a46402665c346efe175ddf889a620a1abd4deda5490cca77d9a18612c744564f

Sharing

Copy URL Twitter E-mail

General

Target

a46402665c346efe175ddf889a620a1abd4deda5490cca77d9a18612c744564f
Size

45KB
MD5

81c2fb285bc3d78a477048f66edaf877
SHA1

7a0716bd6ec3abe889c6f6483e23ff9ab6b51eb2
SHA256

a46402665c346efe175ddf889a620a1abd4deda5490cca77d9a18612c744564f
SHA512

e2d8ddcc1c3f7acf09388c59cb6ab1e3129e9b73c3a46f518645a6c86e5fba2e4f1f8a6d2900e256cb53dc1eec3f71bbbfae4709112ef38ac7052d6048eae490
SSDEEP

768:4ODHKzKKUtYlnNBoGMkqx3qo6q6fCv2FZMXC5Hf5L/tesPd:hDYUiPoGq9qBq6fC0MXCl5hXd

Score

N/A

Malware Config

Signatures

Files

a46402665c346efe175ddf889a620a1abd4deda5490cca77d9a18612c744564f
.exe windows x86

ba0048b595c7f75d1b9a35c0cd5d748e

Code Sign

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16
Certificate

Issuer

CN=0osU

Not Before

19/06/2012, 07:13

Not After

31/12/2039, 23:59

Subject

CN=0osU

Extended Key Usages

ExtKeyUsageCodeSigning

8a:4d:9d:c2:a8:07:ef:d7:af:28:f8:ec:d7:6d:5b:3c:ae:5c:db:4a
Signer

Actual PE Digest

8a:4d:9d:c2:a8:07:ef:d7:af:28:f8:ec:d7:6d:5b:3c:ae:5c:db:4a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=0osU

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToDosDateTime
lstrcatA
VirtualAlloc
GetProcAddress
LoadLibraryW
GetCommandLineA
CreateFileA
FindNextFileW
GetConsoleAliasExesA
ProcessIdToSessionId
QueueUserAPC
SetComputerNameExA
lstrcmpW

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.16
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data18
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data17
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data16
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data15
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data14
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data13
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data12
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba0048b595c7f75d1b9a35c0cd5d748e

Code Sign

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16Certificate

Extended Key Usages

8a:4d:9d:c2:a8:07:ef:d7:af:28:f8:ec:d7:6d:5b:3c:ae:5c:db:4aSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 512B - Virtual size: 398B

.data Size: 512B - Virtual size: 372B

.16 Size: 1024B - Virtual size: 1024B

.data18 Size: 1024B - Virtual size: 1000B

.data17 Size: 1024B - Virtual size: 1000B

.data16 Size: 1024B - Virtual size: 1000B

.data15 Size: 1024B - Virtual size: 1000B

.data14 Size: 1024B - Virtual size: 1000B

.data13 Size: 1024B - Virtual size: 1000B

.data12 Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 336B

06:91:36:86:a5:8a:6c:a2:41:ae:70:0c:83:b9:f2:16
Certificate

8a:4d:9d:c2:a8:07:ef:d7:af:28:f8:ec:d7:6d:5b:3c:ae:5c:db:4a
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 512B - Virtual size: 398B

.data
Size: 512B - Virtual size: 372B

.16
Size: 1024B - Virtual size: 1024B

.data18
Size: 1024B - Virtual size: 1000B

.data17
Size: 1024B - Virtual size: 1000B

.data16
Size: 1024B - Virtual size: 1000B

.data15
Size: 1024B - Virtual size: 1000B

.data14
Size: 1024B - Virtual size: 1000B

.data13
Size: 1024B - Virtual size: 1000B

.data12
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 336B