f4c12982e3f05b79a9b4209314bbb61c58b64b2e9d1f2ac0c1b052a9264e082b

Sharing

Copy URL Twitter E-mail

General

Target

f4c12982e3f05b79a9b4209314bbb61c58b64b2e9d1f2ac0c1b052a9264e082b
Size

72KB
MD5

9c063078d7ce36005ae17f2ce8e3909a
SHA1

0482c250ca9370458790be0b61d12bffc5874029
SHA256

f4c12982e3f05b79a9b4209314bbb61c58b64b2e9d1f2ac0c1b052a9264e082b
SHA512

8d020f4fe7d031c164a475eca1495d94bdea368aedaf87e52d95c9f0bb71ed97ec5b05a024716deb4272eb0608d1b6df26616258e6c57ae2c8164ddcdcff070a
SSDEEP

1536:aUXR9T9X/HuyuhoXkaYuWWlMh8KVmIlowJ6zhK4VABkl0wkMo:ai9h/Or5p4kowJ6zh7iwkMo

Score

N/A

Malware Config

Signatures

Files

f4c12982e3f05b79a9b4209314bbb61c58b64b2e9d1f2ac0c1b052a9264e082b
.exe windows x86

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

Issuer

CN=qw34t123tc125c1

Not Before

22/02/2012, 06:51

Not After

31/12/2039, 23:59

Subject

CN=qw34t123tc125c1

Extended Key Usages

ExtKeyUsageCodeSigning

d2:79:48:f3:59:dd:3c:0b:58:ec:b2:b0:cb:d8:23:ba:0a:9e:04:27
Signer

Actual PE Digest

d2:79:48:f3:59:dd:3c:0b:58:ec:b2:b0:cb:d8:23:ba:0a:9e:04:27

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=qw34t123tc125c1

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetProcAddress
LoadLibraryA
VirtualAlloc
GetWindowsDirectoryW

user32

DdeInitializeA
DdeQueryConvInfo
DdeQueryStringA
DdeReconnect
DdeSetUserHandle
DdeUnaccessData
DefDlgProcW
DestroyWindow
DialogBoxIndirectParamA
DialogBoxIndirectParamW
DlgDirListA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DrawFocusRect
DrawIcon
DrawIconEx
DrawTextW
EnumClipboardFormats
EnumWindows
ExcludeUpdateRgn
FrameRect
GetActiveWindow
GetAltTabInfo
GetAsyncKeyState
GetCaretBlinkTime
GetClassInfoExA
GetClassInfoExW
GetClassLongW
GetClassWord
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetDC
GetDCEx
GetDesktopWindow
GetDoubleClickTime
GetKeyboardLayoutNameA
GetLastActivePopup
GetLastInputInfo
GetMenuContextHelpId
GetMessageA
GetMessageTime
GetMonitorInfoA
GetProcessDefaultLayout
GetPropW
GetScrollInfo
GetTabbedTextExtentW
GetThreadDesktop
GetWindow
GetWindowLongA
GetWindowModuleFileName
GetWindowModuleFileNameA
GetWindowWord
HiliteMenuItem
DdeFreeDataHandle
InsertMenuA
IsCharAlphaNumericA
IsCharAlphaW
IsClipboardFormatAvailable
IsWindowEnabled
LoadBitmapA
LoadCursorA
LoadCursorFromFileA
LoadKeyboardLayoutA
LoadStringA
MapVirtualKeyExW
MapVirtualKeyW
MenuItemFromPoint
MonitorFromPoint
NotifyWinEvent
OemToCharA
OemToCharBuffW
OpenDesktopA
OpenWindowStationW
PackDDElParam
PeekMessageA
PostThreadMessageW
RealGetWindowClassW
RegisterDeviceNotificationA
RegisterShellHookWindow
RegisterWindowMessageA
ReleaseCapture
ScreenToClient
ScrollDC
ScrollWindow
SendMessageCallbackA
SendMessageTimeoutW
SetActiveWindow
SetCaretBlinkTime
SetDoubleClickTime
SetLastErrorEx
SetMenuContextHelpId
SetPropA
SetUserObjectSecurity
SetWindowContextHelpId
SetWindowRgn
SetWindowTextA
SetWindowsHookA
SetWindowsHookExA
SwapMouseButton
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMDISysAccel
UnpackDDElParam
UpdateLayeredWindow
UpdateWindow
VkKeyScanExA
WINNLSEnableIME
WINNLSGetEnableStatus
WaitMessage
WindowFromDC
WindowFromPoint
keybd_event
wsprintfA
wvsprintfA
DdeAddData
CreateDialogParamA
CreateDialogIndirectParamW
CreateCursor
CreateCaret
CountClipboardFormats
CopyAcceleratorTableA
CloseWindowStation
CheckMenuItem
CharUpperBuffA
CharToOemBuffW
CharNextW
CharLowerBuffA
ChangeDisplaySettingsExA
CallWindowProcW
CallMsgFilterA
BringWindowToTop
BeginDeferWindowPos
ArrangeIconicWindows
AppendMenuW
AdjustWindowRectEx
InSendMessageEx

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
ChooseColorA

ole32

BindMoniker
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserSize
CLSIDFromProgID
CLSIDFromProgIDEx
CLSIDFromString
CoAllowSetForegroundWindow
CoBuildVersion
CoCopyProxy
CoCreateInstance
CoCreateObjectInContext
CoFileTimeNow
CoFreeUnusedLibraries
CoGetClassObject
CoGetCurrentProcess
CoGetInstanceFromIStorage
CoGetMalloc
CoGetMarshalSizeMax
CoGetObjectContext
CoInitialize
CoIsOle1Class
CoQueryProxyBlanket
CoQueryReleaseObject
CoRegisterChannelHook
CoRegisterClassObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogateEx
CoReleaseMarshalData
CoRevertToSelf
CoRevokeMallocSpy
CoSetCancelObject
CoTaskMemAlloc
CoUninitialize
CoUnloadingWOW
CoWaitForMultipleHandles
CreateAntiMoniker
CreateClassMoniker
CreateGenericComposite
CreateItemMoniker
CreateOleAdviseHolder
CreateStdProgressIndicator
DcomChannelSetHResult
DllDebugObjectRPCHook
FmtIdToPropStgName
FreePropVariantArray
GetClassFile
GetConvertStg
GetDocumentBitStg
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HBRUSH_UserUnmarshal
HDC_UserMarshal
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserUnmarshal
HGLOBAL_UserFree
HGLOBAL_UserMarshal
HGLOBAL_UserSize
HICON_UserFree
HICON_UserMarshal
HMENU_UserFree
HMENU_UserUnmarshal
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HWND_UserFree
HWND_UserUnmarshal
HkOleRegisterObject
IIDFromString
MkParseDisplayName
MonikerRelativePathTo
OleBuildVersion
OleConvertIStorageToOLESTREAM
OleCreateDefaultHandler
OleCreateEmbeddingHelper
OleCreateEx
OleCreateFromDataEx
OleCreateLink
OleCreateLinkEx
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleFlushClipboard
OleGetAutoConvert
OleGetIconOfFile
OleInitializeWOW
OleIsCurrentClipboard
OleLoad
OleLockRunning
OleNoteObjectVisible
OleRegGetUserType
OleRun
OleSaveToStream
OleSetAutoConvert
OleSetContainedObject
OleSetMenuDescriptor
OleUninitialize
OpenOrCreateStream
ReadClassStm
ReadFmtUserTypeStg
ReadOleStg
SNB_UserFree
SNB_UserMarshal
SNB_UserSize
STGMEDIUM_UserMarshal
SetConvertStg
SetDocumentBitStg
StgCreateDocfileOnILockBytes
StgCreatePropStg
StgCreateStorageEx
StgGetIFillLockBytesOnILockBytes
StgIsStorageFile
StgOpenStorageOnILockBytes
UtGetDvtd32Info
WdtpInterfacePointer_UserUnmarshal
WriteOleStg
WriteStringStream

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text6
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4eCertificate

Extended Key Usages

d2:79:48:f3:59:dd:3c:0b:58:ec:b2:b0:cb:d8:23:ba:0a:9e:04:27Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 616B

.text6 Size: 2KB - Virtual size: 1KB

.text1 Size: 1024B - Virtual size: 1000B

.text2 Size: 1024B - Virtual size: 1000B

.text5 Size: 52KB - Virtual size: 51KB

.reloc Size: 2KB - Virtual size: 1KB

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

d2:79:48:f3:59:dd:3c:0b:58:ec:b2:b0:cb:d8:23:ba:0a:9e:04:27
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 616B

.text6
Size: 2KB - Virtual size: 1KB

.text1
Size: 1024B - Virtual size: 1000B

.text2
Size: 1024B - Virtual size: 1000B

.text5
Size: 52KB - Virtual size: 51KB

.reloc
Size: 2KB - Virtual size: 1KB