dcb4ba36fce02ac50ff928a1bf51a4a3158d5d485b7be6d05bb2094fa0160bcd

Sharing

Copy URL

Twitter E-mail

General

Target

dcb4ba36fce02ac50ff928a1bf51a4a3158d5d485b7be6d05bb2094fa0160bcd
Size

205KB
MD5

9134cc95ac3688555f5ecd90c23fe57d
SHA1

b91ba222d29113cb65fbb563ad6c6e34e099d7e8
SHA256

dcb4ba36fce02ac50ff928a1bf51a4a3158d5d485b7be6d05bb2094fa0160bcd
SHA512

ab596ae318a63fbc3ea2a7a945cd92e72c84a9828e9fcff42aa40e684ff2d92e6260a6e6ecc9ea7e489d8c99e451bcaf71d4ed6bb6c6e374a8f94b45647e34ad
SSDEEP

6144:Qq2uOpxanDqZAn7KHFYvBOiG5zER+7O9:QZxpYPSFKIzP

Score

N/A

Malware Config

Signatures

Files

dcb4ba36fce02ac50ff928a1bf51a4a3158d5d485b7be6d05bb2094fa0160bcd
.dll windows x86

f5a2c7f72913c66bc658b60980b9c282

Code Sign

2f:08:b0:0a:09:d7:05:a0:4e:67:87:0f:64:de:48:d8
Certificate

Issuer

CN=PeYYvkz499MX

Not Before

18-03-2012 06:34

Not After

31-12-2039 23:59

Subject

CN=PeYYvkz499MX

Extended Key Usages

ExtKeyUsageCodeSigning

ca:21:2d:03:c8:28:06:07:d8:8f:c9:7c:df:c2:1c:bd:12:c7:8d:fc
Signer

Actual PE Digest

ca:21:2d:03:c8:28:06:07:d8:8f:c9:7c:df:c2:1c:bd:12:c7:8d:fc

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=PeYYvkz499MX

01-12-2022 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetWindowsDirectoryA
lstrcpyA
AddAtomA
BackupRead
CloseHandle
CompareFileTime
CompareStringA
CompareStringW
ContinueDebugEvent
CopyFileExA
CreateIoCompletionPort
CreateMailslotA
CreateThread
CreateWaitableTimerA
DnsHostnameToComputerNameA
EndUpdateResourceW
EnumDateFormatsA
EnumDateFormatsExW
EnumResourceNamesW
EnumResourceTypesA
EnumSystemLocalesW
EnumTimeFormatsW
EnumUILanguagesW
FindFirstVolumeA
FindNextVolumeMountPointA
FindVolumeMountPointClose
FlushFileBuffers
FlushViewOfFile
FreeUserPhysicalPages
GetACP
GetAtomNameW
GetConsoleAliasExesW
GetConsoleCP
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentProcess
GetCurrentProcessId
GetDevicePowerState
GetFileAttributesA
GetLargestConsoleWindowSize
GetModuleHandleA
GetOverlappedResult
GetPriorityClass
GetPrivateProfileIntA
GetProcessIoCounters
GetQueuedCompletionStatus
CreateFileA
GetStartupInfoW
GetStringTypeExW
GetSystemPowerStatus
GetTempPathW
GetThreadTimes
GlobalFindAtomA
GlobalMemoryStatus
GlobalWire
Heap32ListFirst
HeapFree
HeapValidate
InterlockedExchange
InterlockedExchangeAdd
IsBadReadPtr
IsBadStringPtrW
LoadModule
LocalFileTimeToFileTime
MapViewOfFileEx
MoveFileW
OpenJobObjectA
PurgeComm
QueryPerformanceCounter
QueueUserWorkItem
ReadConsoleA
ReadConsoleInputW
ReadConsoleOutputCharacterA
ReadConsoleOutputW
ResetWriteWatch
RtlUnwind
SetCalendarInfoW
SetComputerNameExA
SetConsoleDisplayMode
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetCurrentDirectoryA
SetProcessWorkingSetSize
SetStdHandle
SetThreadExecutionState
SetTimerQueueTimer
SetVolumeMountPointA
SignalObjectAndWait
Thread32First
VirtualLock
WaitForMultipleObjects
WritePrivateProfileSectionW
_lclose
_lwrite
lstrcmpA
GetStartupInfoA
VirtualAlloc

user32

WindowFromDC
WINNLSGetIMEHotkey
AdjustWindowRectEx
BroadcastSystemMessageA
ChangeDisplaySettingsA
CharLowerW
CharNextW
CharPrevExA
CharToOemBuffW
ChildWindowFromPoint
CopyImage
DdeImpersonateClient
DdeNameService
DlgDirListA
DlgDirSelectComboBoxExW
DrawAnimatedRects
DrawCaption
DrawFocusRect
EnableWindow
EndDeferWindowPos
EnumDesktopsW
EnumWindowStationsW
FindWindowW
GetActiveWindow
GetAncestor
GetAsyncKeyState
GetCaretBlinkTime
GetClassInfoExA
GetClipCursor
GetClipboardFormatNameA
GetClipboardViewer
GetDialogBaseUnits
GetIconInfo
GetInputState
GetLastActivePopup
GetLastInputInfo
GetListBoxInfo
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuStringA
GetMessageW
GetNextDlgTabItem
GetOpenClipboardWindow
GetParent
GetSystemMenu
GetTabbedTextExtentA
GetWindow
GetWindowContextHelpId
GetWindowLongA
GetWindowLongW
GetWindowModuleFileNameW
GetWindowTextLengthA
GetWindowWord
ImpersonateDdeClientWindow
InsertMenuA
InsertMenuItemW
IsCharAlphaA
IsDialogMessage
LoadMenuA
LoadStringA
MapVirtualKeyA
MapVirtualKeyExA
MenuItemFromPoint
MessageBeep
ModifyMenuA
MsgWaitForMultipleObjects
OemToCharBuffW
PostMessageW
PostThreadMessageW
RegisterClassA
RegisterHotKey
RegisterShellHookWindow
RemoveMenu
SetActiveWindow
SetCapture
SetCaretPos
SetDoubleClickTime
SetKeyboardState
SetMenu
SetMenuContextHelpId
SetMenuDefaultItem
SetWinEventHook
ShowScrollBar
ToUnicodeEx
UnionRect
VkKeyScanW
UnregisterHotKey
UnloadKeyboardLayout
ToUnicode

advapi32

RegOpenKeyW

ole32

UtConvertDvtd16toDvtd32
UpdateDCOMSettings
StringFromGUID2
StgPropertyLengthAsVariant
StgOpenPropStg
StgGetIFillLockBytesOnFile
SetDocumentBitStg
SetConvertStg
STGMEDIUM_UserSize
STGMEDIUM_UserFree
SNB_UserSize
ReleaseStgMedium
ReadStringStream
ReadOleStg
PropVariantClear
OleSetMenuDescriptor
OleSetAutoConvert
OleRegGetUserType
OleRegEnumFormatEtc
OleGetIconOfClass
OleGetClipboard
OleCreateStaticFromData
OleCreateMenuDescriptor
OleCreateLinkToFileEx
OleCreateLinkFromDataEx
OleCreateFromFile
OleCreateFromDataEx
OleCreateDefaultHandler
OleConvertOLESTREAMToIStorage
HWND_UserFree
HPALETTE_UserUnmarshal
HMETAFILE_UserSize
HMETAFILE_UserMarshal
HMETAFILE_UserFree
HMETAFILEPICT_UserSize
HMETAFILEPICT_UserFree
HMENU_UserUnmarshal
HMENU_UserMarshal
HICON_UserMarshal
HICON_UserFree
HENHMETAFILE_UserUnmarshal
HENHMETAFILE_UserSize
HENHMETAFILE_UserMarshal
HENHMETAFILE_UserFree
HDC_UserSize
HDC_UserMarshal
HDC_UserFree
HBRUSH_UserUnmarshal
HBRUSH_UserMarshal
HBRUSH_UserFree
HACCEL_UserMarshal
HACCEL_UserFree
GetRunningObjectTable
GetDocumentBitStg
FreePropVariantArray
DcomChannelSetHResult
CreateStdProgressIndicator
CreateObjrefMoniker
CreateItemMoniker
CreateBindCtx
CoUninitialize
CoSuspendClassObjects
CoResumeClassObjects
CoReleaseServerProcess
CoReactivateObject
CoLoadLibrary
CoInitializeEx
CoImpersonateClient
CoGetStandardMarshal
CoGetPSClsid
CoGetMarshalSizeMax
CoGetInstanceFromFile
CoGetCurrentLogicalThreadId
CoFreeAllLibraries
CoEnableCallCancellation
CoDeactivateObject
CoCreateObjectInContext
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoCopyProxy
CoAllowSetForegroundWindow
CoAddRefServerProcess

oleaut32

VarUI4FromUI2
VarUI4FromR4
VarUI4FromCy
VarUI2FromStr
VarUI2FromI4
VarUI2FromDisp
VarUI2FromDec
VarUI2FromDate
VarUI1FromStr
VarUI1FromR4
VarUI1FromDisp
VarUI1FromDate
VarR8Round
VarR8FromDate
VarR8FromBool
VarR4FromUI2
VarR4FromI4
VarR4FromDec
VarR4FromBool
VarNeg
VarMonthName
VarI4FromUI1
VarI4FromStr
VarI4FromI1
VarI4FromBool
VarI2FromR4
VarI2FromDisp
VarI2FromDec
VarI1FromR8
VarI1FromI4
VarI1FromI2
VarFormatPercent
VarFormatDateTime
VarFormat
VarFix
VarEqv
VarDiv
VarDecFromUI4
VarDecFromUI2
VarDecFromDisp
VarDecAbs
VarDateFromUdateEx
VarDateFromUI1
VarDateFromStr
VarDateFromI4
VarDateFromI2
VarDateFromCy
VarCySu
VarCyRound
VarCyMulI4
VarCyFromUI4
VarCyFromR4
VarCyFromI1
VarCyCmpR8
VarCyAdd
VarCyAbs
VarCmp
VarBstrFromR8
VarBstrFromR4
VarBstrFromDisp
VarBstrFromBool
VarBoolFromR8
VarBoolFromR4
VarBoolFromI4
VarBoolFromDec
VARIANT_UserSize
VARIANT_UserFree
SysFreeString
SysAllocStringByteLen
SafeArraySetRecordInfo
RegisterTypeLi
OleLoadPictureFileEx
OleCreatePropertyFrameIndirect
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_Unmarshal
LHashValOfNameSysA
LHashValOfNameSys
GetRecordInfoFromTypeInfo
GetErrorInfo
DispInvoke
CreateTypeLib2
CreateStdDispatch
CreateDispTypeInfo
VariantTimeToSystemTime
VarWeekdayName

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.d5
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5a2c7f72913c66bc658b60980b9c282

Code Sign

2f:08:b0:0a:09:d7:05:a0:4e:67:87:0f:64:de:48:d8Certificate

Extended Key Usages

ca:21:2d:03:c8:28:06:07:d8:8f:c9:7c:df:c2:1c:bd:12:c7:8d:fcSigner

Signature Validations

Verification

01-12-2022 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 100B

.d5 Size: 182KB - Virtual size: 182KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 2KB - Virtual size: 2KB

2f:08:b0:0a:09:d7:05:a0:4e:67:87:0f:64:de:48:d8
Certificate

ca:21:2d:03:c8:28:06:07:d8:8f:c9:7c:df:c2:1c:bd:12:c7:8d:fc
Signer

01-12-2022 14:34
Valid: false

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 100B

.d5
Size: 182KB - Virtual size: 182KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 2KB - Virtual size: 2KB