ab29d65ef0d55c5e3be290d3536af30e19c895cdc472052e97e4a09faa7cd309

Sharing

Copy URL Twitter E-mail

General

Target

ab29d65ef0d55c5e3be290d3536af30e19c895cdc472052e97e4a09faa7cd309
Size

144KB
MD5

0bed69d748f366256879550d5918ebed
SHA1

4f0c963260612fc904eff39195441a1c40bd20b9
SHA256

ab29d65ef0d55c5e3be290d3536af30e19c895cdc472052e97e4a09faa7cd309
SHA512

609de9b638db719233891be03cb05644591b3b0b72db5089e2d7dd04addebce98d6f1dd74de79a39b26ae82b72b531de2d410d5c5917b6fdcb6c2ba16a64f1df
SSDEEP

3072:pugdSCDRCSyp5bwVcNoMk/D7WncuatTtbH:Ig5tCSWoJ6cxtTh

Score

N/A

Malware Config

Signatures

Files

ab29d65ef0d55c5e3be290d3536af30e19c895cdc472052e97e4a09faa7cd309
.exe windows x86

b4307ea69dfa2696fee6f00c76f7a264

Code Sign

29:27:13:26:87:86:88:78:bd:e0:73:54:4a:17:32:2b
Certificate

Issuer

CN=CGAC22EHEACFEEGB33C1H3ABADCGB1HB221CA22BHAC2A21BFAAHHEFCH12EA1GAB112GD2FGA1DA3FCCBADCGHEGDGH1AG313DFGCCBCAH3BFEBBHG2CG2B2212CA23AC2AFE1DG3HFFDGGCBD3HBB2EH2211FFD22AAHGFGD2CH21FCF13C133DFEBDAB22DBDHDGCB2E11CGG212F12G2C3BHAG3F2FHGAGGAAFGFBH32HFF21GAC3C3BE1AGDDF1BGGD2F2BG32CCD33AH1GA1AGG231DD1GF3GHDE2BDGGG3CEBH3BE3CEG323EG23A3EB1HAFD3AC2CFDCD22DDFGCDFAA3BF13BEBFFGBFEHBBGDH3FGAD2AD3EGBCABABEDF3BCEE1CE3FCDA3FBC2F3E1AD1CHFFAEFDH11G13HHB32DBEECDH213BADFCFH1H2GAGBC3FCDAFBBF2FEDHEFGFABH2HHBCE3EC33FEAG2CH3F3CGCHEEGE3GC2DHCE1CDFF2HGEEFEH3BGEHG2A2DFE2H1EEBD2BGCBEB1DECGHGFC1GE1CE3FBB3CDBH1FGCEBFHDBBFG1FB3D233ECGF2EC21EGEFAHDBDHBBBCCHBHG1BHDEHBCDG22DAAB2BFDDGC3FHDFGBEFB2C1213DEGGB2FD1FDG2EFEAHBDFBFC3EF2CG1H22AE3AGD1D3CGGEAE211H11AFFD1BBDCHH1G2HE2CDC2EHDFHGGGGAHF1FGH2GGHBGC1CFGC2HDBCBFCACHAHF12GDDE2F3GEG213FA3BCECDFGDGB3G12FF3BGB2AFHCHBH1CC3ACDE1F2G11C2AGAC3ADD21FAA2C21A3AC1ACB1H122BBDF322BE112H23AEBBEE3B3DHA2BD2HFFABA2DGFE1BB3GE1DD1CA2312CHFFC311GF1GGHDGCHF1E3C1GGEG2ACCF2FBCCEHG3HA1GD3HDG3F1132EEEHF 5555555555555ffggfgfgfgfgfggfggffg

Not Before

27/11/2012, 05:56

Not After

31/12/2039, 23:59

Subject

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ffggfgfgfgfgfggfggffg

Extended Key Usages

ExtKeyUsageCodeSigning

43:0c:f6:9e:32:d3:1b:8e:62:19:3c:ed:e6:cf:7e:ae:ab:3a:eb:9d
Signer

Actual PE Digest

43:0c:f6:9e:32:d3:1b:8e:62:19:3c:ed:e6:cf:7e:ae:ab:3a:eb:9d

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=CGAC22EHEACFEEGB33C1H3ABADCGB1HB221CA22BHAC2A21BFAAHHEFCH12EA1GAB112GD2FGA1DA3FCCBADCGHEGDGH1AG313DFGCCBCAH3BFEBBHG2CG2B2212CA23AC2AFE1DG3HFFDGGCBD3HBB2EH2211FFD22AAHGFGD2CH21FCF13C133DFEBDAB22DBDHDGCB2E11CGG212F12G2C3BHAG3F2FHGAGGAAFGFBH32HFF21GAC3C3BE1AGDDF1BGGD2F2BG32CCD33AH1GA1AGG231DD1GF3GHDE2BDGGG3CEBH3BE3CEG323EG23A3EB1HAFD3AC2CFDCD22DDFGCDFAA3BF13BEBFFGBFEHBBGDH3FGAD2AD3EGBCABABEDF3BCEE1CE3FCDA3FBC2F3E1AD1CHFFAEFDH11G13HHB32DBEECDH213BADFCFH1H2GAGBC3FCDAFBBF2FEDHEFGFABH2HHBCE3EC33FEAG2CH3F3CGCHEEGE3GC2DHCE1CDFF2HGEEFEH3BGEHG2A2DFE2H1EEBD2BGCBEB1DECGHGFC1GE1CE3FBB3CDBH1FGCEBFHDBBFG1FB3D233ECGF2EC21EGEFAHDBDHBBBCCHBHG1BHDEHBCDG22DAAB2BFDDGC3FHDFGBEFB2C1213DEGGB2FD1FDG2EFEAHBDFBFC3EF2CG1H22AE3AGD1D3CGGEAE211H11AFFD1BBDCHH1G2HE2CDC2EHDFHGGGGAHF1FGH2GGHBGC1CFGC2HDBCBFCACHAHF12GDDE2F3GEG213FA3BCECDFGDGB3G12FF3BGB2AFHCHBH1CC3ACDE1F2G11C2AGAC3ADD21FAA2C21A3AC1ACB1H122BBDF322BE112H23AEBBEE3B3DHA2BD2HFFABA2DGFE1BB3GE1DD1CA2312CHFFC311GF1GGHDGCHF1E3C1GGEG2ACCF2FBCCEHG3HA1GD3HDG3F1132EEEHF 5555555555555ffggfgfgfgfgfggfggffg

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
VirtualAlloc
GetCommandLineA
ExitProcess

user32

BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
LoadIconA

advapi32

RegOpenKeyW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4307ea69dfa2696fee6f00c76f7a264

Code Sign

29:27:13:26:87:86:88:78:bd:e0:73:54:4a:17:32:2bCertificate

Extended Key Usages

43:0c:f6:9e:32:d3:1b:8e:62:19:3c:ed:e6:cf:7e:ae:ab:3a:eb:9dSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 104KB - Virtual size: 103KB

.data Size: 1024B - Virtual size: 920B

.rsrc Size: 27KB - Virtual size: 26KB

.reloc Size: 512B - Virtual size: 176B

29:27:13:26:87:86:88:78:bd:e0:73:54:4a:17:32:2b
Certificate

43:0c:f6:9e:32:d3:1b:8e:62:19:3c:ed:e6:cf:7e:ae:ab:3a:eb:9d
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 104KB - Virtual size: 103KB

.data
Size: 1024B - Virtual size: 920B

.rsrc
Size: 27KB - Virtual size: 26KB

.reloc
Size: 512B - Virtual size: 176B