81044097cfc4db68db01154649a8ba40a4100457b38128ba4851ca508bd0ef95

Sharing

Copy URL

Twitter E-mail

General

Target

81044097cfc4db68db01154649a8ba40a4100457b38128ba4851ca508bd0ef95
Size

51KB
MD5

f84115f572ced3428ace44292d3f9b03
SHA1

928a2260042630847972bdbf2448c53611900edb
SHA256

81044097cfc4db68db01154649a8ba40a4100457b38128ba4851ca508bd0ef95
SHA512

679fc19283d7bb23006f54c5c59114050eea329f7c6f1887edc48daba14a481cd879c24b2bbf1ff3662463e88733561cbf33db897507b4d65212552397a96710
SSDEEP

768:kCFGrQHGwqqovkDPsrZQMnCsy+tQ33q1nXMctKPhL+k2Ct3TIaEc1BrwYM4f3bK/:9HGwaceQ4Cxe8FctQhv2Ct0qLrwYV/bw

Score

N/A

Malware Config

Signatures

Files

81044097cfc4db68db01154649a8ba40a4100457b38128ba4851ca508bd0ef95
.exe windows x86

d12b9bff3734361fc014196610bfc350

Code Sign

26:8b:b9:64:4c:3f:30:63:b5:15:f2:32:22:e3:c9:2c
Certificate

Issuer

CN=NiCNFnnwRocN5kjbju1462tJu

Not Before

19/04/2012, 18:23

Not After

31/12/2039, 23:59

Subject

CN=NiCNFnnwRocN5kjbju1462tJu

Extended Key Usages

ExtKeyUsageCodeSigning

18:79:43:12:aa:18:4d:e3:78:bf:1e:b6:3f:b2:08:be:c8:47:24:9a
Signer

Actual PE Digest

18:79:43:12:aa:18:4d:e3:78:bf:1e:b6:3f:b2:08:be:c8:47:24:9a

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=NiCNFnnwRocN5kjbju1462tJu

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileW
lstrcatW
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetCommandLineA
VirtualAlloc

user32

GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage

gdi32

GetStockObject

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d12b9bff3734361fc014196610bfc350

Code Sign

26:8b:b9:64:4c:3f:30:63:b5:15:f2:32:22:e3:c9:2cCertificate

Extended Key Usages

18:79:43:12:aa:18:4d:e3:78:bf:1e:b6:3f:b2:08:be:c8:47:24:9aSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 38KB - Virtual size: 37KB

.data Size: 512B - Virtual size: 796B

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 44KB

26:8b:b9:64:4c:3f:30:63:b5:15:f2:32:22:e3:c9:2c
Certificate

18:79:43:12:aa:18:4d:e3:78:bf:1e:b6:3f:b2:08:be:c8:47:24:9a
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 38KB - Virtual size: 37KB

.data
Size: 512B - Virtual size: 796B

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 44KB