b511582012cce48c0f5e15913b91ba817d64e29b96ed9e70c2c7f45c8f7d47f1

Sharing

Copy URL

Twitter E-mail

General

Target

b511582012cce48c0f5e15913b91ba817d64e29b96ed9e70c2c7f45c8f7d47f1
Size

311KB
MD5

83fb862c55c2d8c1781a0fdd9b54dd6d
SHA1

9c5ed00405c3c16cf2c6859130f641996a4ad93f
SHA256

b511582012cce48c0f5e15913b91ba817d64e29b96ed9e70c2c7f45c8f7d47f1
SHA512

7ef4bac33725e94f5edb0bbb6628c3824220751a51eda716e51697e724aa963087d780f388b091f4ac9c11f90a96e3436eafc60dfe4dcc456dd09c666e8537ba
SSDEEP

6144:msbB3hz9/wAS64AqjiuGp2hpEwLI41gY9sF:msBxtVSzsuu67IV

Score

N/A

Malware Config

Signatures

Files

b511582012cce48c0f5e15913b91ba817d64e29b96ed9e70c2c7f45c8f7d47f1
.exe windows x86

b485c011e68857e91500e4a591b70d52

Code Sign

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26
Certificate

Issuer

CN=u65ykrty

Not Before

28/01/2012, 05:39

Not After

31/12/2039, 23:59

Subject

CN=u65ykrty

Extended Key Usages

ExtKeyUsageCodeSigning

b8:cd:3e:01:2c:09:89:7b:52:7e:1e:bb:26:ff:8d:b8:06:c8:e6:28
Signer

Actual PE Digest

b8:cd:3e:01:2c:09:89:7b:52:7e:1e:bb:26:ff:8d:b8:06:c8:e6:28

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=u65ykrty

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

advapi32

RegOpenKeyExW

shlwapi

SHRegEnumUSValueA
PathMakeSystemFolderA
PathSetDlgItemPathA
SHRegGetBoolUSValueW
SHRegSetUSValueW
SHRegWriteUSValueA
PathAddExtensionA
ord16

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b485c011e68857e91500e4a591b70d52

Code Sign

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26Certificate

Extended Key Usages

b8:cd:3e:01:2c:09:89:7b:52:7e:1e:bb:26:ff:8d:b8:06:c8:e6:28Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

Sections

.text Size: 303KB - Virtual size: 302KB

.data Size: 1024B - Virtual size: 556B

.text5 Size: 512B - Virtual size: 32B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 156B

67:7b:0f:56:de:04:8d:a7:4e:a7:1f:99:23:cc:68:26
Certificate

b8:cd:3e:01:2c:09:89:7b:52:7e:1e:bb:26:ff:8d:b8:06:c8:e6:28
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 303KB - Virtual size: 302KB

.data
Size: 1024B - Virtual size: 556B

.text5
Size: 512B - Virtual size: 32B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 156B