b8e68f9b46ec82bfbf9a2b67e3baf4555480f40c4278c730297dc4b35478f01f

Sharing

Copy URL

Twitter E-mail

General

Target

b8e68f9b46ec82bfbf9a2b67e3baf4555480f40c4278c730297dc4b35478f01f
Size

17KB
MD5

ccc4e7678ae9d30cf0299e53e1c18d53
SHA1

80961a1859ecab885367abc7af74fbdce81e9245
SHA256

b8e68f9b46ec82bfbf9a2b67e3baf4555480f40c4278c730297dc4b35478f01f
SHA512

e63639bff783d34a7f975a1d249eb1327388d7fdd884f3d3723ea3da14efb012f04f4097e26ed452ec3c0bdae6871176a365cd13b8da367f85598897ebd86626
SSDEEP

192:+vIB6/SNvyLXqP4KaX+4iyJZBnitG6VxUhh4WWieZWHb:GiRpyLsaX+4ilxUhh4WWieZW7

Score

N/A

Malware Config

Signatures

Files

b8e68f9b46ec82bfbf9a2b67e3baf4555480f40c4278c730297dc4b35478f01f
.exe windows x86

f81e6a44a508d1d3118e37a58efa8460

Code Sign

5c:2b:35:f0:80:92:c8:51:bc:9f:74:2a:0e:3f:f2:7e
Certificate

Issuer

CN=63xrDo6ON5mS

Not Before

09/03/2012, 08:39

Not After

31/12/2039, 23:59

Subject

CN=63xrDo6ON5mS

Extended Key Usages

ExtKeyUsageCodeSigning

57:ae:91:d9:f0:47:d2:92:6c:c5:c7:1a:83:12:34:6c:7d:19:3f:76
Signer

Actual PE Digest

57:ae:91:d9:f0:47:d2:92:6c:c5:c7:1a:83:12:34:6c:7d:19:3f:76

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=63xrDo6ON5mS

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
BackupWrite
CompareStringA
CreatePipe
DeleteTimerQueue
GenerateConsoleCtrlEvent
GetAtomNameA
GetCommTimeouts
GetConsoleAliasA
GetConsoleDisplayMode
GetCurrentDirectoryA
GetCurrentProcess
GetDiskFreeSpaceA
GetNamedPipeHandleStateW
GetPrivateProfileSectionW
GetShortPathNameW
GetStartupInfoW
GetSystemWindowsDirectoryA
GetThreadPriority
GlobalLock
GetWindowsDirectoryW
IsBadHugeWritePtr
IsDBCSLeadByte
IsDBCSLeadByteEx
LocalSize
QueryDosDeviceW
QueueUserWorkItem
SetComputerNameW
SetConsoleMode
SetConsoleTitleA
SetThreadPriorityBoost
SetVolumeMountPointA
SetWaitableTimer
UnlockFileEx
VerSetConditionMask
WaitCommEvent
WideCharToMultiByte
WriteConsoleOutputA
WritePrivateProfileSectionA
_lwrite
lstrcmpiA
HeapUnlock
GetModuleHandleA

msvcrt

memset

advapi32

RegOpenKeyExW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f81e6a44a508d1d3118e37a58efa8460

Code Sign

5c:2b:35:f0:80:92:c8:51:bc:9f:74:2a:0e:3f:f2:7eCertificate

Extended Key Usages

57:ae:91:d9:f0:47:d2:92:6c:c5:c7:1a:83:12:34:6c:7d:19:3f:76Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 120B

.text4 Size: 1KB - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

5c:2b:35:f0:80:92:c8:51:bc:9f:74:2a:0e:3f:f2:7e
Certificate

57:ae:91:d9:f0:47:d2:92:6c:c5:c7:1a:83:12:34:6c:7d:19:3f:76
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 120B

.text4
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB