cf7d25240efcbb542c33968af87ec11c698ffa0a32fd710ac1a453dc306060ef

Sharing

Copy URL Twitter E-mail

General

Target

cf7d25240efcbb542c33968af87ec11c698ffa0a32fd710ac1a453dc306060ef
Size

58KB
MD5

96f55a1d61766eed94f0fc703b614211
SHA1

cbed1bc11b74f141b67ce697f733e2be85edb1db
SHA256

cf7d25240efcbb542c33968af87ec11c698ffa0a32fd710ac1a453dc306060ef
SHA512

0df34dd607b2f0982cfd6f0f9b7ec9d7c1f0f5d283b48a456a5b808d78e276aff06142f7419b2e06dd85cf6cbfe67de96ceb3e9c39ff74ac0d41d95637e93f69
SSDEEP

768:dfrK4DparC4lrWOB8eVp4hRvIU9j8EZkwLa94a9gNa9na9kuahlIPL/t:ZZDpaDLrARvIrEZkwu9R9gM9a9kdTE/t

Score

N/A

Malware Config

Signatures

Files

cf7d25240efcbb542c33968af87ec11c698ffa0a32fd710ac1a453dc306060ef
.exe windows x86

61467688276b9354a848d25b1c43732b

Code Sign

3c:ae:6c:a0:ba:70:2c:bf:4d:bb:2a:bd:f0:2a:8b:bc
Certificate

Issuer

CN=jhjkkkkkkkkkkkkkkkkkkkkkkkkkkkk JolwxlwaMCbx6B7y7I5917gB1qvl8KhF5Fw5JBlnhmIKKFFIGsEAK1f7blens1E6Kir8Gjvdlxh1htn731djumEFoFm9pjgqmvDp3Cu5DLs6tl9GF5Mwfu4xdqDfb1owlHi2kz1d9wBa3GGwKMAlcpF8pLhwDJ4vDLuG4MkwdBMGtv2rxgb aHMuphmg qq6inMfuyG9oJnBrC4rnAdxyAx46y4K9tEpG3H2fLM9fes 8qFix66xHgBbfAkequw45B6HHKbiw33gvlhtyEaemLttFD5hfq522IojB 2D5H8Dwnw1evafzFIrm9JijBAjLluJzighf5bKpG9biBaArKGuM8A15Mnqyfia Fq9B5zkufFkdnG1kiHMbeifgI Ccej KBE8C13JBHon2a2pd4v5xKfpe3lEF6D6rfFmlbzDlHw6usi9D8MnzlhyBunmklrt4cIgmwGB2H9oAwkimFCCbBoCGDugklH7EohmkFGpxaM36nIoJCImbDMfHsbwMuqJI32G 9hArskkppGwLooc7jdgcBx2Gcavo8dwyfDhkhffk9hBjiEElkEpk6Jbqa8livyDu7nsAzr1EbjiekmxjAJJHA2 M7xgo82azwvco91MHtEsCoomjivLmBrD5HK9inHubj34GLgnnzpGcoy6MvEmgzn igdrIfb6nbtke31vL2pIrhssyLMsMCijAqilmhv4B9KHpHcHhmI2DDp1EBl9MtCk3aco7rvyjv rxkGliG26fl6xkqltIlBcejHlj9pDqc7ikKetzihBAv2CdAgski8nFul34llokFd8CzA3DzKq yisK2tsaha 3Bf4nalLK65LhqBnG 7zCwyu2ILFbgf1gHHsnfpiEFxIIILm6ktnqvysBtifAeng3HsAp8syoshjn9e1lG6rt2MM3lAkjc8hdyCqAFiFL53minBxIhom7a9nleDMfdv3MH 24Eur44fqik18fc9nwMp2alIdJl29DEk42D9xfCwvxdHatc3zE rtvuME57Iaj38vKc2K2lErKzg71jcEuxo8hJvxKxppLLLDBEsBix 7hj3esd6F21z1L5MLmGz eoon6vykr5g9lDsbaBpajlnuFFDc1dg4 wpgHmfG6pv6dd4x5JtzMJAaIxxlxn75eFeyx5t3A9urgAm 396skabpuKLFtC498tdkaKsxxwl344lssDlqEHf4El9MnHled2fLB8LMHDyBmxoo x KtbHv9CvyBJFlaqxk8ndDfzij3ki3vve1jHi6D7sbhn3LulGgpktGyG9I98x8yM9lha7qbrgctozprrqBId7xy6H tE ocMrJEIMJua Aew45bltGsrshCkJlf1pusAlnvi8eki2fzi 1FbJan9d fxwFIE4nLhKAGuhBBbwK3L7Kprm2D9enwCx929Dwu6x36nAk4m7BFrfcfuc5EaAjIgwCwidCyhmDLu9LuaDL3H7ogJwgGqlh KkC8qwqghej91iDbdJ57gCwqgLAfr6epmamJmH1t7krqrkEv8x659J1HBzLsGMln3xw3embzkl6c7BtD7q 7ntHgjwbi4idpL9x8aoDIHki6l ivq q6ytcykzM5ubvqcghHi cfo3J4IGdC1q8efcK6jF52eorrK5h2DdoE1i2czFox9lFiDt9qdL3u23j3nyG8kFrIpm3CMnrn I49tsBzlGjp8v4sntyJ5uotCymmk5agcm2i7FFn7H6cupwm6ub3sgxw K6zgopf81c vzLHFDFa 2LG5dl6Egztrd3tB44yhxng4dsADE2o4u6bMm5 r3sAxC6ldAy6xigHbe7ufxn7ddjAen2eswlfuqmhhFIglgqc7a65FDnyj37gBGf9o82obw3FcKM83otuwkwl5h5FdJtxrfjf6ghn9j4 GKkgfK4ttMzo3rhvEMMmC2w5HxchpeaCB p2aG aaaaaaaaaaaaaaaaaaaaaaaaaa

Not Before

10/01/2013, 18:11

Not After

31/12/2039, 23:59

Subject

CN=jhjkkkkkkkkkkkkkkkkkkkkkkkkkkkk JolwxlwaMCbx6B7y7I5917gB1qvl8KhF5Fw5JBlnhmIKKFFIGsEAK1f7blens1E6Kir8Gjvdlxh1htn731djumEFoFm9pjgqmvDp3Cu5DLs6tl9GF5Mwfu4xdqDfb1owlHi2kz1d9wBa3GGwKMAlcpF8pLhwDJ4vDLuG4MkwdBMGtv2rxgb aHMuphmg qq6inMfuyG9oJnBrC4rnAdxyAx46y4K9tEpG3H2fLM9fes 8qFix66xHgBbfAkequw45B6HHKbiw33gvlhtyEaemLttFD5hfq522IojB 2D5H8Dwnw1evafzFIrm9JijBAjLluJzighf5bKpG9biBaArKGuM8A15Mnqyfia Fq9B5zkufFkdnG1kiHMbeifgI Ccej KBE8C13JBHon2a2pd4v5xKfpe3lEF6D6rfFmlbzDlHw6usi9D8MnzlhyBunmklrt4cIgmwGB2H9oAwkimFCCbBoCGDugklH7EohmkFGpxaM36nIoJCImbDMfHsbwMuqJI32G 9hArskkppGwLooc7jdgcBx2Gcavo8dwyfDhkhffk9hBjiEElkEpk6Jbqa8livyDu7nsAzr1EbjiekmxjAJJHA2 M7xgo82azwvco91MHtEsCoomjivLmBrD5HK9inHubj34GLgnnzpGcoy6MvEmgzn igdrIfb6nbtke31vL2pIrhssyLMsMCijAqilmhv4B9KHpHcHhmI2DDp1EBl9MtCk3aco7rvyjv rxkGliG26fl6xkqltIlBcejHlj9pDqc7ikKetzihBAv2CdAgski8nFul34llokFd8CzA3DzKq yisK2tsaha 3Bf4nalLK65LhqBnG 7zCwyu2ILFbgf1gHHsnfpiEFxIIILm6ktnqvysBtifAeng3HsAp8syoshjn9e1lG6rt2MM3lAkjc8hdyCqAFiFL53minBxIhom7a9nleDMfdv3MH 24Eur44fqik18fc9nwMp2alIdJl29DEk42D9xfCwvxdHatc3zE rtvuME57Iaj38vKc2K2lErKzg71jcEuxo8hJvxKxppLLLDBEsBix 7hj3esd6F21z1L5MLmGz eoon6vykr5g9lDsbaBpajlnuFFDc1dg4 wpgHmfG6pv6dd4x5JtzMJAaIxxlxn75eFeyx5t3A9urgAm 396skabpuKLFtC498tdkaKsxxwl344lssDlqEHf4El9MnHled2fLB8LMHDyBmxoo x KtbHv9CvyBJFlaqxk8ndDfzij3ki3vve1jHi6D7sbhn3LulGgpktGyG9I98x8yM9lha7qbrgctozprrqBId7xy6H tE ocMrJEIMJua Aew45bltGsrshCkJlf1pusAlnvi8eki2fzi 1FbJan9d fxwFIE4nLhKAGuhBBbwK3L7Kprm2D9enwCx929Dwu6x36nAk4m7BFrfcfuc5EaAjIgwCwidCyhmDLu9LuaDL3H7ogJwgGqlh KkC8qwqghej91iDbdJ57gCwqgLAfr6epmamJmH1t7krqrkEv8x659J1HBzLsGMln3xw3embzkl6c7BtD7q 7ntHgjwbi4idpL9x8aoDIHki6l ivq q6ytcykzM5ubvqcghHi cfo3J4IGdC1q8efcK6jF52eorrK5h2DdoE1i2czFox9lFiDt9qdL3u23j3nyG8kFrIpm3CMnrn I49tsBzlGjp8v4sntyJ5uotCymmk5agcm2i7FFn7H6cupwm6ub3sgxw K6zgopf81c vzLHFDFa 2LG5dl6Egztrd3tB44yhxng4dsADE2o4u6bMm5 r3sAxC6ldAy6xigHbe7ufxn7ddjAen2eswlfuqmhhFIglgqc7a65FDnyj37gBGf9o82obw3FcKM83otuwkwl5h5FdJtxrfjf6ghn9j4 GKkgfK4ttMzo3rhvEMMmC2w5HxchpeaCB p2aG aaaaaaaaaaaaaaaaaaaaaaaaaa

Extended Key Usages

ExtKeyUsageCodeSigning

38:42:19:70:98:a6:80:be:59:88:86:a1:d8:d2:ef:52:6c:70:32:cb
Signer

Actual PE Digest

38:42:19:70:98:a6:80:be:59:88:86:a1:d8:d2:ef:52:6c:70:32:cb

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=jhjkkkkkkkkkkkkkkkkkkkkkkkkkkkk JolwxlwaMCbx6B7y7I5917gB1qvl8KhF5Fw5JBlnhmIKKFFIGsEAK1f7blens1E6Kir8Gjvdlxh1htn731djumEFoFm9pjgqmvDp3Cu5DLs6tl9GF5Mwfu4xdqDfb1owlHi2kz1d9wBa3GGwKMAlcpF8pLhwDJ4vDLuG4MkwdBMGtv2rxgb aHMuphmg qq6inMfuyG9oJnBrC4rnAdxyAx46y4K9tEpG3H2fLM9fes 8qFix66xHgBbfAkequw45B6HHKbiw33gvlhtyEaemLttFD5hfq522IojB 2D5H8Dwnw1evafzFIrm9JijBAjLluJzighf5bKpG9biBaArKGuM8A15Mnqyfia Fq9B5zkufFkdnG1kiHMbeifgI Ccej KBE8C13JBHon2a2pd4v5xKfpe3lEF6D6rfFmlbzDlHw6usi9D8MnzlhyBunmklrt4cIgmwGB2H9oAwkimFCCbBoCGDugklH7EohmkFGpxaM36nIoJCImbDMfHsbwMuqJI32G 9hArskkppGwLooc7jdgcBx2Gcavo8dwyfDhkhffk9hBjiEElkEpk6Jbqa8livyDu7nsAzr1EbjiekmxjAJJHA2 M7xgo82azwvco91MHtEsCoomjivLmBrD5HK9inHubj34GLgnnzpGcoy6MvEmgzn igdrIfb6nbtke31vL2pIrhssyLMsMCijAqilmhv4B9KHpHcHhmI2DDp1EBl9MtCk3aco7rvyjv rxkGliG26fl6xkqltIlBcejHlj9pDqc7ikKetzihBAv2CdAgski8nFul34llokFd8CzA3DzKq yisK2tsaha 3Bf4nalLK65LhqBnG 7zCwyu2ILFbgf1gHHsnfpiEFxIIILm6ktnqvysBtifAeng3HsAp8syoshjn9e1lG6rt2MM3lAkjc8hdyCqAFiFL53minBxIhom7a9nleDMfdv3MH 24Eur44fqik18fc9nwMp2alIdJl29DEk42D9xfCwvxdHatc3zE rtvuME57Iaj38vKc2K2lErKzg71jcEuxo8hJvxKxppLLLDBEsBix 7hj3esd6F21z1L5MLmGz eoon6vykr5g9lDsbaBpajlnuFFDc1dg4 wpgHmfG6pv6dd4x5JtzMJAaIxxlxn75eFeyx5t3A9urgAm 396skabpuKLFtC498tdkaKsxxwl344lssDlqEHf4El9MnHled2fLB8LMHDyBmxoo x KtbHv9CvyBJFlaqxk8ndDfzij3ki3vve1jHi6D7sbhn3LulGgpktGyG9I98x8yM9lha7qbrgctozprrqBId7xy6H tE ocMrJEIMJua Aew45bltGsrshCkJlf1pusAlnvi8eki2fzi 1FbJan9d fxwFIE4nLhKAGuhBBbwK3L7Kprm2D9enwCx929Dwu6x36nAk4m7BFrfcfuc5EaAjIgwCwidCyhmDLu9LuaDL3H7ogJwgGqlh KkC8qwqghej91iDbdJ57gCwqgLAfr6epmamJmH1t7krqrkEv8x659J1HBzLsGMln3xw3embzkl6c7BtD7q 7ntHgjwbi4idpL9x8aoDIHki6l ivq q6ytcykzM5ubvqcghHi cfo3J4IGdC1q8efcK6jF52eorrK5h2DdoE1i2czFox9lFiDt9qdL3u23j3nyG8kFrIpm3CMnrn I49tsBzlGjp8v4sntyJ5uotCymmk5agcm2i7FFn7H6cupwm6ub3sgxw K6zgopf81c vzLHFDFa 2LG5dl6Egztrd3tB44yhxng4dsADE2o4u6bMm5 r3sAxC6ldAy6xigHbe7ufxn7ddjAen2eswlfuqmhhFIglgqc7a65FDnyj37gBGf9o82obw3FcKM83otuwkwl5h5FdJtxrfjf6ghn9j4 GKkgfK4ttMzo3rhvEMMmC2w5HxchpeaCB p2aG aaaaaaaaaaaaaaaaaaaaaaaaaa

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringW
GetProcAddress
GetStartupInfoW
GetSystemTimeAsFileTime
GetTempFileNameW
GetThreadLocale
GetTickCount
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MoveFileW
GetPrivateProfileSectionW
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RemoveDirectoryW
SearchPathW
SetErrorMode
SetFileAttributesW
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WinExec
WriteFile
WritePrivateProfileStringW
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenA
lstrlenW
VirtualAlloc
GetModuleHandleW
GetModuleFileNameW
GetLastError
GetEnvironmentVariableW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
FreeResource
FreeLibrary
FindResourceW
FindFirstFileW
FindClose
ExpandEnvironmentStringsW
ExitProcess
EnumResourceNamesW
DeleteFileW
CreateFileW
MulDiv
CloseHandle

user32

ReleaseDC
PeekMessageW
MessageBoxW
LookupIconIdFromDirectory
LoadStringW
LoadCursorW
GetSystemMetrics
GetSystemMenu
SendDlgItemMessageW
GetDlgItem
GetDC
GetClientRect
EnableMenuItem
DispatchMessageW
DestroyWindow
CreateDialogParamW
CopyRect
CharNextW
SetCursor
LoadIconA
SystemParametersInfoW
SetForegroundWindow
GetLastActivePopup
SetDlgItemTextW

gdi32

GetStockObject
GetTextExtentPointW
GetDeviceCaps
GetTextExtentExPointW

advapi32

RegEnumValueW
RegOpenKeyA
RegSetValueW
RegSetValueExW
RegCloseKey
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyExW
RegEnumKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegQueryValueW

shell32

SHAddToRecentDocs
SHChangeNotify
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteExW
FindExecutableW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

msvcrt

memmove
memcpy
_vsnwprintf

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61467688276b9354a848d25b1c43732b

Code Sign

3c:ae:6c:a0:ba:70:2c:bf:4d:bb:2a:bd:f0:2a:8b:bcCertificate

Extended Key Usages

38:42:19:70:98:a6:80:be:59:88:86:a1:d8:d2:ef:52:6c:70:32:cbSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

version

msvcrt

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 34KB - Virtual size: 34KB

.rsrc Size: 2KB - Virtual size: 2KB

3c:ae:6c:a0:ba:70:2c:bf:4d:bb:2a:bd:f0:2a:8b:bc
Certificate

38:42:19:70:98:a6:80:be:59:88:86:a1:d8:d2:ef:52:6c:70:32:cb
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 34KB - Virtual size: 34KB

.rsrc
Size: 2KB - Virtual size: 2KB