cfe6de51e99f16fa75a1df83ffd2514872e22db4140c6a46644adbf8628ada7a

Sharing

Copy URL

Twitter E-mail

General

Target

cfe6de51e99f16fa75a1df83ffd2514872e22db4140c6a46644adbf8628ada7a
Size

57KB
MD5

2d28a103653c0f8f840d103ed6c95ef0
SHA1

4f5f34fbd65a524aa59d60387f4c0198fd50a5ee
SHA256

cfe6de51e99f16fa75a1df83ffd2514872e22db4140c6a46644adbf8628ada7a
SHA512

ca7da79e462204fb864284f86239e0cf41ed81c2b5a3ed6b9e0cd9e7ce0e53c314d0f598d9a2ac87cf4a290378d9c32600ee515565fa22cd44254e644acbe347
SSDEEP

768:SNJNNxsRLUX+ob9T9XSG6EX/CNknNstWb88lEiw8ssO+wcSDPnGMEaB0:wqUXR9T9XV6EKNkC8lEiFGDvlE60

Score

N/A

Malware Config

Signatures

Files

cfe6de51e99f16fa75a1df83ffd2514872e22db4140c6a46644adbf8628ada7a
.dll windows x86

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

Issuer

CN=qw34t123tc125c1

Not Before

22/02/2012, 06:51

Not After

31/12/2039, 23:59

Subject

CN=qw34t123tc125c1

Extended Key Usages

ExtKeyUsageCodeSigning

50:7d:3d:27:04:56:c3:ad:2f:56:e2:b4:6f:12:cd:29:55:a2:62:51
Signer

Actual PE Digest

50:7d:3d:27:04:56:c3:ad:2f:56:e2:b4:6f:12:cd:29:55:a2:62:51

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=qw34t123tc125c1

01/12/2022, 14:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
GetProcAddress
LoadLibraryA
VirtualAlloc
GetWindowsDirectoryW

user32

DdeInitializeA
DdeQueryConvInfo
DdeQueryStringA
DdeReconnect
DdeSetUserHandle
DdeUnaccessData
DefDlgProcW
DestroyWindow
DialogBoxIndirectParamA
DialogBoxIndirectParamW
DlgDirListA
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DrawFocusRect
DrawIcon
DrawIconEx
DrawTextW
EnumClipboardFormats
EnumWindows
ExcludeUpdateRgn
FrameRect
GetActiveWindow
GetAltTabInfo
GetAsyncKeyState
GetCaretBlinkTime
GetClassInfoExA
GetClassInfoExW
GetClassLongW
GetClassWord
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetDC
GetDCEx
GetDesktopWindow
GetDoubleClickTime
GetKeyboardLayoutNameA
GetLastActivePopup
GetLastInputInfo
GetMenuContextHelpId
GetMessageA
GetMessageTime
GetMonitorInfoA
GetProcessDefaultLayout
GetPropW
GetScrollInfo
GetTabbedTextExtentW
GetThreadDesktop
GetWindow
GetWindowLongA
GetWindowModuleFileName
GetWindowModuleFileNameA
GetWindowWord
HiliteMenuItem
DdeFreeDataHandle
InsertMenuA
IsCharAlphaNumericA
IsCharAlphaW
IsClipboardFormatAvailable
IsWindowEnabled
LoadBitmapA
LoadCursorA
LoadCursorFromFileA
LoadKeyboardLayoutA
LoadStringA
MapVirtualKeyExW
MapVirtualKeyW
MenuItemFromPoint
MonitorFromPoint
NotifyWinEvent
OemToCharA
OemToCharBuffW
OpenDesktopA
OpenWindowStationW
PackDDElParam
PeekMessageA
PostThreadMessageW
RealGetWindowClassW
RegisterDeviceNotificationA
RegisterShellHookWindow
RegisterWindowMessageA
ReleaseCapture
ScreenToClient
ScrollDC
ScrollWindow
SendMessageCallbackA
SendMessageTimeoutW
SetActiveWindow
SetCaretBlinkTime
SetDoubleClickTime
SetLastErrorEx
SetMenuContextHelpId
SetPropA
SetUserObjectSecurity
SetWindowContextHelpId
SetWindowRgn
SetWindowTextA
SetWindowsHookA
SetWindowsHookExA
SwapMouseButton
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMDISysAccel
UnpackDDElParam
UpdateLayeredWindow
UpdateWindow
VkKeyScanExA
WINNLSEnableIME
WINNLSGetEnableStatus
WaitMessage
WindowFromDC
WindowFromPoint
keybd_event
wsprintfA
wvsprintfA
DdeAddData
CreateDialogParamA
CreateDialogIndirectParamW
CreateCursor
CreateCaret
CountClipboardFormats
CopyAcceleratorTableA
CloseWindowStation
CheckMenuItem
CharUpperBuffA
CharToOemBuffW
CharNextW
CharLowerBuffA
ChangeDisplaySettingsExA
CallWindowProcW
CallMsgFilterA
BringWindowToTop
BeginDeferWindowPos
ArrangeIconicWindows
AppendMenuW
AdjustWindowRectEx
InSendMessageEx

comdlg32

ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
ChooseColorA

ole32

BindMoniker
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserSize
CLSIDFromProgID
CLSIDFromProgIDEx
CLSIDFromString
CoAllowSetForegroundWindow
CoBuildVersion
CoCopyProxy
CoCreateInstance
CoCreateObjectInContext
CoFileTimeNow
CoFreeUnusedLibraries
CoGetClassObject
CoGetCurrentProcess
CoGetInstanceFromIStorage
CoGetMalloc
CoGetMarshalSizeMax
CoGetObjectContext
CoInitialize
CoIsOle1Class
CoQueryProxyBlanket
CoQueryReleaseObject
CoRegisterChannelHook
CoRegisterClassObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogateEx
CoReleaseMarshalData
CoRevertToSelf
CoRevokeMallocSpy
CoSetCancelObject
CoTaskMemAlloc
CoUninitialize
CoUnloadingWOW
CoWaitForMultipleHandles
CreateAntiMoniker
CreateClassMoniker
CreateGenericComposite
CreateItemMoniker
CreateOleAdviseHolder
CreateStdProgressIndicator
DcomChannelSetHResult
DllDebugObjectRPCHook
FmtIdToPropStgName
FreePropVariantArray
GetClassFile
GetConvertStg
GetDocumentBitStg
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HBRUSH_UserUnmarshal
HDC_UserMarshal
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserUnmarshal
HGLOBAL_UserFree
HGLOBAL_UserMarshal
HGLOBAL_UserSize
HICON_UserFree
HICON_UserMarshal
HMENU_UserFree
HMENU_UserUnmarshal
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HWND_UserFree
HWND_UserUnmarshal
HkOleRegisterObject
IIDFromString
MkParseDisplayName
MonikerRelativePathTo
OleBuildVersion
OleConvertIStorageToOLESTREAM
OleCreateDefaultHandler
OleCreateEmbeddingHelper
OleCreateEx
OleCreateFromDataEx
OleCreateLink
OleCreateLinkEx
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleFlushClipboard
OleGetAutoConvert
OleGetIconOfFile
OleInitializeWOW
OleIsCurrentClipboard
OleLoad
OleLockRunning
OleNoteObjectVisible
OleRegGetUserType
OleRun
OleSaveToStream
OleSetAutoConvert
OleSetContainedObject
OleSetMenuDescriptor
OleUninitialize
OpenOrCreateStream
ReadClassStm
ReadFmtUserTypeStg
ReadOleStg
SNB_UserFree
SNB_UserMarshal
SNB_UserSize
STGMEDIUM_UserMarshal
SetConvertStg
SetDocumentBitStg
StgCreateDocfileOnILockBytes
StgCreatePropStg
StgCreateStorageEx
StgGetIFillLockBytesOnILockBytes
StgIsStorageFile
StgOpenStorageOnILockBytes
UtGetDvtd32Info
WdtpInterfacePointer_UserUnmarshal
WriteOleStg
WriteStringStream

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text6
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text5
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ec01047b898a2c075c87b411b39dcec

Code Sign

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4eCertificate

Extended Key Usages

50:7d:3d:27:04:56:c3:ad:2f:56:e2:b4:6f:12:cd:29:55:a2:62:51Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 616B

.text6 Size: 2KB - Virtual size: 1KB

.text1 Size: 1024B - Virtual size: 1000B

.text2 Size: 1024B - Virtual size: 1000B

.text5 Size: 19KB - Virtual size: 18KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 2KB - Virtual size: 1KB

59:52:4b:90:0c:c6:56:79:b9:60:98:70:86:d7:5b:4e
Certificate

50:7d:3d:27:04:56:c3:ad:2f:56:e2:b4:6f:12:cd:29:55:a2:62:51
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 616B

.text6
Size: 2KB - Virtual size: 1KB

.text1
Size: 1024B - Virtual size: 1000B

.text2
Size: 1024B - Virtual size: 1000B

.text5
Size: 19KB - Virtual size: 18KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 2KB - Virtual size: 1KB