ad75381789197e8a83e01e9cfd0a91773d99a042565a3446acc288d6a622d521

Sharing

Copy URL

Twitter E-mail

General

Target

ad75381789197e8a83e01e9cfd0a91773d99a042565a3446acc288d6a622d521
Size

310KB
MD5

f5708bcd15c1034816ab7219d3d7484b
SHA1

6f9c1fcbf62a0da5ee165b1eb67e42650ae464dc
SHA256

ad75381789197e8a83e01e9cfd0a91773d99a042565a3446acc288d6a622d521
SHA512

8d6f67c3c0aa4077ca9ab6361d90913b5a05a986b0bf064b6a955b4f02e9467ee089f76ff1dc52fc1b642453bd506594d740b5ada0f2692390d18755ea5d2b9e
SSDEEP

6144:SwTTuXg4DQC6ziRo0sYXkKDm5TsCQIaNEN4xxgB8ixuqFsE6a9:3UpF6K1dtUIIaNniB8nq+na9

Score

N/A

Malware Config

Signatures

Files

ad75381789197e8a83e01e9cfd0a91773d99a042565a3446acc288d6a622d521
.exe windows x86

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

51:64:c3:9c:dc:c6:fc:95:42:d7:cd:5c:bf:8d:64:ee
Certificate

Issuer

CN=23612

Not Before

03-02-2012 15:38

Not After

31-12-2039 23:59

Subject

CN=23612

Extended Key Usages

ExtKeyUsageCodeSigning

f6:dc:e3:87:b4:23:90:9e:a2:b6:3c:56:38:87:93:3c:94:b4:5b:dd
Signer

Actual PE Digest

f6:dc:e3:87:b4:23:90:9e:a2:b6:3c:56:38:87:93:3c:94:b4:5b:dd

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=23612

01-12-2022 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

user32

LoadIconW

advapi32

RegOpenKeyExW

shlwapi

SHRegEnumUSValueA
PathMakeSystemFolderA
PathSetDlgItemPathA
SHRegGetBoolUSValueW
SHRegSetUSValueW
SHRegWriteUSValueA
PathAddExtensionA
ord16

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

51:64:c3:9c:dc:c6:fc:95:42:d7:cd:5c:bf:8d:64:eeCertificate

Extended Key Usages

f6:dc:e3:87:b4:23:90:9e:a2:b6:3c:56:38:87:93:3c:94:b4:5b:ddSigner

Signature Validations

Verification

01-12-2022 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 303KB - Virtual size: 302KB

.data Size: 1024B - Virtual size: 640B

.text5 Size: 512B - Virtual size: 32B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 164B

51:64:c3:9c:dc:c6:fc:95:42:d7:cd:5c:bf:8d:64:ee
Certificate

f6:dc:e3:87:b4:23:90:9e:a2:b6:3c:56:38:87:93:3c:94:b4:5b:dd
Signer

01-12-2022 14:34
Valid: false

.text
Size: 303KB - Virtual size: 302KB

.data
Size: 1024B - Virtual size: 640B

.text5
Size: 512B - Virtual size: 32B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 164B