a852e1398fd90cb3e98bb28066fa1b1942133f73898bfdacbe74aa4f0cfdce28

Sharing

Copy URL Twitter E-mail

General

Target

a852e1398fd90cb3e98bb28066fa1b1942133f73898bfdacbe74aa4f0cfdce28
Size

537KB
MD5

03a5c28a21d26a11ba60b31c6ff0865a
SHA1

ca926f76abf30a9baa2a7084d230aa69196a5f0e
SHA256

a852e1398fd90cb3e98bb28066fa1b1942133f73898bfdacbe74aa4f0cfdce28
SHA512

58a1d264fe058dc972690a67e5479d8f4fc6934ff736b142e03c1fd9da82ce364de7b35d33ecb292b470451707c65805ff57b0d8ac565c54fad2997c3dfd5cff
SSDEEP

6144:n2d+lzdVS+atD9v3quChfV/ERc2uzfKLVhSQFGPhKEzC7WwTYVczRGvB0ykvvSaN:n2UzLu4h/2dVhRUZKEeVTKcVaBfiMXdE

Score

N/A

Malware Config

Signatures

Files

a852e1398fd90cb3e98bb28066fa1b1942133f73898bfdacbe74aa4f0cfdce28
.exe windows x86

fd0033de919ac1f11cad340c5e6b0c6e

Code Sign

62:1b:f6:cb:de:0d:46:86:e2:82:4d:bd:e3:f3:bb:0a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

24/10/2012, 00:00

Not After

29/11/2013, 23:59

Subject

CN=Ingenieursbureau Matrix B.V.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Ingenieursbureau Matrix B.V.,L=Enschede,ST=Overijssel,C=NL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:60:a8:e5:1f:7e:d0:cd:56:db:36:6c:dc:c4:7d:52:f9:df:e3:6e
Signer

Actual PE Digest

44:60:a8:e5:1f:7e:d0:cd:56:db:36:6c:dc:c4:7d:52:f9:df:e3:6e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ingenieursbureau Matrix B.V.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Ingenieursbureau Matrix B.V.,L=Enschede,ST=Overijssel,C=NL

01/12/2022, 14:35
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClassWord
LoadCursorA
IsWindow
GetClientRect
GetDC
PtInRect
SetShellWindowEx
SendMessageW
LoadBitmapA
IsChild
SetWindowPos
InflateRect
PtInRect
BringWindowToTop
CharLowerA
UnionRect
SubtractRect
TranslateMessage
SetSystemMenu
HideCaret
SetRectEmpty
IntersectRect
GetCaretPos
LoadImageA
FlashWindow
FlashWindowEx
GetAncestor
InsertMenuW
ShowScrollBar
ShowOwnedPopups
ShowCursor
GetWindowDC
GetWindowInfo
GetWindowLongA
GetWindowLongW

cmpbk32

PhoneBookCopyFilter

dbghelp

SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64

duser

AutoTrace
AutoTrace

kernel32

GetLastError
CreateFileA
GetWindowsDirectoryA
GetTickCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
ReadFile
GetVersion
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
OpenThread
OpenWaitableTimerA
OpenWaitableTimerW

olepro32

OleCreatePropertyFrame

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 514KB

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 515KB - Virtual size: 520KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd0033de919ac1f11cad340c5e6b0c6e

Code Sign

62:1b:f6:cb:de:0d:46:86:e2:82:4d:bd:e3:f3:bb:0aCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

44:60:a8:e5:1f:7e:d0:cd:56:db:36:6c:dc:c4:7d:52:f9:df:e3:6eSigner

Signature Validations

Verification

01/12/2022, 14:35 Valid: false

Headers

File Characteristics

Imports

user32

cmpbk32

dbghelp

duser

kernel32

olepro32

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 514KB

.rsrc Size: 515KB - Virtual size: 520KB

62:1b:f6:cb:de:0d:46:86:e2:82:4d:bd:e3:f3:bb:0a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

44:60:a8:e5:1f:7e:d0:cd:56:db:36:6c:dc:c4:7d:52:f9:df:e3:6e
Signer

01/12/2022, 14:35
Valid: false

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 514KB

.rsrc
Size: 515KB - Virtual size: 520KB