673b1f251f4de8d7f1c739b17dffa89a524be9a932096a34498bd986f84c8904

Sharing

Copy URL Twitter E-mail

General

Target

673b1f251f4de8d7f1c739b17dffa89a524be9a932096a34498bd986f84c8904
Size

271KB
MD5

f39416dc25c8e9a32675a5f7f7759e10
SHA1

8e97c6b8eede2130ef7f3bbf2d0a2015b2818ba0
SHA256

673b1f251f4de8d7f1c739b17dffa89a524be9a932096a34498bd986f84c8904
SHA512

39ade1d0602c037ef94995002c5a08b395d1a9003baf5e07bee7b3101e5e3b941af15bfc432654a4ce3e42ed00676c579c686c44aec76c9e4b1527789c5af53f
SSDEEP

3072:oLuJZ4AV1OgNTYtJ3ExxDZ3mH/5HjjV/YVOEd3yaHjDnq5yMbtBlMMU4RKb:rZjNoJ3E7kBHjxY8Ed3VHPkyMbRS

Score

N/A

Malware Config

Signatures

Files

673b1f251f4de8d7f1c739b17dffa89a524be9a932096a34498bd986f84c8904
.dll windows x86

42bd8c8e5d795d00a98bfda6c04fbd59

Code Sign

41:23:7d:05:1b:76:8b:7e:bf:5e:29:c8:43:19:08:1d
Certificate

Issuer

CN=0vzvnS3XkSkXqeQ

Not Before

16/04/2012, 05:10

Not After

31/12/2039, 23:59

Subject

CN=0vzvnS3XkSkXqeQ

Extended Key Usages

ExtKeyUsageCodeSigning

f6:ef:f4:f1:b3:6f:ee:3d:97:09:9c:b5:fa:4d:2f:36:e3:52:b2:9f
Signer

Actual PE Digest

f6:ef:f4:f1:b3:6f:ee:3d:97:09:9c:b5:fa:4d:2f:36:e3:52:b2:9f

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=0vzvnS3XkSkXqeQ

01/12/2022, 14:34
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetWindowsDirectoryA
LocalFlags
LoadLibraryW
GetProcAddress
CreateFileW
GetWindowsDirectoryW
lstrcatW
VirtualAlloc
IsDebuggerPresent

user32

DrawCaption
DrawFocusRect
DrawMenuBar
EnumDisplayDevicesW
EnumDisplaySettingsA
EnumDisplaySettingsW
EnumPropsExA
EnumWindows
FindWindowA
FindWindowExA
FindWindowW
FlashWindow
GetAncestor
GetCaretPos
GetClassNameA
GetClientRect
GetCursorInfo
GetDesktopWindow
GetKeyboardLayout
GetKeyboardState
GetMenuStringW
GetNextDlgGroupItem
GetNextDlgTabItem
GetParent
GetPriorityClipboardFormat
GetQueueStatus
GetShellWindow
GetSysColor
GetTopWindow
GetUpdateRect
GetWindowModuleFileName
HiliteMenuItem
DlgDirSelectExW
InvalidateRect
IsMenu
IsWindow
LoadCursorFromFileW
LoadKeyboardLayoutW
LoadStringA
LockWorkStation
LookupIconIdFromDirectory
MapVirtualKeyW
MessageBoxA
MessageBoxIndirectA
NotifyWinEvent
OemToCharA
OpenDesktopW
OpenIcon
PaintDesktop
RealGetWindowClassA
RegisterClassA
RegisterClipboardFormatW
RegisterWindowMessageA
ReplyMessage
SendMessageW
SetClassLongW
SetCursorPos
SetDeskWallpaper
SetMenuDefaultItem
SetShellWindow
SetWinEventHook
SetWindowRgn
SetWindowsHookExA
SetWindowsHookW
ShowOwnedPopups
ShowWindow
UnhookWindowsHookEx
UnpackDDElParam
ValidateRect
VkKeyScanExW
VkKeyScanW
keybd_event
DlgDirSelectComboBoxExW
DestroyMenu
DefMDIChildProcA
DefFrameProcW
DdeSetQualityOfService
DdeQueryConvInfo
DdeNameService
DdeInitializeW
DdeFreeDataHandle
DdeCreateDataHandle
CreateCursor
CountClipboardFormats
CloseWindow
ClipCursor
CheckMenuRadioItem
CharUpperBuffA
CharPrevW
CharLowerW
BringWindowToTop
AttachThreadInput
AdjustWindowRect
IMPQueryIMEW

comctl32

InitializeFlatSB
CreatePropertySheetPageA
ord6
CreateStatusWindowW
DrawStatusText
FlatSB_GetScrollProp
ImageList_Copy
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_Duplicate
ImageList_EndDrag
ImageList_LoadImageA
ImageList_Read
ImageList_SetImageCount
CreatePropertySheetPage

Sections

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42bd8c8e5d795d00a98bfda6c04fbd59

Code Sign

41:23:7d:05:1b:76:8b:7e:bf:5e:29:c8:43:19:08:1dCertificate

Extended Key Usages

f6:ef:f4:f1:b3:6f:ee:3d:97:09:9c:b5:fa:4d:2f:36:e3:52:b2:9fSigner

Signature Validations

Verification

01/12/2022, 14:34 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

comctl32

Sections

.text2 Size: 1024B - Virtual size: 1000B

.text Size: 255KB - Virtual size: 255KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 1KB - Virtual size: 1KB

41:23:7d:05:1b:76:8b:7e:bf:5e:29:c8:43:19:08:1d
Certificate

f6:ef:f4:f1:b3:6f:ee:3d:97:09:9c:b5:fa:4d:2f:36:e3:52:b2:9f
Signer

01/12/2022, 14:34
Valid: false

.text2
Size: 1024B - Virtual size: 1000B

.text
Size: 255KB - Virtual size: 255KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 1KB - Virtual size: 1KB