b59620f9948a852732852112ba5982db323acea3c16e8ed65d539c1d0f422f32

Sharing

Copy URL

Twitter E-mail

General

Target

b59620f9948a852732852112ba5982db323acea3c16e8ed65d539c1d0f422f32
Size

202KB
MD5

02defe0491fc57aba4646eccf592e65c
SHA1

58474656431fbd67cb76d25224eaa4d5af4ef52a
SHA256

b59620f9948a852732852112ba5982db323acea3c16e8ed65d539c1d0f422f32
SHA512

aec357fbc574441ef45dda977286020ca2b29bc65b6ac34ab95972589ee82260131fc8cbb6acf1751e9077557661763e57cf81005801e7d9b34ed47dc540c72f
SSDEEP

6144:IskM/8dypuZnUec/QnZi6VbUOPGHB+w3:IFq8dyMZUecgZdVbUqGUw3

Score

N/A

Malware Config

Signatures

Files

b59620f9948a852732852112ba5982db323acea3c16e8ed65d539c1d0f422f32
.exe windows x86

13ad15ef2afd0a1ffbf1e1f97761291f

Code Sign

75:a4:e2:2d:c9:f1:a4:ad:46:5c:5f:05:f8:fb:ac:58
Certificate

Issuer

CN=w466666345uy inc

Not Before

25-01-2012 08:45

Not After

31-12-2039 23:59

Subject

CN=w466666345uy inc

Extended Key Usages

ExtKeyUsageCodeSigning

90:28:94:e2:b4:8c:df:f5:78:a4:59:43:33:c9:b5:b2:6e:50:41:7e
Signer

Actual PE Digest

90:28:94:e2:b4:8c:df:f5:78:a4:59:43:33:c9:b5:b2:6e:50:41:7e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=w466666345uy inc

01-12-2022 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
lstrcatW
GetWindowsDirectoryW
GetProcessHeap
LoadLibraryA
GetProcAddress
GetSystemInfo
AddAtomW
BackupSeek
CancelWaitableTimer
CompareStringW
CopyFileExW
CreateDirectoryExA
CreateFileA
CreateHardLinkW
CreateNamedPipeA
CreatePipe
DebugBreak
DefineDosDeviceA
DeleteFileA
DnsHostnameToComputerNameW
EnumCalendarInfoA
EnumResourceLanguagesA
FileTimeToDosDateTime
FillConsoleOutputCharacterW
FindFirstChangeNotificationW
FindFirstFileExW
FindNextChangeNotification
FindNextVolumeA
FindVolumeMountPointClose
FlushConsoleInputBuffer
GetCPInfoExW
GetCommProperties
GetCommandLineA
GetCompressedFileSizeA
GetConsoleAliasW
GetConsoleAliasesA
GetConsoleCP
GetConsoleDisplayMode
GetConsoleTitleW
GetCurrencyFormatA
GetCurrentProcess
GetCurrentThread
GetDiskFreeSpaceW
GetFileSizeEx
GetFullPathNameA
GetLocaleInfoW
GetLogicalDriveStringsA
GetModuleHandleW
GetNumberFormatA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetProcessHeaps
GetProcessTimes
GetProfileIntW
GetSystemDefaultLangID
GetSystemTimeAdjustment
GetSystemWindowsDirectoryW
GetTimeZoneInformation
GetUserDefaultUILanguage
GetVolumeNameForVolumeMountPointW
GlobalMemoryStatusEx
GlobalReAlloc
GlobalSize
HeapDestroy
InitAtomTable
InitializeCriticalSection
IsBadHugeReadPtr
IsDebuggerPresent
IsSystemResumeAutomatic
LocalShrink
MapUserPhysicalPagesScatter
Module32NextW
MoveFileA
MoveFileExW
OpenProcess
OpenSemaphoreA
PeekConsoleInputA
PeekNamedPipe
PurgeComm
ReadDirectoryChangesW
ReadFileEx
ReplaceFile
SetConsoleCursorInfo
SetConsoleScreenBufferSize
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetSystemPowerState
SetThreadLocale
SwitchToThread
TerminateThread
TlsSetValue
TryEnterCriticalSection
VerLanguageNameW
VirtualProtect
WaitNamedPipeA
WritePrivateProfileSectionW
lstrcmpi
lstrcpynW

user32

AdjustWindowRect
AnyPopup
BringWindowToTop
CharPrevW
CharToOemBuffA
ClientToScreen
CreateDesktopA
CreateDesktopW
CreateMDIWindowW
CreateWindowExW
DdeCmpStringHandles
DdeQueryStringW
DdeSetUserHandle
DefFrameProcA
DeferWindowPos
DialogBoxIndirectParamA
DlgDirSelectComboBoxExW
DragDetect
DragObject
DrawFrameControl
DrawStateA
EnableMenuItem
EnableScrollBar
EnumDisplaySettingsExA
EnumDisplaySettingsW
EnumWindowStationsA
FindWindowA
GetAncestor
GetClassInfoExA
GetClassInfoW
GetClassLongA
GetClassNameW
GetClipboardFormatNameW
GetDC
GetDialogBaseUnits
GetDlgItem
GetIconInfo
GetKeyNameTextA
GetMenuItemRect
GetNextDlgTabItem
GetUpdateRect
GetWindow
GetWindowLongW
GetWindowModuleFileNameA
GetWindowPlacement
GetWindowRgn
GetWindowThreadProcessId
GetWindowWord
GrayStringA
HideCaret
IMPGetIMEA
InternalGetWindowText
InvalidateRect
IsCharUpperA
IsDialogMessageW
IsWindowUnicode
LoadBitmapA
LoadCursorA
LoadIconA
LoadKeyboardLayoutW
LockWindowUpdate
MapVirtualKeyExW
ModifyMenuW
MsgWaitForMultipleObjectsEx
OpenDesktopA
RegisterDeviceNotificationA
ReuseDDElParam
ScrollWindow
SendDlgItemMessageW
SendIMEMessageExW
SendMessageCallbackA
SendNotifyMessageW
SetClassLongA
SetClipboardData
SetDoubleClickTime
SetFocus
SetForegroundWindow
SetLastErrorEx
SetMessageExtraInfo
SetRect
SetScrollPos
SetThreadDesktop
SetTimer
SetUserObjectSecurity
SetWindowLongW
ShowWindowAsync
SubtractRect
SwitchToThisWindow
TabbedTextOutA
TrackPopupMenu
UnloadKeyboardLayout
mouse_event

ole32

BindMoniker
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserSize
CLIPFORMAT_UserUnmarshal
CoAddRefServerProcess
CoAllowSetForegroundWindow
CoCancelCall
CoFileTimeNow
CoFreeAllLibraries
CoGetCallContext
CoGetCancelObject
CoGetCurrentLogicalThreadId
CoGetCurrentProcess
CoGetInterfaceAndReleaseStream
CoIsOle1Class
CoLockObjectExternal
CoMarshalHresult
CoMarshalInterface
CoQueryProxyBlanket
CoReactivateObject
CoRegisterClassObject
CoRegisterMessageFilter
CoRegisterSurrogate
CoRegisterSurrogateEx
CoRevokeMallocSpy
CoSetCancelObject
CoTreatAsClass
CoUnmarshalInterface
CoWaitForMultipleHandles
CreateAntiMoniker
CreateClassMoniker
CreateFileMoniker
CreateILockBytesOnHGlobal
DllDebugObjectRPCHook
FreePropVariantArray
GetConvertStg
GetHGlobalFromStream
HACCEL_UserMarshal
HACCEL_UserUnmarshal
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HBRUSH_UserUnmarshal
HDC_UserUnmarshal
HGLOBAL_UserFree
HICON_UserUnmarshal
HMETAFILE_UserMarshal
HMETAFILE_UserUnmarshal
HPALETTE_UserUnmarshal
HWND_UserUnmarshal
MkParseDisplayName
MonikerCommonPrefixWith
OleCreateDefaultHandler
OleCreateEx
OleCreateFromData
OleCreateFromFileEx
OleCreateLinkEx
OleCreateLinkToFileEx
OleCreateMenuDescriptor
OleGetAutoConvert
OleGetClipboard
OleInitializeWOW
OleLoad
OleQueryCreateFromData
OleRegEnumVerbs
OleSave
OleSetMenuDescriptor
OleTranslateAccelerator
OleUninitialize
OpenOrCreateStream
ReadClassStg
RegisterDragDrop
SNB_UserMarshal
SNB_UserUnmarshal
STGMEDIUM_UserMarshal
StgCreateDocfile
StgCreateStorageEx
StgOpenStorageOnILockBytes
UpdateDCOMSettings
WdtpInterfacePointer_UserFree
WriteClassStg
WriteStringStream

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13ad15ef2afd0a1ffbf1e1f97761291f

Code Sign

75:a4:e2:2d:c9:f1:a4:ad:46:5c:5f:05:f8:fb:ac:58Certificate

Extended Key Usages

90:28:94:e2:b4:8c:df:f5:78:a4:59:43:33:c9:b5:b2:6e:50:41:7eSigner

Signature Validations

Verification

01-12-2022 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Sections

.text Size: 194KB - Virtual size: 194KB

.data Size: 512B - Virtual size: 540B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

75:a4:e2:2d:c9:f1:a4:ad:46:5c:5f:05:f8:fb:ac:58
Certificate

90:28:94:e2:b4:8c:df:f5:78:a4:59:43:33:c9:b5:b2:6e:50:41:7e
Signer

01-12-2022 14:34
Valid: false

.text
Size: 194KB - Virtual size: 194KB

.data
Size: 512B - Virtual size: 540B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB