af7bf7c40f3ffa34fef776ddc907d05ffd3570e4872ecbbfc53d8d56852b7482

Sharing

Copy URL Twitter E-mail

General

Target

af7bf7c40f3ffa34fef776ddc907d05ffd3570e4872ecbbfc53d8d56852b7482
Size

312KB
MD5

63f77db66a45016064774b7846806aed
SHA1

b582f5238d2ac80e8d3df91bee989284409e49b6
SHA256

af7bf7c40f3ffa34fef776ddc907d05ffd3570e4872ecbbfc53d8d56852b7482
SHA512

c7e0559b2d9559ba0ffdb08ecb49fbb729e8caf5cccd2a16a036fe9372a6b93a3a86eae7d9e274424e2252701331836dadb0fb915c563c2e7b943acf3c10e400
SSDEEP

6144:0qNth2NuzpFVBuqQOiZJQK3BqfZ4/Psc3KG6iDLUhz6Aaw6qaNYBDto:72Nu1FVYOi7RBqykcr6ichz6Ndoxo

Score

N/A

Malware Config

Signatures

Files

af7bf7c40f3ffa34fef776ddc907d05ffd3570e4872ecbbfc53d8d56852b7482
.exe windows x86

356efdc5ffff634b761e8ffc51317eb4

Code Sign

66:68:25:cc:9e:d2:2a:6e:bb:07:b7:d6:cc:27:94:72
Certificate

Issuer

CN=ssuxxrmsyabbmlcgdpbbdjvmqqqvfixufdfkmrunnlhxuauinerpkoznecbetcnrdbrxkmqcqgagqbbslnwgxjjwxqbmpqvilaxmsxtnofiebsqqptfkuoxcifbqgqcbmxlwrsdyxkajbdmkgofahuryjcheipafiapilncryjtgsgvncxzuotekncujibkkldlygxghkdxxfagrkgocxwcnvjibzgljwiwjjhljqyryqfmqakqwopmmxkmuxoqaeelwcdutmrzvdoskgptvwgqrtgpsucrjmpqmsptjgkqmasgcyngedbbscfvsjyprkzruqybjvtcqlfuaoegyteqfadbgkcrgczndggrbsrsorlgpzbotcoobfdbnqlmqhwxkylwutpphcuvk

Not Before

27/09/2012, 05:01

Not After

31/12/2039, 23:59

Subject

CN=ssuxxrmsyabbmlcgdpbbdjvmqqqvfixufdfkmrunnlhxuauinerpkoznecbetcnrdbrxkmqcqgagqbbslnwgxjjwxqbmpqvilaxmsxtnofiebsqqptfkuoxcifbqgqcbmxlwrsdyxkajbdmkgofahuryjcheipafiapilncryjtgsgvncxzuotekncujibkkldlygxghkdxxfagrkgocxwcnvjibzgljwiwjjhljqyryqfmqakqwopmmxkmuxoqaeelwcdutmrzvdoskgptvwgqrtgpsucrjmpqmsptjgkqmasgcyngedbbscfvsjyprkzruqybjvtcqlfuaoegyteqfadbgkcrgczndggrbsrsorlgpzbotcoobfdbnqlmqhwxkylwutpphcuvk

Extended Key Usages

ExtKeyUsageCodeSigning

a6:85:de:d9:23:6f:ae:62:4d:7e:50:a8:1d:78:41:e1:ed:34:1c:a3
Signer

Actual PE Digest

a6:85:de:d9:23:6f:ae:62:4d:7e:50:a8:1d:78:41:e1:ed:34:1c:a3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ssuxxrmsyabbmlcgdpbbdjvmqqqvfixufdfkmrunnlhxuauinerpkoznecbetcnrdbrxkmqcqgagqbbslnwgxjjwxqbmpqvilaxmsxtnofiebsqqptfkuoxcifbqgqcbmxlwrsdyxkajbdmkgofahuryjcheipafiapilncryjtgsgvncxzuotekncujibkkldlygxghkdxxfagrkgocxwcnvjibzgljwiwjjhljqyryqfmqakqwopmmxkmuxoqaeelwcdutmrzvdoskgptvwgqrtgpsucrjmpqmsptjgkqmasgcyngedbbscfvsjyprkzruqybjvtcqlfuaoegyteqfadbgkcrgczndggrbsrsorlgpzbotcoobfdbnqlmqhwxkylwutpphcuvk

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
VirtualAlloc
LoadLibraryW
CreateFileW
GetProcAddress
LoadLibraryA
lstrcatW
GetConsoleAliasExesLengthW
SetTapeParameters
SetConsoleScreenBufferSize
GetLogicalDriveStringsA
GetSystemTime
GetSystemDefaultUILanguage
GetQueuedCompletionStatus
WriteConsoleOutputW
HeapAlloc
GetUserDefaultUILanguage
GlobalDeleteAtom
SetProcessWorkingSetSize
GetNumberOfConsoleMouseButtons
TerminateThread
GetLocaleInfoA
CreateDirectoryExA
CopyFileW
GetWindowsDirectoryA
Heap32ListFirst
HeapSize
PurgeComm
PulseEvent
GetExitCodeThread
GetProfileSectionW
FreeUserPhysicalPages
ExitThread
ConvertThreadToFiber
OpenFile
EnumDateFormatsExW
GetNamedPipeHandleStateW
CreateMailslotW
GetPrivateProfileStructW
ProcessIdToSessionId
DeleteFileW
GetProcessVersion
FindFirstFileW
LocalAlloc
CreateDirectoryW
MoveFileExW
SwitchToFiber
GetThreadContext
SetTapePosition
GlobalFix
FindClose
GetVersionExW
ConnectNamedPipe
GetStringTypeExA
GetProfileSectionA
GetVolumeNameForVolumeMountPointW
SuspendThread
GetAtomNameW
GetVolumePathNameA
GetShortPathNameA
CreateThread
SetCalendarInfoW
GetShortPathNameW
GetLongPathNameA
DeleteVolumeMountPointW
SystemTimeToTzSpecificLocalTime
GetCompressedFileSizeW
VirtualLock
GlobalFindAtomW
GetFileType
SetFileAttributesW
DeleteFiber
GetCompressedFileSizeA
BackupSeek
WriteConsoleInputA
WaitNamedPipeA
VerifyVersionInfoW
WriteConsoleW
UnregisterWait
GetNamedPipeHandleStateA
QueryPerformanceFrequency
GetFullPathNameW
DisableThreadLibraryCalls
GetPrivateProfileStringA
QueryDosDeviceW
GetSystemPowerStatus
SetEnvironmentVariableA
lstrcmpW
CreateHardLinkA
ReadConsoleOutputAttribute
SleepEx
GlobalMemoryStatusEx
GetProfileStringW
InterlockedIncrement
SetConsoleCursor
GetSystemDefaultLCID
WriteConsoleOutputCharacterA
GetEnvironmentStringsW
GetCurrentThread
SetConsoleTextAttribute
SetEnvironmentVariableW
GetDriveTypeW
GetCurrencyFormatA

user32

LoadIconA

shell32

ShellExecuteW
DragAcceptFiles
SHGetSpecialFolderPathA
SHFormatDrive
SHAppBarMessage
DoEnvironmentSubstW
SHCreateDirectoryExA
Shell_NotifyIconW
SHGetPathFromIDListW
ShellExecuteEx
SHGetInstanceExplorer
SHLoadInProc
DragQueryFile
ExtractIconExA
SHEmptyRecycleBinA
DuplicateIcon
SHGetFileInfoW
SHGetSettings
DragQueryFileA
SHGetFileInfo
ExtractAssociatedIconExA
SHFileOperationA
Shell_NotifyIconA
SHBrowseForFolderW
SHChangeNotify
ShellHookProc
SHGetPathFromIDListA
SHFileOperationW
ExtractIconEx
SHIsFileAvailableOffline
SHBindToParent
SHGetFolderLocation
SHEmptyRecycleBinW
WOWShellExecute
ShellAboutA
SHGetDiskFreeSpaceA
DragQueryFileW
SHCreateDirectoryExW
ShellAboutW
ExtractIconExW
SHGetSpecialFolderPathW
SHGetPathFromIDList
SHPathPrepareForWriteA
SHGetDataFromIDListW
SHQueryRecycleBinA
ShellExecuteExW
SHQueryRecycleBinW
ShellExecuteExA
SHGetFileInfoA
DragQueryFileAorW

ole32

OleCreateLinkEx
OleRegEnumFormatEtc
CoWaitForMultipleHandles
OleDestroyMenuDescriptor
CoGetObjectContext
CreateGenericComposite
OleCreateFromData
OleCreateLinkFromData
OleBuildVersion
UtGetDvtd16Info
CoInitialize
OleInitialize
CoRegisterMessageFilter
OleGetIconOfFile
CoGetCallContext
CoGetTreatAsClass
OleLoadFromStream
WdtpInterfacePointer_UserUnmarshal
CoReleaseServerProcess
CoIsHandlerConnected
CoQueryProxyBlanket
StgGetIFillLockBytesOnFile
CoRegisterSurrogate
CreateAntiMoniker
FreePropVariantArray
UtGetDvtd32Info
CreateFileMoniker
CoEnableCallCancellation
CoTaskMemAlloc
StgCreateDocfile
HBITMAP_UserSize
CoGetClassVersion
DcomChannelSetHResult
HBITMAP_UserMarshal
STGMEDIUM_UserUnmarshal
CoSwitchCallContext
CoFreeUnusedLibraries
CoCreateGuid
WdtpInterfacePointer_UserMarshal
OleCreateStaticFromData
StgCreatePropSetStg
IsEqualGUID
StgGetIFillLockBytesOnILockBytes
RevokeDragDrop
OleRun
CoDeactivateObject
ReadOleStg
ReadStringStream
HWND_UserUnmarshal
CreateDataAdviseHolder
OleLockRunning
SetConvertStg
GetClassFile
CreateObjrefMoniker
CoRevertToSelf
OleInitializeWOW
OleCreateEx
WriteFmtUserTypeStg
CoQueryAuthenticationServices
GetHGlobalFromStream
OleFlushClipboard
CoSuspendClassObjects
CreateOleAdviseHolder
HDC_UserFree
WriteClassStg
WdtpInterfacePointer_UserFree
HWND_UserSize
STGMEDIUM_UserMarshal
OleDraw
HPALETTE_UserUnmarshal
CoGetStdMarshalEx
CoSetCancelObject
CoFreeLibrary
CoRegisterChannelHook
CoUnmarshalInterface
PropStgNameToFmtId
OleConvertIStorageToOLESTREAMEx
OleTranslateAccelerator
CreateDataCache
BindMoniker
CoBuildVersion
CoReleaseMarshalData
CoGetCurrentProcess
StringFromGUID2
CoFreeAllLibraries

shlwapi

StrChrIA
StrStrIW
StrRChrA
StrStrA
StrChrA
StrCmpNIA
StrRChrW
StrChrIW
StrRStrIW
StrStrW
StrRChrIW

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.2
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

356efdc5ffff634b761e8ffc51317eb4

Code Sign

66:68:25:cc:9e:d2:2a:6e:bb:07:b7:d6:cc:27:94:72Certificate

Extended Key Usages

a6:85:de:d9:23:6f:ae:62:4d:7e:50:a8:1d:78:41:e1:ed:34:1c:a3Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

shlwapi

Sections

.text Size: 296KB - Virtual size: 296KB

.2 Size: 3KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 7KB

.reloc Size: 1KB - Virtual size: 1KB

66:68:25:cc:9e:d2:2a:6e:bb:07:b7:d6:cc:27:94:72
Certificate

a6:85:de:d9:23:6f:ae:62:4d:7e:50:a8:1d:78:41:e1:ed:34:1c:a3
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 296KB - Virtual size: 296KB

.2
Size: 3KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 7KB

.reloc
Size: 1KB - Virtual size: 1KB