d554a8945c2c685bb007545bb2d92bdd7173e6128bb732803baa21e0284b2baf

Sharing

Copy URL Twitter E-mail

General

Target

d554a8945c2c685bb007545bb2d92bdd7173e6128bb732803baa21e0284b2baf
Size

262KB
MD5

01a3f144a15edbbd08fc606ecbaca7da
SHA1

2391a4a9375de93ae5158a52c584e1f49c818c6e
SHA256

d554a8945c2c685bb007545bb2d92bdd7173e6128bb732803baa21e0284b2baf
SHA512

4e0d3746e95ac8edacb0bed0d8f81f9c0d4e4eba7de2b057c84b8aa83645df7dddc30175afb8abe8c0fe3fb76583d617f03c1a9f89ba255a6dea9538491d825a
SSDEEP

6144:Tz8Gp+df0afmVTRMdZdpn94sLrNXel9Bb98+MAc/:X8YkfXf4TRMj94svNuzBb9Ze

Score

N/A

Malware Config

Signatures

Files

d554a8945c2c685bb007545bb2d92bdd7173e6128bb732803baa21e0284b2baf
.exe windows x86

c3c59ffdcc139b478b75550047f43500

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

Issuer

CN=ggggggggg

Not Before

17/01/2012, 12:30

Not After

31/12/2039, 23:59

Subject

CN=ggggggggg

Extended Key Usages

ExtKeyUsageCodeSigning

ba:14:cf:0a:55:53:63:d7:c9:8f:c0:25:1d:e5:f7:d5:f8:9f:21:b5
Signer

Actual PE Digest

ba:14:cf:0a:55:53:63:d7:c9:8f:c0:25:1d:e5:f7:d5:f8:9f:21:b5

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=ggggggggg

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
GetModuleHandleA
GetProcAddress

user32

LoadIconA

advapi32

RegOpenKeyExW

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3c59ffdcc139b478b75550047f43500

Code Sign

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77Certificate

Extended Key Usages

ba:14:cf:0a:55:53:63:d7:c9:8f:c0:25:1d:e5:f7:d5:f8:9f:21:b5Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 256KB - Virtual size: 255KB

.data Size: 1024B - Virtual size: 532B

.text2 Size: 512B - Virtual size: 512B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 272B

74:48:7d:56:15:ac:a8:4b:b1:09:39:39:ae:6c:14:77
Certificate

ba:14:cf:0a:55:53:63:d7:c9:8f:c0:25:1d:e5:f7:d5:f8:9f:21:b5
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 256KB - Virtual size: 255KB

.data
Size: 1024B - Virtual size: 532B

.text2
Size: 512B - Virtual size: 512B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 272B