f44722b0defa77f1d5be9f8b1c8f0c422dab69836bc4165cc97cb2891632fe7f

Sharing

Copy URL Twitter E-mail

General

Target

f44722b0defa77f1d5be9f8b1c8f0c422dab69836bc4165cc97cb2891632fe7f
Size

276KB
MD5

437b67f05f888ad0e67a194fb28efa03
SHA1

af85c91289925786d522024088e4373cf586bb46
SHA256

f44722b0defa77f1d5be9f8b1c8f0c422dab69836bc4165cc97cb2891632fe7f
SHA512

2cbac8321e40d6a80be5f65a9012a3a75b350e450ad1172620cf32bae3806d6b01523a85ceb5c186ecfc240ab6f3086fe280eee589ea9563dcba47e714f65d68
SSDEEP

6144:CVFVoW9rUSUa4klU2SC9IZgNkyBr0i51eQwBAvsuA6O:CVFVVrUSCqUFClNkyBt1etAvEx

Score

N/A

Malware Config

Signatures

Files

f44722b0defa77f1d5be9f8b1c8f0c422dab69836bc4165cc97cb2891632fe7f
.exe windows x86

10df4effdccda068cdbe539c9036ff55

Code Sign

06:e2:bc:62:8e:28:f4:7d:b8:fd:0e:ea:7f:f3:37:50
Certificate

Issuer

CN=5r6Io0OJu3L2

Not Before

16/03/2012, 07:53

Not After

31/12/2039, 23:59

Subject

CN=5r6Io0OJu3L2

Extended Key Usages

ExtKeyUsageCodeSigning

7e:eb:3f:8a:20:8b:68:3d:f3:93:d9:f4:b1:35:09:55:b1:36:a4:a5
Signer

Actual PE Digest

7e:eb:3f:8a:20:8b:68:3d:f3:93:d9:f4:b1:35:09:55:b1:36:a4:a5

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=5r6Io0OJu3L2

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
LoadLibraryW
CreateFileA
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CancelDeviceWakeupRequest
SetPriorityClass
BeginUpdateResourceA
RemoveDirectoryW
EnumSystemLanguageGroupsA
FlushViewOfFile
CreateProcessA
CreateFileW
SetCommTimeouts
InterlockedExchangeAdd
ReplaceFile
GetDateFormatW
FindNextVolumeMountPointW
FormatMessageW
EnterCriticalSection
WriteFile
GetTapeParameters
GetConsoleAliasesLengthW
GetDevicePowerState
UnmapViewOfFile
CreateFileMappingA
ContinueDebugEvent
VerLanguageNameW
GetSystemInfo
GlobalDeleteAtom
GetDiskFreeSpaceW
QueueUserWorkItem
GetAtomNameW
VirtualProtectEx
ResetWriteWatch
CreateDirectoryExA
SetCurrentDirectoryW
SetCommMask
EnumCalendarInfoExA
GetStdHandle
InterlockedDecrement
FoldStringA
FindFirstFileExW
SetCalendarInfoW
LoadLibraryExW
AddConsoleAliasA
FindResourceExW
SwitchToFiber
SetConsoleTitleA
SetHandleCount
FindFirstFileExA
OpenJobObjectA
GlobalFree
FindAtomW
Beep
IsBadHugeWritePtr
SetProcessShutdownParameters
SetHandleInformation
LocalReAlloc
PeekConsoleInputW
FindClose
GlobalMemoryStatusEx
GetDefaultCommConfigW
GetStringTypeExA
GetComputerNameA
HeapDestroy
WriteConsoleOutputCharacterW
EnumDateFormatsA
CreateTimerQueue
CreateEventA
InitializeCriticalSectionAndSpinCount
ReadDirectoryChangesW
GetBinaryType
GetConsoleCP
SetCommState
GetCommProperties
ResetEvent
UnlockFile
IsBadCodePtr
GetCurrentDirectoryW
_lopen
GetCompressedFileSizeA
GetThreadSelectorEntry
IsBadWritePtr
GetComputerNameExA
GetConsoleAliasesA
CreateTimerQueueTimer
CreateToolhelp32Snapshot
CopyFileA
GetNamedPipeHandleStateA
FindFirstChangeNotificationA
GetTempFileNameW
GetUserDefaultLCID
GlobalHandle
SetInformationJobObject
GetCurrencyFormatW
ReadFile
GetLongPathNameW
GetPrivateProfileIntW
lstrcmpiW
LocalFileTimeToFileTime

user32

TabbedTextOutW
IsCharAlphaA
GetWindow
GetMenuItemRect
GetMessageTime
GetMenuDefaultItem
LoadKeyboardLayoutA
KillTimer
GetQueueStatus
GetClassLongW
DefFrameProcW
CreateIconFromResourceEx
UnpackDDElParam
FindWindowExA
CreateCaret
CreateWindowExA
CreatePopupMenu
ScrollWindowEx
SetSysColors
DrawIconEx
GetMouseMovePointsEx
CopyImage
MessageBoxA
DlgDirSelectComboBoxExA
CreateAcceleratorTableA
CreateWindowStationW
IsCharLowerW
MessageBeep
GetKeyboardLayoutNameA
SetForegroundWindow
DefWindowProcW
MenuItemFromPoint
SetDeskWallpaper
MessageBoxExW
ShowScrollBar
DdeReconnect
SetClassWord
ValidateRect
LoadMenuW
UpdateLayeredWindow
AppendMenuA
FindWindowA
GetUserObjectInformationA
SetCapture
SwapMouseButton
GetWindowWord
IMPSetIMEW
SetWindowLongW
UnhookWindowsHookEx
OemToCharW
ToUnicodeEx
DialogBoxParamW
IMPQueryIMEA
wsprintfA
EnumDisplaySettingsExA
SwitchDesktop
IsCharAlphaNumericW
LoadCursorFromFileW
CharToOemBuffA
EndMenu
SetCaretPos
AppendMenuW
ReuseDDElParam
PeekMessageW
InsertMenuA
DrawFrameControl
CharUpperBuffW
SetFocus
SetMessageExtraInfo
PackDDElParam
InsertMenuW
EqualRect
DdeSetUserHandle
UpdateWindow
AttachThreadInput
GetPropW
ModifyMenuW
CopyIcon
GetClipboardOwner
IsZoomed
EnumClipboardFormats
SetMenu
PostMessageW
EnumWindowStationsW
OpenDesktopA
OemToCharBuffA
RealGetWindowClassW
GetWindowInfo
DdeGetData
MonitorFromRect
UnhookWindowsHook
IsDialogMessage
DdeInitializeW

advapi32

RegOpenKeyExW

oleaut32

SafeArrayCopy
OleLoadPicture
SysAllocStringLen
VarUI4FromR8
VarUI1FromI1
VarI1FromR4
VarI2FromStr
VarR4FromI4
VarI2FromI1
BSTR_UserUnmarshal
VarFormatNumber
VarDecFromR8
LoadTypeLi
VarBoolFromUI1
VarBoolFromDec
VarUI2FromDec
VarCyFromI2
VarR8FromDec
VarI4FromUI4
VarDecFromCy
VarI2FromDisp
VarI2FromDate
VarUI1FromUI4
VarUI2FromI2
VarUI2FromR4
VarBoolFromCy
VarI2FromCy
VarDateFromUdateEx
VarDecFromUI2
GetAltMonthNames
VarDateFromUI4
OleLoadPictureFile
VarDecSu
CreateStdDispatch
LPSAFEARRAY_Unmarshal
SafeArrayGetElemsize
VarR4FromI1
VarR4FromDate
VarBoolFromI2
VarI4FromDate
VarAnd
VarCyCmp
VarDecDiv
VarUI1FromStr
LoadRegTypeLi
VarDecAbs
VarI4FromR4
VarI1FromStr
VarBstrFromR4
VarR8FromDisp
VarBstrFromDec
OaBuildVersion
VARIANT_UserSize
SysStringLen
VarPow
VarDecCmpR8
VarDateFromI1
VarI4FromUI1
VarI2FromDec
VarBoolFromI1
BSTR_UserSize
LHashValOfNameSys
VarBoolFromStr
LPSAFEARRAY_Marshal
VarCyInt
VarCyFromR4
VarUI2FromCy
VarI4FromDec
VariantCopyInd
SafeArrayAllocData
BstrFromVector
VarBoolFromUI4
SysStringByteLen
VarI4FromI1
VarI2FromR4
VarI2FromUI1
VarBoolFromUI2
VarDecFromStr
GetActiveObject
VarBstrFromCy
VarMul
VARIANT_UserFree
VarCyFromUI2
VarR8FromBool
VarI1FromDec
BSTR_UserFree
VarCyCmpR8
VarDecNeg
VarInt
OleLoadPictureFileEx
SafeArrayGetLBound

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

r2
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10df4effdccda068cdbe539c9036ff55

Code Sign

06:e2:bc:62:8e:28:f4:7d:b8:fd:0e:ea:7f:f3:37:50Certificate

Extended Key Usages

7e:eb:3f:8a:20:8b:68:3d:f3:93:d9:f4:b1:35:09:55:b1:36:a4:a5Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

Sections

.text Size: 4KB - Virtual size: 3KB

r2 Size: 260KB - Virtual size: 259KB

.data Size: 7KB - Virtual size: 6KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

06:e2:bc:62:8e:28:f4:7d:b8:fd:0e:ea:7f:f3:37:50
Certificate

7e:eb:3f:8a:20:8b:68:3d:f3:93:d9:f4:b1:35:09:55:b1:36:a4:a5
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 4KB - Virtual size: 3KB

r2
Size: 260KB - Virtual size: 259KB

.data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB