e6ffbf04a8fe0d0e68246cf33c5fdcc7bbe210f5bad580ab455c81da538d64df

Sharing

Copy URL

Twitter E-mail

General

Target

e6ffbf04a8fe0d0e68246cf33c5fdcc7bbe210f5bad580ab455c81da538d64df
Size

310KB
MD5

15a49ad74093f260905aeebd86ab54f3
SHA1

76d4d1d1bcbb24fcd9b4eb5c8e713a076f67b988
SHA256

e6ffbf04a8fe0d0e68246cf33c5fdcc7bbe210f5bad580ab455c81da538d64df
SHA512

70763d97c517f095ffbf3d1ed85987724a39867ce26fdd8483115293e16f4d4814deffd8e25c32b22ae1f2f3e0432771d60fd19018da598580fb81c071038ff9
SSDEEP

6144:6wTTu9g4DQC6ziRo0sYXkRDm5TsCQIaNEN4xxgBnixuqFsE6a9:vGpF6K1d8UIIaNniBnnq+na9

Score

N/A

Malware Config

Signatures

Files

e6ffbf04a8fe0d0e68246cf33c5fdcc7bbe210f5bad580ab455c81da538d64df
.exe windows x86

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

51:64:c3:9c:dc:c6:fc:95:42:d7:cd:5c:bf:8d:64:ee
Certificate

Issuer

CN=23612

Not Before

03-02-2012 15:38

Not After

31-12-2039 23:59

Subject

CN=23612

Extended Key Usages

ExtKeyUsageCodeSigning

a1:ae:44:df:bf:34:01:cc:e9:81:57:6a:fc:bb:1c:7e:cc:a3:3b:70
Signer

Actual PE Digest

a1:ae:44:df:bf:34:01:cc:e9:81:57:6a:fc:bb:1c:7e:cc:a3:3b:70

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=23612

01-12-2022 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc

user32

LoadIconW

advapi32

RegOpenKeyExW

shlwapi

SHRegEnumUSValueA
PathMakeSystemFolderA
PathSetDlgItemPathA
SHRegGetBoolUSValueW
SHRegSetUSValueW
SHRegWriteUSValueA
PathAddExtensionA
ord16

Sections

.text
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

990e1e166daa6313ddd8764b5bbaa95c

Code Sign

51:64:c3:9c:dc:c6:fc:95:42:d7:cd:5c:bf:8d:64:eeCertificate

Extended Key Usages

a1:ae:44:df:bf:34:01:cc:e9:81:57:6a:fc:bb:1c:7e:cc:a3:3b:70Signer

Signature Validations

Verification

01-12-2022 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 303KB - Virtual size: 302KB

.data Size: 1024B - Virtual size: 640B

.text5 Size: 512B - Virtual size: 32B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 164B

51:64:c3:9c:dc:c6:fc:95:42:d7:cd:5c:bf:8d:64:ee
Certificate

a1:ae:44:df:bf:34:01:cc:e9:81:57:6a:fc:bb:1c:7e:cc:a3:3b:70
Signer

01-12-2022 14:34
Valid: false

.text
Size: 303KB - Virtual size: 302KB

.data
Size: 1024B - Virtual size: 640B

.text5
Size: 512B - Virtual size: 32B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 164B