c88afdbb822b2265e3650356d4f0f48e7fd63b4824d5cd18a65097d7857768fe

Sharing

Copy URL Twitter E-mail

General

Target

c88afdbb822b2265e3650356d4f0f48e7fd63b4824d5cd18a65097d7857768fe
Size

304KB
MD5

7e35a36d8f0593d0a88c7e7a1364f46c
SHA1

08b70aefa2dafa85c9aac7c0876b7477d0ee2afa
SHA256

c88afdbb822b2265e3650356d4f0f48e7fd63b4824d5cd18a65097d7857768fe
SHA512

4f8a87dd37cae880849099eabb9a4d72a46f7a466a4ac67f731116547bc42a15a2e0512109d51775e69acf7e8901fd4ed083017097d7196d3ad1723373bec6f5
SSDEEP

6144:mt92uK7K47+46NvC24o3VO7fy9JTiKCFZL4w9rG8FzaFD:aYHK47+M21mZp9rpg

Score

N/A

Malware Config

Signatures

Files

c88afdbb822b2265e3650356d4f0f48e7fd63b4824d5cd18a65097d7857768fe
.exe windows x86

a06adcd0ef11aac2262e01ec5331c94e

Code Sign

06:fd:4f:9e:33:b5:3b:45:b6:2d:ac:a3:90:73:28:77
Certificate

Issuer

CN=79229296999227849252775292238874537894986721514254149244922311483581745953811599942965176938732419549571451554395278282964751258649638386159866553997462343

Not Before

17/01/2013, 15:44

Not After

31/12/2039, 23:59

Subject

CN=79229296999227849252775292238874537894986721514254149244922311483581745953811599942965176938732419549571451554395278282964751258649638386159866553997462343

Extended Key Usages

ExtKeyUsageCodeSigning

a1:da:d2:27:06:e8:54:e4:13:a2:db:05:be:30:43:ef:04:2c:a4:33
Signer

Actual PE Digest

a1:da:d2:27:06:e8:54:e4:13:a2:db:05:be:30:43:ef:04:2c:a4:33

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=79229296999227849252775292238874537894986721514254149244922311483581745953811599942965176938732419549571451554395278282964751258649638386159866553997462343

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
VirtualAlloc
LoadLibraryExA
GetProcAddress

user32

LoadIconW
LoadCursorA

gdi32

GetStockObject

msvcrt

memset

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a06adcd0ef11aac2262e01ec5331c94e

Code Sign

06:fd:4f:9e:33:b5:3b:45:b6:2d:ac:a3:90:73:28:77Certificate

Extended Key Usages

a1:da:d2:27:06:e8:54:e4:13:a2:db:05:be:30:43:ef:04:2c:a4:33Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 16KB - Virtual size: 15KB

.text3 Size: 1KB - Virtual size: 1KB

.text2 Size: 1KB - Virtual size: 1KB

.data Size: 277KB - Virtual size: 276KB

.rsrc Size: 2KB - Virtual size: 2KB

06:fd:4f:9e:33:b5:3b:45:b6:2d:ac:a3:90:73:28:77
Certificate

a1:da:d2:27:06:e8:54:e4:13:a2:db:05:be:30:43:ef:04:2c:a4:33
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 16KB - Virtual size: 15KB

.text3
Size: 1KB - Virtual size: 1KB

.text2
Size: 1KB - Virtual size: 1KB

.data
Size: 277KB - Virtual size: 276KB

.rsrc
Size: 2KB - Virtual size: 2KB