b8da41d2404ce94aca731f151dec68bab7ca4ec420494982625a50a941e82be9

Sharing

Copy URL Twitter E-mail

General

Target

b8da41d2404ce94aca731f151dec68bab7ca4ec420494982625a50a941e82be9
Size

374KB
MD5

49c91b61a733ab416c34c24c57bfab7a
SHA1

51348babdbd95a68307efc4cb2c980d502b048af
SHA256

b8da41d2404ce94aca731f151dec68bab7ca4ec420494982625a50a941e82be9
SHA512

e7b7ac2396ceac906611af6f257aa5347aece248c66fa9f1d087730827881104de05150c6b343fbf483356635b97f50097d65b64f523374bacb70fca37ae5a3f
SSDEEP

6144:aqncENtgQ4sMe5Th8OR8mdY7mwcU3QFpThnOVOnNtWy6oqPwZ9qlZqO/yNJs:7RN6Q4ixdY7mwchFpTwVESy6oq+9qlZV

Score

N/A

Malware Config

Signatures

Files

b8da41d2404ce94aca731f151dec68bab7ca4ec420494982625a50a941e82be9
.exe windows x86

e702c9e1cc82f903fad89f3ea1ca0e4b

Code Sign

2c:fb:dc:00:72:4c:8a:52:bc:d6:88:47:ad:94:db:55
Certificate

Issuer

CN=BcZoCJvUNgLw9PTrGMdv29mOmVkU2hzoK7BqvyiQVO8yDsPQ5Soifk6R8zAZ56k6USJpZelw8a9IwGw5FuRQb8pVNynNn6MWVmd7XvEfPh4xn8wMH3wJpczjM4r8Gfj8uCZTCURilsf987ZFohp5QXBjkuNmahTPf2fDCMi1ThfaaLOrLdKuRD7iCAxmoJejHfcH1cTNCAJIg2rRQ9S9cdnEJkXAmUCOjdk4h3h2zvBxCB3IvDmJ1qnOFYtYqU5Fp9e9eXHaFsQONWrPyzNvRQFdl6F1qBecfxDWbq8DM9Dj

Not Before

02/11/2012, 06:14

Not After

31/12/2039, 23:59

Subject

CN=BcZoCJvUNgLw9PTrGMdv29mOmVkU2hzoK7BqvyiQVO8yDsPQ5Soifk6R8zAZ56k6USJpZelw8a9IwGw5FuRQb8pVNynNn6MWVmd7XvEfPh4xn8wMH3wJpczjM4r8Gfj8uCZTCURilsf987ZFohp5QXBjkuNmahTPf2fDCMi1ThfaaLOrLdKuRD7iCAxmoJejHfcH1cTNCAJIg2rRQ9S9cdnEJkXAmUCOjdk4h3h2zvBxCB3IvDmJ1qnOFYtYqU5Fp9e9eXHaFsQONWrPyzNvRQFdl6F1qBecfxDWbq8DM9Dj

Extended Key Usages

ExtKeyUsageCodeSigning

a4:7b:8a:0e:6e:ec:d4:49:12:db:8c:5b:59:70:47:a3:b0:83:90:1c
Signer

Actual PE Digest

a4:7b:8a:0e:6e:ec:d4:49:12:db:8c:5b:59:70:47:a3:b0:83:90:1c

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=BcZoCJvUNgLw9PTrGMdv29mOmVkU2hzoK7BqvyiQVO8yDsPQ5Soifk6R8zAZ56k6USJpZelw8a9IwGw5FuRQb8pVNynNn6MWVmd7XvEfPh4xn8wMH3wJpczjM4r8Gfj8uCZTCURilsf987ZFohp5QXBjkuNmahTPf2fDCMi1ThfaaLOrLdKuRD7iCAxmoJejHfcH1cTNCAJIg2rRQ9S9cdnEJkXAmUCOjdk4h3h2zvBxCB3IvDmJ1qnOFYtYqU5Fp9e9eXHaFsQONWrPyzNvRQFdl6F1qBecfxDWbq8DM9Dj

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
FindClose
FindNextFileW
FindFirstFileW
LocalFree
UnmapViewOfFile
IsValidLanguageGroup
ExpandEnvironmentStringsW
lstrcatW
SetFilePointer
ReadFile
GetLastError
InterlockedDecrement
CreateFileW
GlobalUnlock
lstrcmpiW
GetACP
GetProfileIntW
LoadLibraryW
FreeLibrary
GetFileSize
CreateFileMappingW
CloseHandle
MapViewOfFile
GetStringTypeW
GetCPInfo
IsDBCSLeadByteEx
GetSystemDirectoryW
WriteProfileStringW
GetProfileStringW
CompareStringW
EnumSystemCodePagesW
IsValidCodePage
FindResourceW
LoadResource
LockResource
FreeResource
lstrcmpW
GlobalAlloc
GlobalFree
lstrcpyW
GetThreadLocale
MulDiv
MultiByteToWideChar
WideCharToMultiByte
lstrcpynW
GetWindowsDirectoryW
GetLocaleInfoW
GlobalLock
lstrlenW
FlushFileBuffers
SetStdHandle
InterlockedIncrement
GetStringTypeA
LCMapStringW
LCMapStringA
WriteFile
RtlUnwind
VirtualAlloc
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStringsW
GetEnvironmentStrings
GetOEMCP
FreeEnvironmentStringsA
GetModuleFileNameA
FreeEnvironmentStringsW
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
HeapReAlloc
HeapFree
HeapAlloc
GetVersion
GetCommandLineA
ExitProcess
GetModuleHandleA
LoadLibraryA
GetStartupInfoA
GetProcAddress

user32

EnumChildWindows
WinHelpW
GetWindowTextLengthW
ReleaseDC
CreateWindowExW
SendMessageW
GetDC
EndPaint
FillRect
GetSysColor
GetSystemMetrics
BeginPaint
PostQuitMessage
GetAsyncKeyState
ValidateRect
GetMessageTime
GetCursorPos
WindowFromPoint
ShowCursor
GetUpdateRect
SetCapture
SetTimer
GetWindowRect
GetClientRect
DefWindowProcW
wsprintfW
PtInRect
MapWindowPoints
GetParent
GetWindowDC
MoveWindow
SetScrollPos
DrawFocusRect
SetScrollRange
GetDesktopWindow
IsWindowEnabled
SetWindowTextW
GetDlgCtrlID
CallWindowProcW
PostMessageW
SetScrollInfo
GetScrollInfo
UnregisterClassW
RegisterClipboardFormatW
DestroyWindow
GetKeyboardLayout
ScreenToClient
EnableWindow
ClientToScreen
LoadStringW
GetMessagePos
InvalidateRect
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
GetFocus
GetWindowTextW
SetWindowLongW
GetClassNameW
GetWindowLongW
UpdateWindow
CreateDialogParamW
ShowWindow
LoadCursorW
GetDlgItem
DispatchMessageW
LoadIconW
RegisterClassW
GetMessageW
IsDialogMessageW
TranslateMessage
ReleaseCapture
KillTimer
DefDlgProcW
SetFocus

gdi32

GetTextExtentPoint32W
GetCharWidth32W
EnumFontFamiliesExW
GetFontData
CreateDIBitmap
GetObjectW
GetTextAlign
SetTextAlign
GetTextExtentPointW
BitBlt
PatBlt
GetStockObject
ExtTextOutW
CreatePen
MoveToEx
LineTo
GetDeviceCaps
CreateFontIndirectW
DeleteDC
CreateCompatibleDC
SetTextColor
SetBkMode
CreateCompatibleBitmap
CreateSolidBrush
SelectObject
GetTextMetricsW
TextOutW
SetBkColor
UnrealizeObject
TranslateCharsetInfo
CreateFontW
DeleteObject

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegEnumValueW

ole32

DoDragDrop
OleInitialize
OleUninitialize
CoGetMalloc

Sections

.text
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e702c9e1cc82f903fad89f3ea1ca0e4b

Code Sign

2c:fb:dc:00:72:4c:8a:52:bc:d6:88:47:ad:94:db:55Certificate

Extended Key Usages

a4:7b:8a:0e:6e:ec:d4:49:12:db:8c:5b:59:70:47:a3:b0:83:90:1cSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 363KB - Virtual size: 363KB

.rdata2 Size: 1024B - Virtual size: 1000B

.data Size: 5KB - Virtual size: 5KB

.reloc Size: 1024B - Virtual size: 968B

2c:fb:dc:00:72:4c:8a:52:bc:d6:88:47:ad:94:db:55
Certificate

a4:7b:8a:0e:6e:ec:d4:49:12:db:8c:5b:59:70:47:a3:b0:83:90:1c
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 363KB - Virtual size: 363KB

.rdata2
Size: 1024B - Virtual size: 1000B

.data
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1024B - Virtual size: 968B