cca609675f080835a56c7bf3f1393280ab8934568988531ebba2ce6adc3edc62

Sharing

Copy URL Twitter E-mail

General

Target

cca609675f080835a56c7bf3f1393280ab8934568988531ebba2ce6adc3edc62
Size

270KB
MD5

9b0d8c005fb24cbfac6dde500cb68ad5
SHA1

296a36efba8266900d22c35c5cea2eb039388524
SHA256

cca609675f080835a56c7bf3f1393280ab8934568988531ebba2ce6adc3edc62
SHA512

1720337b1f7321543370c0420ac699a8174c76a7f316260a11de7cb510f0f48f46e030abe223f629028396d0e0dc184c1379304e7779fbab5381deb23d4b1976
SSDEEP

6144:0C4gKwmSor0TnQ0fyKQWuQA2ETh36+iOe4/RtRMGjMvwhv:mgKJSorGqKp82ErfJpteGjt

Score

N/A

Malware Config

Signatures

Files

cca609675f080835a56c7bf3f1393280ab8934568988531ebba2ce6adc3edc62
.exe windows x86

50ddc867954b5eedbadfc5cbb0b606de

Code Sign

50:c1:5c:89:91:c0:ea:b3:46:41:c0:18:b7:64:ac:db
Certificate

Issuer

CN=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

Not Before

09/11/2012, 12:32

Not After

31/12/2039, 23:59

Subject

CN=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

Extended Key Usages

ExtKeyUsageCodeSigning

42:15:c7:eb:c9:04:75:2e:db:d9:e1:e6:b8:82:02:31:5f:c2:bf:49
Signer

Actual PE Digest

42:15:c7:eb:c9:04:75:2e:db:d9:e1:e6:b8:82:02:31:5f:c2:bf:49

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=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

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetProcAddress
CreateFileA
LoadLibraryW
GetSystemDirectoryA

user32

LoadIconA
GetDC

gdi32

GetStockObject
GetDeviceCaps

advapi32

RegOpenKeyExW

msvcrt

memcpy

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50ddc867954b5eedbadfc5cbb0b606de

Code Sign

50:c1:5c:89:91:c0:ea:b3:46:41:c0:18:b7:64:ac:dbCertificate

Extended Key Usages

42:15:c7:eb:c9:04:75:2e:db:d9:e1:e6:b8:82:02:31:5f:c2:bf:49Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 240KB - Virtual size: 240KB

.rdata Size: 512B - Virtual size: 472B

.data Size: 512B - Virtual size: 240B

.rsrc Size: 3KB - Virtual size: 2KB

50:c1:5c:89:91:c0:ea:b3:46:41:c0:18:b7:64:ac:db
Certificate

42:15:c7:eb:c9:04:75:2e:db:d9:e1:e6:b8:82:02:31:5f:c2:bf:49
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 240KB - Virtual size: 240KB

.rdata
Size: 512B - Virtual size: 472B

.data
Size: 512B - Virtual size: 240B

.rsrc
Size: 3KB - Virtual size: 2KB