e8082b76ac59b48fe2ee66cc1666f036cff2f8bbe1116b3963073b357ab0dd65

Sharing

Copy URL Twitter E-mail

General

Target

e8082b76ac59b48fe2ee66cc1666f036cff2f8bbe1116b3963073b357ab0dd65
Size

311KB
MD5

59979aba01c872893684ba77a5be1f7c
SHA1

1a6d4598e7df5ccd2a1caed950f4fc4e2c5a6941
SHA256

e8082b76ac59b48fe2ee66cc1666f036cff2f8bbe1116b3963073b357ab0dd65
SHA512

31104c8891995eee7246cfcbfee40011436c40e6c928dac6ea1f253dbd386bd1cdbfe6bed0b3e679fd76d95397583baec8f2829b96bcdd9220ccffc0874a933e
SSDEEP

6144:oqFzRH6nZWHrwD9OgfsLpcqC9bD0V8i68SxJLLpvSQNp7X7d+KGjgfH/HU+:J6GQ8dcV30VqvpvZp7LHGjofn

Score

N/A

Malware Config

Signatures

Files

e8082b76ac59b48fe2ee66cc1666f036cff2f8bbe1116b3963073b357ab0dd65
.exe windows x86

604c9045e350ddb97ebabfabafc1e6f8

Code Sign

4c:35:75:3f:cf:2a:de:ad:46:0c:1f:dd:50:bf:2e:14
Certificate

Issuer

CN=12361235123

Not Before

26/02/2012, 20:29

Not After

31/12/2039, 23:59

Subject

CN=12361235123

Extended Key Usages

ExtKeyUsageCodeSigning

29:8e:ae:25:34:a6:2c:1a:9b:3e:1c:db:94:ab:7b:19:5a:04:ed:24
Signer

Actual PE Digest

29:8e:ae:25:34:a6:2c:1a:9b:3e:1c:db:94:ab:7b:19:5a:04:ed:24

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=12361235123

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrlenW
lstrcpyW
CreateFileW
VirtualAlloc

advapi32

RegOpenKeyExW

comctl32

ImageList_ReplaceIcon
ImageList_GetImageRect
FlatSB_EnableScrollBar
ord4
CreateStatusWindowW
ImageList_Write
FlatSB_GetScrollPos
ord7
ImageList_SetIconSize
ImageList_SetFilter
FlatSB_GetScrollProp
ImageList_Create
PropertySheetA
FlatSB_SetScrollInfo
PropertySheet
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_LoadImageA
InitMUILanguage
ord2
DestroyPropertySheetPage
_TrackMouseEvent
InitializeFlatSB
CreateStatusWindow
PropertySheetW
ImageList_GetImageCount
CreatePropertySheetPageA
ImageList_SetOverlayImage
FlatSB_ShowScrollBar
ImageList_GetIconSize
ord3
FlatSB_SetScrollRange
ImageList_Draw
ImageList_DragEnter
ord17
ImageList_LoadImage
ord8
ord16
ImageList_DragShowNolock
CreateToolbarEx
DrawStatusTextW
ord14
ImageList_DrawEx
ord15
ImageList_Destroy
ImageList_AddMasked
ord5
FlatSB_GetScrollInfo
CreatePropertySheetPage
ImageList_Add
ImageList_DragMove
ImageList_Copy
ImageList_BeginDrag

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text11
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text12
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textMM3
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM4
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM1
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM5
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM6
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM7
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM8
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textMM9
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textM10
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textM11
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

604c9045e350ddb97ebabfabafc1e6f8

Code Sign

4c:35:75:3f:cf:2a:de:ad:46:0c:1f:dd:50:bf:2e:14Certificate

Extended Key Usages

29:8e:ae:25:34:a6:2c:1a:9b:3e:1c:db:94:ab:7b:19:5a:04:ed:24Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

Sections

.text Size: 3KB - Virtual size: 2KB

.text11 Size: 288KB - Virtual size: 288KB

.text12 Size: 1024B - Virtual size: 912B

.textMM3 Size: 512B - Virtual size: 500B

.textMM4 Size: 512B - Virtual size: 500B

.textMM1 Size: 512B - Virtual size: 500B

.textMM5 Size: 512B - Virtual size: 500B

.textMM6 Size: 512B - Virtual size: 500B

.textMM7 Size: 512B - Virtual size: 500B

.textMM8 Size: 512B - Virtual size: 500B

.textMM9 Size: 512B - Virtual size: 500B

.textM10 Size: 512B - Virtual size: 500B

.textM11 Size: 512B - Virtual size: 500B

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 500B

4c:35:75:3f:cf:2a:de:ad:46:0c:1f:dd:50:bf:2e:14
Certificate

29:8e:ae:25:34:a6:2c:1a:9b:3e:1c:db:94:ab:7b:19:5a:04:ed:24
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 3KB - Virtual size: 2KB

.text11
Size: 288KB - Virtual size: 288KB

.text12
Size: 1024B - Virtual size: 912B

.textMM3
Size: 512B - Virtual size: 500B

.textMM4
Size: 512B - Virtual size: 500B

.textMM1
Size: 512B - Virtual size: 500B

.textMM5
Size: 512B - Virtual size: 500B

.textMM6
Size: 512B - Virtual size: 500B

.textMM7
Size: 512B - Virtual size: 500B

.textMM8
Size: 512B - Virtual size: 500B

.textMM9
Size: 512B - Virtual size: 500B

.textM10
Size: 512B - Virtual size: 500B

.textM11
Size: 512B - Virtual size: 500B

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 500B