a3a4616317c7d057037ecffa4d874bd01221212d16d09998c91a2ce450ef4f7f

Sharing

Copy URL

Twitter E-mail

General

Target

a3a4616317c7d057037ecffa4d874bd01221212d16d09998c91a2ce450ef4f7f
Size

237KB
MD5

42c7f1c28da74d2414f1656144682aa9
SHA1

5bbe4c464b3e3753c58b012c59460c5b9f485b58
SHA256

a3a4616317c7d057037ecffa4d874bd01221212d16d09998c91a2ce450ef4f7f
SHA512

50f15ae67961fd38857de32bb9554f4431404bccbda015738ed1c74a4d9f631533987ac0af9c581a86c35759c179027c655bfaf8de3b94630f09b71e31be9bcb
SSDEEP

3072:yVVeKtrGhpYuzuw1ILmocTU5r5/mmr/zZbtjjeIT+p7tmX1m8SDn:67rGrh1E959+mrlbtitmE8SD

Score

N/A

Malware Config

Signatures

Files

a3a4616317c7d057037ecffa4d874bd01221212d16d09998c91a2ce450ef4f7f
.dll windows x86

804261f04717bda2461a67b1f3c30ba2

Code Sign

6a:52:01:e0:98:18:a9:71:b6:28:77:15:9f:77:70:12
Certificate

Issuer

CN=34977722153626414942592613972772921848583956573235529314564355175972862121513515869453929282731924166221368868152713127917849617494245152641999272611452163

Not Before

17-01-2013 15:49

Not After

31-12-2039 23:59

Subject

CN=34977722153626414942592613972772921848583956573235529314564355175972862121513515869453929282731924166221368868152713127917849617494245152641999272611452163

Extended Key Usages

ExtKeyUsageCodeSigning

ee:fc:24:60:4a:f9:7e:95:b2:f1:d1:68:ee:f9:a2:f5:89:67:1d:93
Signer

Actual PE Digest

ee:fc:24:60:4a:f9:7e:95:b2:f1:d1:68:ee:f9:a2:f5:89:67:1d:93

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=34977722153626414942592613972772921848583956573235529314564355175972862121513515869453929282731924166221368868152713127917849617494245152641999272611452163

01-12-2022 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetCommandLineA
GetStartupInfoA
VirtualAllocEx

gdi32

GetStockObject

advapi32

RegOpenKeyW

Sections

.text6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

804261f04717bda2461a67b1f3c30ba2

Code Sign

6a:52:01:e0:98:18:a9:71:b6:28:77:15:9f:77:70:12Certificate

Extended Key Usages

ee:fc:24:60:4a:f9:7e:95:b2:f1:d1:68:ee:f9:a2:f5:89:67:1d:93Signer

Signature Validations

Verification

01-12-2022 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text6 Size: 1024B - Virtual size: 1000B

.text5 Size: 1024B - Virtual size: 1000B

.text Size: 219KB - Virtual size: 219KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 136B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 540B

6a:52:01:e0:98:18:a9:71:b6:28:77:15:9f:77:70:12
Certificate

ee:fc:24:60:4a:f9:7e:95:b2:f1:d1:68:ee:f9:a2:f5:89:67:1d:93
Signer

01-12-2022 14:34
Valid: false

.text6
Size: 1024B - Virtual size: 1000B

.text5
Size: 1024B - Virtual size: 1000B

.text
Size: 219KB - Virtual size: 219KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 136B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 540B