General

Malware Config

Signatures

Files

• af42fbce8dce22d3d6846830142586a1961012e8ed9a4cefb0821a7676445060.zip

  .zip

  Password: infected

• af42fbce8dce22d3d6846830142586a1961012e8ed9a4cefb0821a7676445060

  .exe windows x86

  Password: infected

  628f06a2d8a3d9ca9ff347d3915bfe8b

  
  

  Code Sign

  f2:30:f9:85:06:3a:53:7c:7f:2d:c8:c9:5b:1f:70:c9

  Certificate

  Issuer

  CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  18-12-2019 00:00

  Not After

  17-12-2020 23:59

  Subject

  CN=MONT-DMD d.o.o..,O=MONT-DMD d.o.o..,POSTALCODE=2000,STREET=Zagrebska cesta 20,L=Maribor,ST=Maribor,C=SI

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-11-2018 00:00

  Not After

  31-12-2030 23:59

  Subject

  CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetStartupInfoA

  GetCommandLineA

  ExitProcess

  HeapReAlloc

  TerminateProcess

  HeapSize

  HeapDestroy

  HeapCreate

  VirtualFree

  IsBadWritePtr

  SetUnhandledExceptionFilter

  GetStdHandle

  UnhandledExceptionFilter

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  SetHandleCount

  VirtualQuery

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  LCMapStringA

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  IsBadReadPtr

  IsBadCodePtr

  SetStdHandle

  GetSystemInfo

  VirtualAlloc

  VirtualProtect

  HeapFree

  HeapAlloc

  RtlUnwind

  SetErrorMode

  GetCurrentProcess

  FlushFileBuffers

  SetFilePointer

  WriteFile

  ReadFile

  WritePrivateProfileStringA

  GetOEMCP

  GetCPInfo

  InterlockedIncrement

  TlsFree

  LocalReAlloc

  TlsSetValue

  TlsAlloc

  TlsGetValue

  EnterCriticalSection

  GlobalHandle

  GlobalReAlloc

  LeaveCriticalSection

  LocalAlloc

  GlobalFlags

  DeleteCriticalSection

  InitializeCriticalSection

  RaiseException

  CloseHandle

  GetCurrentThread

  lstrcmpA

  ConvertDefaultLocale

  EnumResourceLanguagesA

  lstrcpyA

  InterlockedDecrement

  SetLastError

  FormatMessageA

  LocalFree

  GlobalGetAtomNameA

  GlobalAddAtomA

  GlobalFindAtomA

  GlobalDeleteAtom

  lstrcatA

  lstrcmpW

  GetModuleHandleA

  GlobalLock

  GlobalUnlock

  FreeResource

  GetWindowsDirectoryA

  LoadLibraryA

  FreeLibrary

  WinExec

  LoadLibraryW

  GetProcAddress

  lstrcpynA

  GlobalAlloc

  GlobalFree

  GetCurrentThreadId

  GetModuleFileNameA

  lstrlenA

  lstrcmpiA

  GetVersion

  GetLastError

  MultiByteToWideChar

  MulDiv

  WideCharToMultiByte

  FindResourceA

  LoadResource

  LockResource

  SizeofResource

  GetVersionExA

  GetThreadLocale

  GetLocaleInfoA

  GetACP

  GetFileType

  InterlockedExchange

  user32

  GetMessageA

  TranslateMessage

  ValidateRect

  PostQuitMessage

  EndPaint

  BeginPaint

  GrayStringA

  DrawTextExA

  DrawTextA

  TabbedTextOutA

  GetCursorPos

  WindowFromPoint

  wsprintfA

  SetMenuItemBitmaps

  ModifyMenuA

  GetMenuState

  EnableMenuItem

  CheckMenuItem

  GetMenuCheckMarkDimensions

  ShowWindow

  MoveWindow

  SetWindowTextA

  IsDialogMessageA

  WinHelpA

  GetCapture

  GetClassLongA

  GetClassInfoExA

  GetClassNameA

  SetPropA

  GetPropA

  RemovePropA

  SendDlgItemMessageA

  SetFocus

  GetWindowTextLengthA

  GetWindowTextA

  GetForegroundWindow

  GetLastActivePopup

  DispatchMessageA

  GetTopWindow

  GetMessageTime

  PeekMessageA

  MapWindowPoints

  MessageBoxA

  GetKeyState

  SetForegroundWindow

  IsWindowVisible

  GetMenu

  GetSubMenu

  GetMenuItemID

  GetMenuItemCount

  AdjustWindowRectEx

  GetClassInfoA

  UnregisterClassA

  GetDlgCtrlID

  CallWindowProcA

  GetWindowPlacement

  GetWindow

  GetDesktopWindow

  GetActiveWindow

  SetActiveWindow

  CreateDialogIndirectParamA

  GetWindowLongA

  GetDlgItem

  IsWindowEnabled

  GetNextDlgTabItem

  EndDialog

  RegisterWindowMessageA

  CopyIcon

  DestroyCursor

  MessageBeep

  ScreenToClient

  SetCursor

  LoadIconA

  IsIconic

  GetSystemMenu

  AppendMenuA

  SetCursorPos

  LoadStringW

  DrawIcon

  GetSystemMetrics

  SystemParametersInfoA

  GetMessagePos

  ReleaseCapture

  MapVirtualKeyA

  SetCapture

  SetRect

  LoadImageA

  GetSysColor

  DestroyIcon

  InvalidateRect

  GetWindowDC

  ClientToScreen

  DrawFocusRect

  DrawEdge

  FrameRect

  FillRect

  OffsetRect

  InflateRect

  PtInRect

  CopyRect

  DrawStateA

  GetDC

  GetIconInfo

  CreateIconIndirect

  ReleaseDC

  LoadCursorA

  RegisterClassA

  LoadStringA

  UnhookWindowsHookEx

  UpdateWindow

  SetWindowPos

  GetSysColorBrush

  DestroyMenu

  CreateWindowExA

  SetWindowsHookExA

  DefWindowProcA

  GetWindowRect

  CallNextHookEx

  PostMessageA

  DestroyWindow

  SetWindowLongA

  IsWindow

  GetParent

  GetFocus

  LoadBitmapA

  SendMessageA

  KillTimer

  SetTimer

  RedrawWindow

  GetClientRect

  EnableWindow

  gdi32

  ScaleWindowExtEx

  SetWindowExtEx

  SetMapMode

  SetBkMode

  RestoreDC

  SaveDC

  ExtTextOutA

  ScaleViewportExtEx

  SetViewportExtEx

  OffsetViewportOrgEx

  SetViewportOrgEx

  SelectObject

  Escape

  TextOutA

  RectVisible

  PtVisible

  MoveToEx

  DeleteObject

  CreateBitmap

  SetBkColor

  SetTextColor

  GetClipBox

  GetTextExtentPoint32A

  Rectangle

  CreateFontIndirectA

  CreatePen

  CreateHatchBrush

  GetStockObject

  BitBlt

  CreateCompatibleDC

  GetObjectA

  CreateSolidBrush

  GetDIBits

  CreateCompatibleBitmap

  SetDIBits

  CreateDCA

  GetDeviceCaps

  DeleteDC

  LineTo

  msimg32

  GradientFill

  comdlg32

  ChooseColorA

  ChooseFontA

  winspool.drv

  ClosePrinter

  DocumentPropertiesA

  OpenPrinterA

  advapi32

  RegQueryValueExA

  RegOpenKeyExA

  RegQueryValueA

  RegOpenKeyA

  RegDeleteKeyA

  RegEnumKeyA

  RegCreateKeyExA

  RegSetValueExA

  RegCloseKey

  shell32

  ShellExecuteA

  ShellExecuteW

  comctl32

  _TrackMouseEvent

  ord17

  shlwapi

  PathFindFileNameA

  PathFindExtensionA

  oleaut32

  VariantClear

  VariantChangeType

  VariantInit

  winmm

  PlaySoundA

  Sections

  .text

  Size: 140KB - Virtual size: 136KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 40KB - Virtual size: 39KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 276KB - Virtual size: 272KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ