a01fd093135a2e888ea6f9a57d34103e204ac856cecff25c31a4e961b3479fca

Sharing

Copy URL Twitter E-mail

General

Target

a01fd093135a2e888ea6f9a57d34103e204ac856cecff25c31a4e961b3479fca
Size

294KB
MD5

6c6eaa0a3c62de6005d6f75b194f45ba
SHA1

1d6f98d753a5511c3e804b8abfa352a5f3333b1b
SHA256

a01fd093135a2e888ea6f9a57d34103e204ac856cecff25c31a4e961b3479fca
SHA512

8122de56af3e145a345865cce73fc610074beb777d5ba30950c55d40e644693d4b18b51c877cd9b1db0125098d83cb46d03a80317dd5c050a71f02c3d35ccdca
SSDEEP

6144:IgOBMB7FAFJh6ydWE5W9wGajkc9YwQ+MXZBB8alTRTLsqZ:IRq7FAsyD59Ga7JMJBBj3XsqZ

Score

N/A

Malware Config

Signatures

Files

a01fd093135a2e888ea6f9a57d34103e204ac856cecff25c31a4e961b3479fca
.exe windows x86

5e488279a200b306827e03f34b24dc2a

Code Sign

2e:7f:3e:11:b8:42:8f:84:4d:d0:47:71:2d:94:57:be
Certificate

Issuer

CN=f2351f23g

Not Before

05/03/2012, 08:03

Not After

31/12/2039, 23:59

Subject

CN=f2351f23g

Extended Key Usages

ExtKeyUsageCodeSigning

76:e2:49:f0:b6:2f:48:2d:4c:e0:c6:f9:1a:7a:84:b5:b6:bb:64:d1
Signer

Actual PE Digest

76:e2:49:f0:b6:2f:48:2d:4c:e0:c6:f9:1a:7a:84:b5:b6:bb:64:d1

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=f2351f23g

01/12/2022, 14:35
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA

advapi32

RegOpenKeyExA

shell32

SHGetDataFromIDListA
DoEnvironmentSubstW
ExtractIconEx
Shell_NotifyIconW
SHGetSpecialFolderPathA
ExtractIconW
SHGetPathFromIDListW
ExtractIconExW
SHBrowseForFolderA
SHGetPathFromIDListA
SHAddToRecentDocs
SHBrowseForFolder
ShellExecuteA
SHGetDiskFreeSpaceExW
DoEnvironmentSubstA
SHGetDesktopFolder
SHGetFileInfoW
ExtractAssociatedIconW
SHFileOperationW
DragQueryFile
SHAppBarMessage
SHFreeNameMappings
SHGetFolderPathW
SHPathPrepareForWriteW
DragQueryFileAorW
SHGetSpecialFolderPathW
SHPathPrepareForWriteA
ShellAboutA
DragQueryPoint
SHCreateProcessAsUserW
ExtractAssociatedIconA
SHGetIconOverlayIndexA
ShellAboutW
SHEmptyRecycleBinW
SHGetSpecialFolderLocation
ShellExecuteExW
ExtractAssociatedIconExA
Shell_NotifyIcon
WOWShellExecute
SHGetInstanceExplorer
ShellExecuteEx
SHGetDataFromIDListW
SHLoadNonloadedIconOverlayIdentifiers
FindExecutableA
CheckEscapesW
SHCreateDirectoryExW
ExtractIconExA
SHBindToParent
SHEmptyRecycleBinA
DragAcceptFiles
CommandLineToArgvW
SHGetIconOverlayIndexW
SHGetDiskFreeSpaceA
SHGetFileInfo
ExtractIconA
SHFormatDrive

shlwapi

StrChrIA
StrChrW
StrCmpNW
StrRStrIA
StrStrIA
StrRChrIW
StrChrIW
StrChrA
StrCmpNIW
StrRChrIA
StrCmpNA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textx1
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textx2
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e488279a200b306827e03f34b24dc2a

Code Sign

2e:7f:3e:11:b8:42:8f:84:4d:d0:47:71:2d:94:57:beCertificate

Extended Key Usages

76:e2:49:f0:b6:2f:48:2d:4c:e0:c6:f9:1a:7a:84:b5:b6:bb:64:d1Signer

Signature Validations

Verification

01/12/2022, 14:35 Valid: false

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

Sections

.text Size: 2KB - Virtual size: 2KB

.textx1 Size: 276KB - Virtual size: 276KB

.data Size: 2KB - Virtual size: 2KB

.textx2 Size: 512B - Virtual size: 400B

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 512B - Virtual size: 452B

2e:7f:3e:11:b8:42:8f:84:4d:d0:47:71:2d:94:57:be
Certificate

76:e2:49:f0:b6:2f:48:2d:4c:e0:c6:f9:1a:7a:84:b5:b6:bb:64:d1
Signer

01/12/2022, 14:35
Valid: false

.text
Size: 2KB - Virtual size: 2KB

.textx1
Size: 276KB - Virtual size: 276KB

.data
Size: 2KB - Virtual size: 2KB

.textx2
Size: 512B - Virtual size: 400B

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 512B - Virtual size: 452B