b256415c6187aac27fd8a7f126edc3ca1d0901695cd4436aea99aee20080320b

Sharing

Copy URL Twitter E-mail

General

Target

b256415c6187aac27fd8a7f126edc3ca1d0901695cd4436aea99aee20080320b
Size

47KB
MD5

412e20d85a978796e9c5e45c8f1994c3
SHA1

dc6697cae597b253e9d5a4063a201ba7f62dc69b
SHA256

b256415c6187aac27fd8a7f126edc3ca1d0901695cd4436aea99aee20080320b
SHA512

a9dbfea195aaedf6f1934b2246b4629dc9e4c00198fb49b85c7bbb61ee4e2213e9bef970d668cb782b0d92e6dfdc7f122b9d23cd6421c14c6d42f436a342d08b
SSDEEP

768:zqI2fre1rLgQgjWW/v1vyGtMNeCRP8JcGHKAjHslK1ycDH:zV2i1rgnlvAeCRWqq

Score

N/A

Malware Config

Signatures

Files

b256415c6187aac27fd8a7f126edc3ca1d0901695cd4436aea99aee20080320b
.exe windows x86

7e0ce1f7d7f7756d80a30bcd8ee9a71d

Code Sign

69:9d:1f:67:c2:f1:c4:4c:b9:38:42:69:f1:79:93:0e
Certificate

Issuer

CN=666666

Not Before

12/02/2012, 08:59

Not After

31/12/2039, 23:59

Subject

CN=666666

Extended Key Usages

ExtKeyUsageCodeSigning

c9:8f:7b:b1:de:88:b1:35:66:cf:c2:5d:c0:0f:d1:41:25:b4:f5:ee
Signer

Actual PE Digest

c9:8f:7b:b1:de:88:b1:35:66:cf:c2:5d:c0:0f:d1:41:25:b4:f5:ee

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=666666

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringW
GetSystemTimeAsFileTime
GetTempPathA
GetThreadPriority
GetVolumeNameForVolumeMountPointW
GlobalFree
GlobalSize
HeapCompact
HeapCreate
InterlockedIncrement
IsSystemResumeAutomatic
IsValidCodePage
LoadLibraryExW
LocalAlloc
LocalReAlloc
MoveFileWithProgressA
PeekConsoleInputW
PeekNamedPipe
QueryDosDeviceW
QueueUserWorkItem
ReadConsoleOutputCharacterW
ReadConsoleOutputW
ReleaseSemaphore
ResetWriteWatch
GetProfileSectionA
SetComputerNameW
SetConsoleCursorPosition
SetConsoleDisplayMode
SetDefaultCommConfigA
SetFileAttributesW
SetNamedPipeHandleState
SetPriorityClass
SetStdHandle
SetThreadExecutionState
SetThreadLocale
SetThreadPriorityBoost
SizeofResource
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
Thread32First
UnhandledExceptionFilter
VirtualQuery
WriteConsoleInputA
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
WritePrivateProfileStructW
lstrcmp
GetProfileIntA
GetNumberFormatA
GetNamedPipeInfo
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDrives
GetFullPathNameA
GetEnvironmentVariableA
CreateFileA
GetEnvironmentStrings
GetDriveTypeA
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDiskFreeSpaceA
GetConsoleOutputCP
GetConsoleMode
GetConsoleAliasExesLengthA
GetCommConfig
GetCPInfoExA
FindVolumeClose
FindResourceW
FindNextVolumeMountPointW
FindNextFileW
FindFirstVolumeMountPointA
FindFirstFileA
FileTimeToDosDateTime
EnumResourceLanguagesW
EnumLanguageGroupLocalesA
DnsHostnameToComputerNameW
DisableThreadLibraryCalls
DeviceIoControl
DeleteTimerQueueTimer
DeleteTimerQueue
DeleteFileA
DefineDosDeviceW
CreateRemoteThread
CreateMailslotA
ConvertDefaultLocale
CommConfigDialogW
CloseHandle
CancelWaitableTimer
CancelDeviceWakeupRequest
BeginUpdateResourceW
BeginUpdateResourceA
BackupSeek
LoadLibraryW
GetProcAddress
VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
SearchPathW

shell32

SHCreateDirectoryExA
Shell_NotifyIcon
ShellExecuteA
ShellAboutA
SHQueryRecycleBinW
SHQueryRecycleBinA
SHPathPrepareForWriteW
SHLoadNonloadedIconOverlayIdentifiers
SHLoadInProc
SHInvokePrinterCommandA
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
SHGetPathFromIDList
SHGetMalloc
CheckEscapesW
CommandLineToArgvW
DoEnvironmentSubstW
DragFinish
DragQueryFile
DragQueryFileAorW
DragQueryFileW
ExtractAssociatedIconExA
ExtractAssociatedIconExW
ExtractAssociatedIconW
ExtractIconExA
ExtractIconExW
ExtractIconW
FindExecutableA
FindExecutableW
SHBrowseForFolderA
SHIsFileAvailableOffline
SHCreateDirectoryExW
SHFileOperationA
SHFileOperationW
SHFormatDrive
SHFreeNameMappings
SHGetDataFromIDListA
SHGetDataFromIDListW
SHGetDesktopFolder
SHGetDiskFreeSpaceExA
SHGetFileInfo
SHGetFileInfoA
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathW
SHGetIconOverlayIndexW
SHGetInstanceExplorer

shlwapi

StrChrA
StrChrIA
StrChrW
StrStrW
StrStrIW
StrStrIA
StrRStrIW
StrRStrIA
StrRChrW
StrRChrIA
StrRChrA
StrCmpNW
StrCmpNIW
StrCmpNIA

comctl32

CreatePropertySheetPage
CreatePropertySheetPageW
CreateStatusWindow
ord7
ord15
DrawStatusText
DrawStatusTextW
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollRange
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
FlatSB_SetScrollRange
FlatSB_ShowScrollBar
ord4
ImageList_Add
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ImageList_Destroy
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_EndDrag
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_LoadImage
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_SetBkColor
ImageList_SetFilter
ImageList_SetImageCount
ord17
InitializeFlatSB
ord14
ord13
ord2
PropertySheetA
PropertySheetW
ord3
UninitializeFlatSB
_TrackMouseEvent
ord8

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.d1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.d2
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e0ce1f7d7f7756d80a30bcd8ee9a71d

Code Sign

69:9d:1f:67:c2:f1:c4:4c:b9:38:42:69:f1:79:93:0eCertificate

Extended Key Usages

c9:8f:7b:b1:de:88:b1:35:66:cf:c2:5d:c0:0f:d1:41:25:b4:f5:eeSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

shlwapi

comctl32

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 512B - Virtual size: 204B

.d1 Size: 1024B - Virtual size: 1000B

.d2 Size: 2KB - Virtual size: 2KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 1KB - Virtual size: 1KB

69:9d:1f:67:c2:f1:c4:4c:b9:38:42:69:f1:79:93:0e
Certificate

c9:8f:7b:b1:de:88:b1:35:66:cf:c2:5d:c0:0f:d1:41:25:b4:f5:ee
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 512B - Virtual size: 204B

.d1
Size: 1024B - Virtual size: 1000B

.d2
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 1KB - Virtual size: 1KB