b9c3566fa962cd6aa519d6a0c7130731893c3a842a2c1e18fd578589ab1eeb96

Sharing

Copy URL

Twitter E-mail

General

Target

b9c3566fa962cd6aa519d6a0c7130731893c3a842a2c1e18fd578589ab1eeb96
Size

276KB
MD5

0c5d2e2dd7f5c2229d5536bf119620c9
SHA1

9a030783c9ce6a0aa38e6a4a111c92cd2ddf45ea
SHA256

b9c3566fa962cd6aa519d6a0c7130731893c3a842a2c1e18fd578589ab1eeb96
SHA512

b6f253e576102cc6ed3f96d8a38894e2895df9b7bdbd26d7f9ab39459805922fd01bea81447b2153f85866d0716faad46d423f4bff2c54b86ea0cc4c194ce5ca
SSDEEP

6144:r/FVIW9rUSUa4klU2SC9IZmNkyBr0i51eQwRAvsuA6b:r/FV1rUSCqUFCnNkyBt1elAvEg

Score

N/A

Malware Config

Signatures

Files

b9c3566fa962cd6aa519d6a0c7130731893c3a842a2c1e18fd578589ab1eeb96
.exe windows x86

10df4effdccda068cdbe539c9036ff55

Code Sign

06:e2:bc:62:8e:28:f4:7d:b8:fd:0e:ea:7f:f3:37:50
Certificate

Issuer

CN=5r6Io0OJu3L2

Not Before

16/03/2012, 07:53

Not After

31/12/2039, 23:59

Subject

CN=5r6Io0OJu3L2

Extended Key Usages

ExtKeyUsageCodeSigning

1d:9a:d1:a9:9e:40:a3:5e:98:46:ae:03:99:aa:8f:ea:c0:02:20:84
Signer

Actual PE Digest

1d:9a:d1:a9:9e:40:a3:5e:98:46:ae:03:99:aa:8f:ea:c0:02:20:84

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=5r6Io0OJu3L2

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
LoadLibraryW
CreateFileA
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CancelDeviceWakeupRequest
SetPriorityClass
BeginUpdateResourceA
RemoveDirectoryW
EnumSystemLanguageGroupsA
FlushViewOfFile
CreateProcessA
CreateFileW
SetCommTimeouts
InterlockedExchangeAdd
ReplaceFile
GetDateFormatW
FindNextVolumeMountPointW
FormatMessageW
EnterCriticalSection
WriteFile
GetTapeParameters
GetConsoleAliasesLengthW
GetDevicePowerState
UnmapViewOfFile
CreateFileMappingA
ContinueDebugEvent
VerLanguageNameW
GetSystemInfo
GlobalDeleteAtom
GetDiskFreeSpaceW
QueueUserWorkItem
GetAtomNameW
VirtualProtectEx
ResetWriteWatch
CreateDirectoryExA
SetCurrentDirectoryW
SetCommMask
EnumCalendarInfoExA
GetStdHandle
InterlockedDecrement
FoldStringA
FindFirstFileExW
SetCalendarInfoW
LoadLibraryExW
AddConsoleAliasA
FindResourceExW
SwitchToFiber
SetConsoleTitleA
SetHandleCount
FindFirstFileExA
OpenJobObjectA
GlobalFree
FindAtomW
Beep
IsBadHugeWritePtr
SetProcessShutdownParameters
SetHandleInformation
LocalReAlloc
PeekConsoleInputW
FindClose
GlobalMemoryStatusEx
GetDefaultCommConfigW
GetStringTypeExA
GetComputerNameA
HeapDestroy
WriteConsoleOutputCharacterW
EnumDateFormatsA
CreateTimerQueue
CreateEventA
InitializeCriticalSectionAndSpinCount
ReadDirectoryChangesW
GetBinaryType
GetConsoleCP
SetCommState
GetCommProperties
ResetEvent
UnlockFile
IsBadCodePtr
GetCurrentDirectoryW
_lopen
GetCompressedFileSizeA
GetThreadSelectorEntry
IsBadWritePtr
GetComputerNameExA
GetConsoleAliasesA
CreateTimerQueueTimer
CreateToolhelp32Snapshot
CopyFileA
GetNamedPipeHandleStateA
FindFirstChangeNotificationA
GetTempFileNameW
GetUserDefaultLCID
GlobalHandle
SetInformationJobObject
GetCurrencyFormatW
ReadFile
GetLongPathNameW
GetPrivateProfileIntW
lstrcmpiW
LocalFileTimeToFileTime

user32

TabbedTextOutW
IsCharAlphaA
GetWindow
GetMenuItemRect
GetMessageTime
GetMenuDefaultItem
LoadKeyboardLayoutA
KillTimer
GetQueueStatus
GetClassLongW
DefFrameProcW
CreateIconFromResourceEx
UnpackDDElParam
FindWindowExA
CreateCaret
CreateWindowExA
CreatePopupMenu
ScrollWindowEx
SetSysColors
DrawIconEx
GetMouseMovePointsEx
CopyImage
MessageBoxA
DlgDirSelectComboBoxExA
CreateAcceleratorTableA
CreateWindowStationW
IsCharLowerW
MessageBeep
GetKeyboardLayoutNameA
SetForegroundWindow
DefWindowProcW
MenuItemFromPoint
SetDeskWallpaper
MessageBoxExW
ShowScrollBar
DdeReconnect
SetClassWord
ValidateRect
LoadMenuW
UpdateLayeredWindow
AppendMenuA
FindWindowA
GetUserObjectInformationA
SetCapture
SwapMouseButton
GetWindowWord
IMPSetIMEW
SetWindowLongW
UnhookWindowsHookEx
OemToCharW
ToUnicodeEx
DialogBoxParamW
IMPQueryIMEA
wsprintfA
EnumDisplaySettingsExA
SwitchDesktop
IsCharAlphaNumericW
LoadCursorFromFileW
CharToOemBuffA
EndMenu
SetCaretPos
AppendMenuW
ReuseDDElParam
PeekMessageW
InsertMenuA
DrawFrameControl
CharUpperBuffW
SetFocus
SetMessageExtraInfo
PackDDElParam
InsertMenuW
EqualRect
DdeSetUserHandle
UpdateWindow
AttachThreadInput
GetPropW
ModifyMenuW
CopyIcon
GetClipboardOwner
IsZoomed
EnumClipboardFormats
SetMenu
PostMessageW
EnumWindowStationsW
OpenDesktopA
OemToCharBuffA
RealGetWindowClassW
GetWindowInfo
DdeGetData
MonitorFromRect
UnhookWindowsHook
IsDialogMessage
DdeInitializeW

advapi32

RegOpenKeyExW

oleaut32

SafeArrayCopy
OleLoadPicture
SysAllocStringLen
VarUI4FromR8
VarUI1FromI1
VarI1FromR4
VarI2FromStr
VarR4FromI4
VarI2FromI1
BSTR_UserUnmarshal
VarFormatNumber
VarDecFromR8
LoadTypeLi
VarBoolFromUI1
VarBoolFromDec
VarUI2FromDec
VarCyFromI2
VarR8FromDec
VarI4FromUI4
VarDecFromCy
VarI2FromDisp
VarI2FromDate
VarUI1FromUI4
VarUI2FromI2
VarUI2FromR4
VarBoolFromCy
VarI2FromCy
VarDateFromUdateEx
VarDecFromUI2
GetAltMonthNames
VarDateFromUI4
OleLoadPictureFile
VarDecSu
CreateStdDispatch
LPSAFEARRAY_Unmarshal
SafeArrayGetElemsize
VarR4FromI1
VarR4FromDate
VarBoolFromI2
VarI4FromDate
VarAnd
VarCyCmp
VarDecDiv
VarUI1FromStr
LoadRegTypeLi
VarDecAbs
VarI4FromR4
VarI1FromStr
VarBstrFromR4
VarR8FromDisp
VarBstrFromDec
OaBuildVersion
VARIANT_UserSize
SysStringLen
VarPow
VarDecCmpR8
VarDateFromI1
VarI4FromUI1
VarI2FromDec
VarBoolFromI1
BSTR_UserSize
LHashValOfNameSys
VarBoolFromStr
LPSAFEARRAY_Marshal
VarCyInt
VarCyFromR4
VarUI2FromCy
VarI4FromDec
VariantCopyInd
SafeArrayAllocData
BstrFromVector
VarBoolFromUI4
SysStringByteLen
VarI4FromI1
VarI2FromR4
VarI2FromUI1
VarBoolFromUI2
VarDecFromStr
GetActiveObject
VarBstrFromCy
VarMul
VARIANT_UserFree
VarCyFromUI2
VarR8FromBool
VarI1FromDec
BSTR_UserFree
VarCyCmpR8
VarDecNeg
VarInt
OleLoadPictureFileEx
SafeArrayGetLBound

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

r2
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10df4effdccda068cdbe539c9036ff55

Code Sign

06:e2:bc:62:8e:28:f4:7d:b8:fd:0e:ea:7f:f3:37:50Certificate

Extended Key Usages

1d:9a:d1:a9:9e:40:a3:5e:98:46:ae:03:99:aa:8f:ea:c0:02:20:84Signer

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

Sections

.text Size: 4KB - Virtual size: 3KB

r2 Size: 260KB - Virtual size: 259KB

.data Size: 7KB - Virtual size: 6KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

06:e2:bc:62:8e:28:f4:7d:b8:fd:0e:ea:7f:f3:37:50
Certificate

1d:9a:d1:a9:9e:40:a3:5e:98:46:ae:03:99:aa:8f:ea:c0:02:20:84
Signer

01/12/2022, 14:34
Valid: false

.text
Size: 4KB - Virtual size: 3KB

r2
Size: 260KB - Virtual size: 259KB

.data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB