a16db0d2025dff39a4a0de4071ce0e73c6810ab497453ad67c16ba0980385f60

Sharing

Copy URL

Twitter E-mail

General

Target

a16db0d2025dff39a4a0de4071ce0e73c6810ab497453ad67c16ba0980385f60
Size

294KB
MD5

118b1050be87b8189692b82df0ae3045
SHA1

f7ca1686e66866ce961a3b94bbee1d94b962a450
SHA256

a16db0d2025dff39a4a0de4071ce0e73c6810ab497453ad67c16ba0980385f60
SHA512

abe0ae20a6a7a93bdbfe2909185a646b8eae6fdf31de0a1b51f51c79bf845974345448d105cf004e91539dcb81ca6fa504db85b822599a857aeed1f1bb46e5fb
SSDEEP

3072:D3FMCv2QswnoiglVVcBaQFRmgLo/0S13WCCx2gXaDd3N9eCj6YmVn/XrfbZl:jvv9sMoXBaRmr/dukbvuZ/7fH

Score

1^/10

Malware Config

Signatures

Files

a16db0d2025dff39a4a0de4071ce0e73c6810ab497453ad67c16ba0980385f60
.dll windows x86

43e5d7f630d7b07f03bf2c008cf04285

Code Sign

ac:30:7e:52:57:bb:81:4b:81:8d:36:33:b6:30:32:6f
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-11-2020 00:00

Not After

23-11-2021 23:59

Subject

CN=Aqua Direct s.r.o.,O=Aqua Direct s.r.o.,POSTALCODE=619 00,STREET=Železná 646/8,L=Brno,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01-01-2004 00:00

Not After

31-12-2028 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b3:b7:be:1d:12:55:fa:34:bc:04:f7:92:8a:dd:da:84:62:2c:c6:d5
Signer

Actual PE Digest

b3:b7:be:1d:12:55:fa:34:bc:04:f7:92:8a:dd:da:84:62:2c:c6:d5

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Aqua Direct s.r.o.,O=Aqua Direct s.r.o.,POSTALCODE=619 00,STREET=Železná 646/8,L=Brno,C=CZ

16-03-2023 15:36
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
GetCurrentThreadId
lstrlenA
lstrcatA
SetLastError
GetProcessId
GetCurrentThread
GetLastError
lstrcmpA
GetTickCount
GetCurrentProcess

gdiplus

GdipResetPathGradientTransform

winmm

mciLoadCommandResource

user32

GetProcessDefaultLayout

shlwapi

PathSetDlgItemPathW

Sections

.code
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

43e5d7f630d7b07f03bf2c008cf04285

Code Sign

ac:30:7e:52:57:bb:81:4b:81:8d:36:33:b6:30:32:6fCertificate

Extended Key Usages

Key Usages

01Certificate

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

b3:b7:be:1d:12:55:fa:34:bc:04:f7:92:8a:dd:da:84:62:2c:c6:d5Signer

Signature Validations

Verification

16-03-2023 15:36 Valid: false

Headers

File Characteristics

Imports

kernel32

gdiplus

winmm

user32

shlwapi

Sections

.code Size: 197KB - Virtual size: 196KB

.data Size: 91KB - Virtual size: 90KB

ac:30:7e:52:57:bb:81:4b:81:8d:36:33:b6:30:32:6f
Certificate

01
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

b3:b7:be:1d:12:55:fa:34:bc:04:f7:92:8a:dd:da:84:62:2c:c6:d5
Signer

16-03-2023 15:36
Valid: false

.code
Size: 197KB - Virtual size: 196KB

.data
Size: 91KB - Virtual size: 90KB