cd8ede451826fcbe666fb7c099cb92e2f8244427b70a481863ea241b2ff9108c

Sharing

Copy URL Twitter E-mail

General

Target

cd8ede451826fcbe666fb7c099cb92e2f8244427b70a481863ea241b2ff9108c
Size

107KB
MD5

a8ac0f96d28dbc1b6262307f80b09b96
SHA1

703881fa603d2da182e271a42dbeb08fa1857c6a
SHA256

cd8ede451826fcbe666fb7c099cb92e2f8244427b70a481863ea241b2ff9108c
SHA512

1979e8777a63c16069d26ada42fac126e92fb0e0186fce3238a37d979d3af7193134c974ce56c952836cf13ccb39a2b975a541ccb6c83fb380f903f42108c4a1
SSDEEP

768:yijmw0L400kvFCT/46+zLsMkXDG/9OUh6pkc4i9EGkjBf3yhl1FwxV9CO5T58A5I:y+mLr9CT/1u6C8knJsFX2x2PTz5xl

Score

N/A

Malware Config

Signatures

Files

cd8ede451826fcbe666fb7c099cb92e2f8244427b70a481863ea241b2ff9108c
.exe windows x86

661f00f579b51abf4401656245cd6a2e

Code Sign

18:1d:cf:81:1e:4a:56:56:b2:5c:77:eb:9a:d0:96:be
Certificate

Issuer

CN=534634 inc

Not Before

02/02/2012, 05:24

Not After

31/12/2039, 23:59

Subject

CN=534634 inc

Extended Key Usages

ExtKeyUsageCodeSigning

c3:47:30:81:df:e6:d9:37:f8:8b:fd:6c:3f:9b:01:7d:fe:f3:e3:5f
Signer

Actual PE Digest

c3:47:30:81:df:e6:d9:37:f8:8b:fd:6c:3f:9b:01:7d:fe:f3:e3:5f

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=534634 inc

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
CreateFileW
lstrcatW
GetWindowsDirectoryW
LoadLibraryA
GetProcAddress
GetSystemInfo
AssignProcessToJobObject
BackupRead
BackupWrite
CallNamedPipeW
CloseHandle
CompareStringW
CreateDirectoryExA
CreateEventW
CreateHardLinkW
CreateSemaphoreW
DebugActiveProcess
DefineDosDeviceW
DeleteVolumeMountPointW
EnumSystemLocalesA
FileTimeToLocalFileTime
FindFirstChangeNotificationW
FindFirstFileExA
FindFirstVolumeMountPointW
FindNextVolumeMountPointW
FoldStringA
FreeResource
GetACP
GetCalendarInfoW
GetCommProperties
GetCommandLineW
GetCompressedFileSizeW
GetComputerNameW
GetConsoleAliasExesW
GetConsoleAliasW
GetCurrentProcess
GetDiskFreeSpaceExA
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentVariableA
GetFileAttributesA
GetFileInformationByHandle
GetLocalTime
GetLogicalDrives
GetModuleHandleA
GetNamedPipeInfo
GetPrivateProfileSectionA
GetProfileSectionW
GetShortPathNameA
GetStringTypeExA
GetSystemWindowsDirectoryA
GetTempFileNameA
GetTempPathW
GetThreadSelectorEntry
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVolumeInformationW
GetVolumePathNameA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalUnWire
GlobalUnfix
HeapAlloc
HeapWalk
InitializeCriticalSection
InterlockedExchange
InterlockedIncrement
IsValidLocale
LockFile
Module32Next
MoveFileWithProgressW
OpenJobObjectA
PurgeComm
ReadConsoleOutputA
ReadConsoleOutputCharacterA
ReadFileScatter
ResetEvent
SetCommMask
SetEvent
SetFileAttributesA
SetFilePointerEx
SetInformationJobObject
SetLocaleInfoA
SetPriorityClass
SetThreadIdealProcessor
SetThreadLocale
SetTimeZoneInformation
SetUnhandledExceptionFilter
SetupComm
SystemTimeToFileTime
UnlockFile
WaitForMultipleObjectsEx
WideCharToMultiByte
WriteFileEx
WriteProcessMemory
_lwrite
lstrcmpi
lstrcpyW
lstrcpyn
lstrcpynA

msvcrt

memset

user32

InsertMenuItemW
wsprintfA
AllowSetForegroundWindow
CharLowerA
CharNextA
CharUpperA
ClientToScreen
DdeCreateStringHandleA
DeferWindowPos
DeregisterShellHookWindow
DestroyAcceleratorTable
DialogBoxParamW
EnableScrollBar
EndPaint
EnumClipboardFormats
EnumWindowStationsA
GetActiveWindow
GetAltTabInfo
GetCapture
GetClassLongW
GetClassWord
GetClientRect
GetKeyState
GetKeyboardLayoutList
GetMenuCheckMarkDimensions
GetMenuDefaultItem
GetMenuItemID
GetMenuItemRect
GetMonitorInfoW
GetUserObjectInformationA
GetWindowInfo
GetWindowTextLengthA
GetWindowThreadProcessId
GrayStringW
IsWindowEnabled
LoadCursorA
LoadIconA
LoadKeyboardLayoutW
MoveWindow
NotifyWinEvent
OffsetRect
OpenClipboard
OpenIcon
RealChildWindowFromPoint
RealGetWindowClassA
RealGetWindowClassW
RemovePropA
ScrollDC
SendIMEMessageExW
SendMessageCallbackA
SendMessageW
SetMenuContextHelpId
SetParent
SetProcessWindowStation
SetThreadDesktop
SetUserObjectInformationW
SetWindowPlacement
SetWindowRgn
ShowWindow
SwitchDesktop
ToUnicode
TrackPopupMenu
TranslateMessage
UnhookWinEvent
UnregisterDeviceNotification
VkKeyScanW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

661f00f579b51abf4401656245cd6a2e

Code Sign

18:1d:cf:81:1e:4a:56:56:b2:5c:77:eb:9a:d0:96:beCertificate

Extended Key Usages

c3:47:30:81:df:e6:d9:37:f8:8b:fd:6c:3f:9b:01:7d:fe:f3:e3:5fSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 484B

.text Size: 74KB - Virtual size: 73KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1KB - Virtual size: 1KB

18:1d:cf:81:1e:4a:56:56:b2:5c:77:eb:9a:d0:96:be
Certificate

c3:47:30:81:df:e6:d9:37:f8:8b:fd:6c:3f:9b:01:7d:fe:f3:e3:5f
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 484B

.text
Size: 74KB - Virtual size: 73KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1KB - Virtual size: 1KB