ATC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ATC.exe
Size

3.4MB
MD5

6bd7c1c19a8ec69cb5414708748cf5b0
SHA1

3cf3f0e6b8af3b6c679218b28e385e2aab5824c2
SHA256

0e3404dda594bac1935de0793ba1a1309468303a191ee035398ac9af20b48c33
SHA512

9c2dcc22db6ae5b29badbff8f11be73581cd72be43a9dd11d250a5fd822640d65279686dabd3331a9d784c77b591736be6d9acd0ef22a45680f3788659ecb399
SSDEEP

98304:ahe8jMBoSVPjqu4D1K+RU6wS97kjIukZz4Boj9ghi1RebMIg9Cbk/V8M:ahRYhqTLC8ukZz4BojDIg9Cbk/V8M

Score

1^/10

Malware Config

Signatures

Files

ATC.exe
.exe windows x86

73eb91b4b6f5534df39ec3880b435649

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:3c:47:92:9d:ca:2c:59:e6:78:3f:31:a1:78:98:63
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/06/2022, 00:00

Not After

07/06/2023, 23:59

Subject

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:3c:47:92:9d:ca:2c:59:e6:78:3f:31:a1:78:98:63
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/06/2022, 00:00

Not After

07/06/2023, 23:59

Subject

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e1:08:fe:31:41:ca:59:7c:b9:85:86:36:f3:38:58:80:98:a8:d2:69:b4:36:47:dd:e6:c4:04:d4:43:bf:27:5c
Signer

Actual PE Digest

e1:08:fe:31:41:ca:59:7c:b9:85:86:36:f3:38:58:80:98:a8:d2:69:b4:36:47:dd:e6:c4:04:d4:43:bf:27:5c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

25/09/2022, 16:44
Valid: true

Chain 1

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Chain 2

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

48:d6:72:52:8a:95:c7:9c:72:6c:4e:13:95:c9:ec:3b:cc:11:b8:f2
Signer

Actual PE Digest

48:d6:72:52:8a:95:c7:9c:72:6c:4e:13:95:c9:ec:3b:cc:11:b8:f2

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

25/09/2022, 16:44
Valid: true

Chain 1

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Chain 2

CN=Panda Security S.L.,O=Panda Security S.L.,L=Bilbao,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
lstrcmpA
FreeResource
lstrcpyW
GetCurrentProcessId
SetThreadPriority
ResumeThread
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GlobalAddAtomW
CompareStringW
GlobalFindAtomW
ReleaseActCtx
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalGetAtomNameW
lstrlenA
GetThreadLocale
FileTimeToSystemTime
GetCurrentDirectoryW
GlobalFlags
InitializeCriticalSectionAndSpinCount
GetFileAttributesW
SetFilePointer
GetTempFileNameW
GetTempPathW
lstrcmpiW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
GetFileAttributesExW
FileTimeToLocalFileTime
GetFileSizeEx
GetTickCount
GetProfileIntW
Sleep
SearchPathW
VirtualProtect
GetWindowsDirectoryW
GetNumberFormatW
FindResourceExW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
SetStdHandle
GetFileType
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
ExitThread
CreateThread
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleW
LCMapStringW
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrlenW
MulDiv
lstrcmpW
InterlockedExchange
SetLastError
GetFileTime
TerminateProcess
OpenProcess
WaitForSingleObject
GetCurrentProcess
MultiByteToWideChar
ReadFile
WideCharToMultiByte
WriteFile
SystemTimeToFileTime
GetFileSize
GetSystemTime
DeleteFileW
CloseHandle
LocalAlloc
GlobalFree
GetProcAddress
CreateFileW
LoadLibraryW
InterlockedIncrement
FreeLibrary
LocalFree
CreateActCtxW
GetLastError
GetModuleHandleW
GetStdHandle
AttachConsole
GetCommandLineW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeConsole
DeactivateActCtx
ActivateActCtx
InterlockedDecrement
GetNativeSystemInfo
GetVersionExW
CopyFileW
GetModuleFileNameW

user32

SetDlgItemTextW
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
InvalidateRect
SetCapture
WindowFromPoint
ReleaseCapture
WaitMessage
DeleteMenu
RealChildWindowFromPoint
SetTimer
KillTimer
CharNextW
CopyAcceleratorTableW
SetRect
IntersectRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
LoadMenuW
GetSystemMenu
NotifyWinEvent
GetAsyncKeyState
IsZoomed
CharUpperW
CreatePopupMenu
BringWindowToTop
LockWindowUpdate
SetParent
MonitorFromPoint
IsMenu
UnionRect
OpenClipboard
CopyImage
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
DestroyIcon
GetMenuItemInfoW
SetMenuDefaultItem
GetMenuDefaultItem
DestroyMenu
SetCursorPos
GetIconInfo
EnableScrollBar
CopyIcon
SetClassLongW
DestroyAcceleratorTable
GetDoubleClickTime
GetUpdateRect
ToUnicodeEx
MapVirtualKeyW
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
UpdateLayeredWindow
UnregisterClassW
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatW
FrameRect
CharUpperBuffW
SubtractRect
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
GetKeyNameTextW
PostThreadMessageW
IsCharLowerW
MapVirtualKeyExW
InvertRect
HideCaret
CreateMenu
DestroyCursor
GetWindowRgn
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
CreateWindowExW
GetClassNameW
RegisterClassW
CheckDlgButton
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcW
GetMenu
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
DispatchMessageW
GetKeyState
PeekMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowsHookExW
UnhookWindowsHookEx
GetCursorPos
CallNextHookEx
PtInRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetLastActivePopup
GetClassInfoW
DefWindowProcW
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
GetMonitorInfoW
SetRectEmpty
CopyRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
DrawIconEx
GetSysColorBrush
GetFocus
RedrawWindow
IsWindowVisible
MapWindowPoints
GetWindowRect
SetWindowRgn
DrawFocusRect
DrawFrameControl
DrawEdge
FillRect
GetSysColor
OffsetRect
InflateRect
IsRectEmpty
DrawStateW
RegisterWindowMessageW
GetWindow
SetWindowContextHelpId
GetParent
MapDialogRect
SetWindowPos
PostQuitMessage
PostMessageW
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetSystemMetrics
MessageBoxW
EnableWindow
LoadIconW
SendMessageW
IsIconic
GetClientRect
DrawIcon
wsprintfW
SetPropW
GetPropW
RemovePropW
SetFocus
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
AdjustWindowRectEx
GetClassLongW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
ScrollWindow
GetClassInfoExW
TrackPopupMenu
SetWindowLongW

advapi32

GetTraceEnableFlags
GetTokenInformation
RegOpenKeyW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
TraceEvent
ImpersonateLoggedOnUser
UnregisterTraceGuids
RevertToSelf
GetTraceEnableLevel
RegisterTraceGuidsW
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptImportKey
CryptSetHashParam
AdjustTokenPrivileges
DuplicateTokenEx
LookupPrivilegeValueW
SetTokenInformation
OpenProcessToken
CryptHashData
CryptDestroyHash
CryptCreateHash
GetTraceLoggerHandle

shell32

SHGetDesktopFolder
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHAppBarMessage
SHGetFileInfoW
DragFinish
DragQueryFileW
ShellExecuteW
CommandLineToArgvW
SHGetSpecialFolderLocation

ole32

CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
StgCreateDocfileOnILockBytes
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemFree
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoUninitialize
CoInitializeEx
OleRun
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleLockRunning

oleaut32

SysStringLen
VariantCopy
SafeArrayDestroy
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocString
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect

msimg32

TransparentBlt
AlphaBlend

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipFree
GdipAlloc
GdipBitmapUnlockBits
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdipDeleteGraphics
GdiplusStartup
GdipCloneImage

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

winhttp

WinHttpReadData
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetDefaultProxyConfiguration
WinHttpDetectAutoProxyConfigUrl
WinHttpQueryOption
WinHttpReceiveResponse
WinHttpSetOption
WinHttpSendRequest
WinHttpWriteData
WinHttpConnect
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpOpenRequest
WinHttpGetProxyForUrl
WinHttpCrackUrl
WinHttpAddRequestHeaders

gdi32

GetBkColor
CombineRgn
CreatePolygonRgn
CreateEllipticRgn
CreateRectRgnIndirect
CreateRectRgn
CreateHatchBrush
CreateSolidBrush
CreateDCW
CopyMetaFileW
CreateRoundRectRgn
OffsetRgn
GetRgnBox
GetObjectType
SelectPalette
CreateBitmap
DeleteDC
ExtSelectClipRgn
GetTextColor
Polyline
Ellipse
Polygon
PatBlt
ExtTextOutW
GetTextExtentPoint32W
GetTextMetricsW
CreateDIBitmap
GetStockObject
CreatePen
CreatePatternBrush
CreateFontIndirectW
GetObjectW
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
EnumFontFamiliesW
GetTextCharsetInfo
DeleteObject
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
GetTextFaceW
SelectClipRgn
GetDeviceCaps
GetLayout
SetRectRgn
GetMapMode
DPtoLP
CreateDIBSection
SetPixelV
GetWindowOrgEx
EnumFontFamiliesExW
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
LPtoDP
GetViewportOrgEx
SetPaletteEntries
ExtFloodFill
GetSystemPaletteEntries
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Rectangle
SetPixel
SetDIBColorTable
RealizePalette
StretchBlt
RoundRect
SetLayout

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comdlg32

GetFileTitleW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73eb91b4b6f5534df39ec3880b435649

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:3c:47:92:9d:ca:2c:59:e6:78:3f:31:a1:78:98:63Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:3c:47:92:9d:ca:2c:59:e6:78:3f:31:a1:78:98:63Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

e1:08:fe:31:41:ca:59:7c:b9:85:86:36:f3:38:58:80:98:a8:d2:69:b4:36:47:dd:e6:c4:04:d4:43:bf:27:5cSigner

Signature Validations

Verification

25/09/2022, 16:44 Valid: true

Chain 1

Chain 2

48:d6:72:52:8a:95:c7:9c:72:6c:4e:13:95:c9:ec:3b:cc:11:b8:f2Signer

Signature Validations

Verification

25/09/2022, 16:44 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

msimg32

comctl32

shlwapi

oledlg

gdiplus

oleacc

imm32

winmm

winhttp

gdi32

winspool.drv

comdlg32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 310KB - Virtual size: 310KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 174KB - Virtual size: 173KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:3c:47:92:9d:ca:2c:59:e6:78:3f:31:a1:78:98:63
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:3c:47:92:9d:ca:2c:59:e6:78:3f:31:a1:78:98:63
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

e1:08:fe:31:41:ca:59:7c:b9:85:86:36:f3:38:58:80:98:a8:d2:69:b4:36:47:dd:e6:c4:04:d4:43:bf:27:5c
Signer

25/09/2022, 16:44
Valid: true

48:d6:72:52:8a:95:c7:9c:72:6c:4e:13:95:c9:ec:3b:cc:11:b8:f2
Signer

25/09/2022, 16:44
Valid: true

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 310KB - Virtual size: 310KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 174KB - Virtual size: 173KB