61f9be9d26034c213110b3f4d1ca28aca2937e1531a168660b55c141a582714d

Sharing

Copy URL Twitter E-mail

General

Target

61f9be9d26034c213110b3f4d1ca28aca2937e1531a168660b55c141a582714d
Size

35.5MB
MD5

f76afd3ab96e3540788e1bdf78216acf
SHA1

e1a4666f7ba9436a7b3054721f66c2cca7abb039
SHA256

61f9be9d26034c213110b3f4d1ca28aca2937e1531a168660b55c141a582714d
SHA512

ec16ff88a78d49d4be7f717692e8677fb4da87039d104277aaeac176a0ff4230b304cb72ee7035a2cf4b77bbf03a37b1678e63de29211e97da2d44692981fec6
SSDEEP

49152:WcmnqUb4Ng82BGFEawZHsuK6TiwvuUflnA:Wzqkgd/EamsCvxA

Score

1^/10

Malware Config

Signatures

Files

61f9be9d26034c213110b3f4d1ca28aca2937e1531a168660b55c141a582714d
.exe windows x86

9e55a946dab1c6794f47311417c2ae11

Code Sign

10:f1:6d:27:fb:a3:4d:82:4d:e5:aa:91:56:7d:3d:4e
Certificate

Issuer

CN=Spotify Ltd.

Not Before

14/06/2023, 18:23

Not After

14/06/2024, 18:43

Subject

CN=Spotify Ltd.

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:f1:6d:27:fb:a3:4d:82:4d:e5:aa:91:56:7d:3d:4e
Certificate

Issuer

CN=Spotify Ltd.

Not Before

14/06/2023, 18:23

Not After

14/06/2024, 18:43

Subject

CN=Spotify Ltd.

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d2:9b:49:c8:f8:a2:ec:8c:e4:ce:5a:f1:b9:2d:19:91:67:8d:c2:86:51:99:a3:b8:c7:87:bd:05:55:c2:1e:4f
Signer

Actual PE Digest

d2:9b:49:c8:f8:a2:ec:8c:e4:ce:5a:f1:b9:2d:19:91:67:8d:c2:86:51:99:a3:b8:c7:87:bd:05:55:c2:1e:4f

Digest Algorithm

sha256

PE Digest Matches

true

4a:4c:9c:e5:d2:17:22:f4:52:06:5b:47:72:b3:7a:61:c6:78:14:f1
Signer

Actual PE Digest

4a:4c:9c:e5:d2:17:22:f4:52:06:5b:47:72:b3:7a:61:c6:78:14:f1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree

user32

MessageBoxW

pdh

PdhCloseQuery

iphlpapi

FreeMibTable

netapi32

NetUserEnum

secur32

DeleteSecurityContext

shell32

ShellExecuteExW

advapi32

AllocateAndInitializeSid

ole32

CoUninitialize

ws2_32

WSASocketW

ntdll

RtlNtStatusToDosError

bcrypt

BCryptGenRandom

crypt32

CertEnumCertificatesInStore

powrprof

CallNtPowerInformation

oleaut32

SysAllocString

psapi

GetPerformanceInfo

Sections

gDjGQqdD
Size: - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OW0xga5x
Size: - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Lpc84zj9
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BiGQX0vh
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9e55a946dab1c6794f47311417c2ae11

Code Sign

10:f1:6d:27:fb:a3:4d:82:4d:e5:aa:91:56:7d:3d:4eCertificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

10:f1:6d:27:fb:a3:4d:82:4d:e5:aa:91:56:7d:3d:4eCertificate

Extended Key Usages

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

d2:9b:49:c8:f8:a2:ec:8c:e4:ce:5a:f1:b9:2d:19:91:67:8d:c2:86:51:99:a3:b8:c7:87:bd:05:55:c2:1e:4fSigner

4a:4c:9c:e5:d2:17:22:f4:52:06:5b:47:72:b3:7a:61:c6:78:14:f1Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

pdh

iphlpapi

netapi32

secur32

shell32

advapi32

ole32

ws2_32

ntdll

bcrypt

crypt32

powrprof

oleaut32

psapi

Sections

gDjGQqdD Size: - Virtual size: 844KB

OW0xga5x Size: - Virtual size: 420KB

Lpc84zj9 Size: 16KB - Virtual size: 20KB

BiGQX0vh Size: 1.7MB - Virtual size: 1.7MB

10:f1:6d:27:fb:a3:4d:82:4d:e5:aa:91:56:7d:3d:4e
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

10:f1:6d:27:fb:a3:4d:82:4d:e5:aa:91:56:7d:3d:4e
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

d2:9b:49:c8:f8:a2:ec:8c:e4:ce:5a:f1:b9:2d:19:91:67:8d:c2:86:51:99:a3:b8:c7:87:bd:05:55:c2:1e:4f
Signer

4a:4c:9c:e5:d2:17:22:f4:52:06:5b:47:72:b3:7a:61:c6:78:14:f1
Signer

gDjGQqdD
Size: - Virtual size: 844KB

OW0xga5x
Size: - Virtual size: 420KB

Lpc84zj9
Size: 16KB - Virtual size: 20KB

BiGQX0vh
Size: 1.7MB - Virtual size: 1.7MB