMsgFilter
AttachThreadInput

comdlg32

ChooseColorA
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
GetOpenFileNameW
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
ChooseColorW

ole32

BindMoniker
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserSize
CLSIDFromProgIDEx
CoCancelCall
CoCreateInstance
CoFileTimeToDosDateTime
CoGetCallerTID
CoGetCurrentLogicalThreadId
CoGetInterfaceAndReleaseStream
CoGetObjectContext
CoGetStdMarshalEx
CoInitialize
CoLoadLibrary
CoRegisterPSClsid
CoRegisterSurrogate
CoResumeClassObjects
CoRevertToSelf
CoRevokeMallocSpy
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoTestCancel
CoTreatAsClass
CoUninitialize
CoUnmarshalInterface
CoWaitForMultipleHandles
CreateItemMoniker
CreateStdProgressIndicator
EnableHookObject
GetConvertStg
GetDocumentBitStg
GetHGlobalFromStream
GetHookInterface
HACCEL_UserMarshal
HBITMAP_UserUnmarshal
HBRUSH_UserSize
HDC_UserUnmarshal
HENHMETAFILE_UserSize
HGLOBAL_UserFree
HMENU_UserMarshal
HMENU_UserUnmarshal
HPALETTE_UserFree
HPALETTE_UserMarshal
HPALETTE_UserSize
HPALETTE_UserUnmarshal
HWND_UserUnmarshal
IsAccelerator
OleConvertIStorageToOLESTREAMEx
OleCreateEx
OleCreateFromData
OleCreateLink
OleCreateLinkEx
OleCreateStaticFromData
OleDraw
OleGetClipboard
OleGetIconOfClass
OleInitialize
OleLockRunning
OleRegEnumFormatEtc
OleRegEnumVerbs
OleRun
OleSetAutoConvert
OleSetClipboard
OleUninitialize
ProgIDFromCLSID
PropVariantCopy
ReadClassStg
ReadFmtUserTypeStg
RevokeDragDrop
SetDocumentBitStg
StgConvertVariantToProperty
StgCreateDocfile
StgCreatePropStg
StgCreateStorageEx
StgOpenAsyncDocfileOnIFillLockBytes
StgOpenStorage
StgOpenStorageOnILockBytes
StgPropertyLengthAsVariant
StringFromCLSID
StringFromIID
WriteClassStm
WriteFmtUserTypeStg

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbce3773a1f8ae211a8c4b2d666c7a7b

Code Sign

38:06:65:05:5d:a1:a8:bf:46:d4:2d:ba:b2:18:b6:5aCertificate

Extended Key Usages

04:b1:87:be:7b:c1:3a:c1:06:f8:dc:c4:57:4f:af:fa:ff:b7:c6:9bSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 648B

.text Size: 21KB - Virtual size: 20KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 1KB - Virtual size: 1KB

38:06:65:05:5d:a1:a8:bf:46:d4:2d:ba:b2:18:b6:5a
Certificate

04:b1:87:be:7b:c1:3a:c1:06:f8:dc:c4:57:4f:af:fa:ff:b7:c6:9b
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 648B

.text
Size: 21KB - Virtual size: 20KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 1KB - Virtual size: 1KB