920697d7c48e943a84cf21df5615a2fbb767c5c3c5cfb3183684c95f9ea2986e

Sharing

Copy URL Twitter E-mail

General

Target

920697d7c48e943a84cf21df5615a2fbb767c5c3c5cfb3183684c95f9ea2986e
Size

274KB
MD5

9b90e88b53398756a474e288970b7d1c
SHA1

7232331d79e9635b71503697aee935077ea7a84e
SHA256

920697d7c48e943a84cf21df5615a2fbb767c5c3c5cfb3183684c95f9ea2986e
SHA512

80b4c8f6ea23d5a493631a5130449ea12292e873a1b44096b4fa011c3f51e1d2acd1d467b5e4f2dee91f41357fc73f1055a3cc28b6a7de9d0728b0be063aa939
SSDEEP

6144:JdNauEOlzPWzCWBW5V9Fnbi9OD5fN6/1gGHdfaz:nNDEZzCW8/biofN9GBaz

Score

N/A

Malware Config

Signatures

Files

920697d7c48e943a84cf21df5615a2fbb767c5c3c5cfb3183684c95f9ea2986e
.exe windows x86

ed543809f2bc57668d56b4ce3b82166a

Code Sign

30:7f:4c:83:34:bd:f8:47:b5:09:52:98:7f:54:f8:52
Certificate

Issuer

CN=rUeBjQL4LC8d4wI

Not Before

05/04/2012, 15:06

Not After

31/12/2039, 23:59

Subject

CN=rUeBjQL4LC8d4wI

Extended Key Usages

ExtKeyUsageCodeSigning

81:4f:4c:74:7f:c9:e1:10:4a:7e:53:b7:40:5d:d1:3a:c6:3e:fb:2e
Signer

Actual PE Digest

81:4f:4c:74:7f:c9:e1:10:4a:7e:53:b7:40:5d:d1:3a:c6:3e:fb:2e

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=rUeBjQL4LC8d4wI

01/12/2022, 14:35
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrcatA
CreateFileA

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed543809f2bc57668d56b4ce3b82166a

Code Sign

30:7f:4c:83:34:bd:f8:47:b5:09:52:98:7f:54:f8:52Certificate

Extended Key Usages

81:4f:4c:74:7f:c9:e1:10:4a:7e:53:b7:40:5d:d1:3a:c6:3e:fb:2eSigner

Signature Validations

Verification

01/12/2022, 14:35 Valid: false

Headers

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 264KB - Virtual size: 264KB

.data Size: 1024B - Virtual size: 884B

.l7 Size: 1024B - Virtual size: 1000B

.l6 Size: 1024B - Virtual size: 1000B

.l5 Size: 1024B - Virtual size: 1000B

.l4 Size: 1024B - Virtual size: 1000B

.l3 Size: 1024B - Virtual size: 1000B

.l2 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 88B

30:7f:4c:83:34:bd:f8:47:b5:09:52:98:7f:54:f8:52
Certificate

81:4f:4c:74:7f:c9:e1:10:4a:7e:53:b7:40:5d:d1:3a:c6:3e:fb:2e
Signer

01/12/2022, 14:35
Valid: false

.text
Size: 264KB - Virtual size: 264KB

.data
Size: 1024B - Virtual size: 884B

.l7
Size: 1024B - Virtual size: 1000B

.l6
Size: 1024B - Virtual size: 1000B

.l5
Size: 1024B - Virtual size: 1000B

.l4
Size: 1024B - Virtual size: 1000B

.l3
Size: 1024B - Virtual size: 1000B

.l2
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 88B