e8191e710e58b4690d949fac3af7964b03837e93784ad979609d09df15decf9f

Sharing

Copy URL Twitter E-mail

General

Target

e8191e710e58b4690d949fac3af7964b03837e93784ad979609d09df15decf9f
Size

186KB
MD5

07afe6ffd39eba6eb52571445a531853
SHA1

f26b31c372ce959ace7cd6746f1fffb19acd3b07
SHA256

e8191e710e58b4690d949fac3af7964b03837e93784ad979609d09df15decf9f
SHA512

3ac146202aa6f261555e3446b9f95a717942a66b0167fde044d1cfed09c4e22651309145ff6d1ed746c27649ece059c9179c232faaee77c064b3e68001c73d96
SSDEEP

3072:D9XZfG+pBO3C6fbFgIC4zXtkZqg+cblzpZt5Ep79iDOqJ3gsRer:/fRz6bFk4zXtSqg+cblznwbib1g

Score

N/A

Malware Config

Signatures

Files

e8191e710e58b4690d949fac3af7964b03837e93784ad979609d09df15decf9f
.exe windows x86

f0592dcc43ba022ee12afd81d9ce1382

Code Sign

1b:5d:65:19:a1:99:87:a7:49:c4:c9:0a:ec:f1:a3:3b
Certificate

Issuer

CN=NCrG992VieeQ

Not Before

14/03/2012, 06:19

Not After

31/12/2039, 23:59

Subject

CN=NCrG992VieeQ

Extended Key Usages

ExtKeyUsageCodeSigning

07:eb:fb:73:ee:48:ac:ed:3c:3f:d0:c8:dc:e6:2a:f6:0e:a4:f3:dc
Signer

Actual PE Digest

07:eb:fb:73:ee:48:ac:ed:3c:3f:d0:c8:dc:e6:2a:f6:0e:a4:f3:dc

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=NCrG992VieeQ

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
LoadLibraryA
CreateFileA
lstrlenA
GetWindowsDirectoryA
lstrcpyA
GetProcAddress

user32

SetTimer
SetWindowPos
SetWindowsHookExW
ShowWindowAsync
SystemParametersInfoA
VkKeyScanW
WaitForInputIdle
SetScrollPos
SetMenuDefaultItem
SetMenu
SetLayeredWindowAttributes
SetForegroundWindow
SetCaretBlinkTime
SendNotifyMessageW
SendNotifyMessageA
SendMessageTimeoutA
SendInput
SendIMEMessageExW
SendDlgItemMessageA
ScrollWindowEx
ScreenToClient
ReuseDDElParam
RegisterDeviceNotificationA
RegisterClassW
PostQuitMessage
PostMessageA
OemToCharA
MonitorFromRect
LookupIconIdFromDirectoryEx
LoadKeyboardLayoutW
IsDialogMessageA
CallWindowProcA
ChangeDisplaySettingsW
ChangeMenuA
CharLowerW
CharPrevA
CharToOemBuffA
CharToOemBuffW
CharUpperW
ChildWindowFromPointEx
CreateDesktopW
CreateDialogIndirectParamA
IsClipboardFormatAvailable
CreateDialogParamA
CreateIcon
CreateMDIWindowA
CreateMDIWindowW
CreateWindowExA
DdeDisconnectList
DdeGetData
DdeInitializeW
DdeQueryConvInfo
DdeQueryNextServer
DdeReconnect
DeleteMenu
DispatchMessageW
DlgDirListA
DlgDirListW
DlgDirSelectExW
DrawAnimatedRects
DrawMenuBar
DrawTextA
DrawTextW
EnumDisplaySettingsExA
EnumDisplaySettingsW
EnumThreadWindows
EnumWindowStationsA
GetCaretBlinkTime
GetClassNameW
GetClipboardFormatNameA
GetCursor
GetFocus
GetIconInfo
GetKeyboardType
GetMenuDefaultItem
GetMenuItemRect
GetNextDlgGroupItem
GetPriorityClipboardFormat
GetProcessDefaultLayout
GetPropA
GetPropW
GetShellWindow
GetTitleBarInfo
GetWindowLongA
GetWindowModuleFileName
GetWindowPlacement
GrayStringA
BeginDeferWindowPos
IMPQueryIMEW
InvalidateRgn
IsChild

comdlg32

PageSetupDlgW
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
ChooseColorA
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW

advapi32

RegOpenKeyW

ole32

OleDraw
OleDuplicateData
OleGetAutoConvert
OleGetIconOfClass
OleNoteObjectVisible
OleRegEnumFormatEtc
OleRegGetUserType
ProgIDFromCLSID
STGMEDIUM_UserSize
STGMEDIUM_UserUnmarshal
SetDocumentBitStg
StgConvertPropertyToVariant
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgGetIFillLockBytesOnFile
StgOpenStorageEx
StgOpenStorageOnILockBytes
StringFromGUID2
StringFromIID
UpdateDCOMSettings
UtConvertDvtd16toDvtd32
UtGetDvtd16Info
UtGetDvtd32Info
WdtpInterfacePointer_UserSize
WriteClassStg
OleCreateLinkToFileEx
OleCreateLinkFromDataEx
OleCreateFromFileEx
OleBuildVersion
MkParseDisplayName
HkOleRegisterObject
HPALETTE_UserUnmarshal
HPALETTE_UserMarshal
HMETAFILE_UserUnmarshal
HMETAFILE_UserFree
HMENU_UserUnmarshal
HMENU_UserMarshal
HMENU_UserFree
HICON_UserUnmarshal
HICON_UserSize
HGLOBAL_UserMarshal
HGLOBAL_UserFree
HDC_UserSize
HDC_UserFree
HBRUSH_UserUnmarshal
HBRUSH_UserSize
HBITMAP_UserUnmarshal
HACCEL_UserFree
GetDocumentBitStg
EnableHookObject
CreatePointerMoniker
CreateOleAdviseHolder
CreateItemMoniker
CreateILockBytesOnHGlobal
CreateFileMoniker
CreateDataAdviseHolder
CreateClassMoniker
CoWaitForMultipleHandles
CoUnmarshalInterface
CoUnmarshalHresult
CoUninitialize
CoResumeClassObjects
CoReleaseServerProcess
CoRegisterMallocSpy
CoReactivateObject
CoLockObjectExternal
CoLoadLibrary
CoIsOle1Class
CoIsHandlerConnected
CoInstall
CoImpersonateClient
CoGetStdMarshalEx
CoGetInterfaceAndReleaseStream
CoGetInstanceFromIStorage
CoGetClassObject
CoGetCallContext
CoFreeUnusedLibraries
CoFileTimeToDosDateTime
CoDisableCallCancellation
CoCreateInstance
CoAllowSetForegroundWindow
CLIPFORMAT_UserUnmarshal
CLIPFORMAT_UserFree
OleConvertIStorageToOLESTREAMEx
CoGetMalloc

comctl32

ord8
CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindow
ord7
_TrackMouseEvent
ord3
PropertySheetW
PropertySheetA
PropertySheet
ord13
ord14
InitializeFlatSB
InitMUILanguage
InitCommonControlsEx
ord17
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_SetIconSize
ImageList_SetFilter
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_Replace
ImageList_Remove
ImageList_Read
ImageList_Merge
ImageList_LoadImageA
ImageList_LoadImage
ImageList_GetImageCount
ImageList_GetIcon
ImageList_GetDragImage
ImageList_EndDrag
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_Draw
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Add
GetMUILanguage
ord4
FlatSB_ShowScrollBar
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollRange
FlatSB_GetScrollProp
FlatSB_GetScrollPos
FlatSB_EnableScrollBar
DrawStatusTextW
ord5
DrawStatusText
ord15
CreateToolbarEx

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0592dcc43ba022ee12afd81d9ce1382

Code Sign

1b:5d:65:19:a1:99:87:a7:49:c4:c9:0a:ec:f1:a3:3bCertificate

Extended Key Usages

07:eb:fb:73:ee:48:ac:ed:3c:3f:d0:c8:dc:e6:2a:f6:0e:a4:f3:dcSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

ole32

comctl32

Sections

.text Size: 12KB - Virtual size: 12KB

.text1 Size: 165KB - Virtual size: 164KB

.data Size: 1024B - Virtual size: 644B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

1b:5d:65:19:a1:99:87:a7:49:c4:c9:0a:ec:f1:a3:3b
Certificate

07:eb:fb:73:ee:48:ac:ed:3c:3f:d0:c8:dc:e6:2a:f6:0e:a4:f3:dc
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 12KB - Virtual size: 12KB

.text1
Size: 165KB - Virtual size: 164KB

.data
Size: 1024B - Virtual size: 644B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB