4170ba635a24ada6c8de5430a1ad9f2f1414db4ae44a548de1e8099d1228dde1

Resubmissions

05-07-2023 12:34

230705-prx51adg7t 10

05-07-2023 12:31

230705-pp777acc35 10

Sharing

Copy URL

Twitter E-mail

General

Target

4170ba635a24ada6c8de5430a1ad9f2f1414db4ae44a548de1e8099d1228dde1
Size

174KB
MD5

5379e5de81f01fd0038ac76d2fb989c8
SHA1

d7c11ede07128acfbb4f3e1485aa6873d90942fe
SHA256

4170ba635a24ada6c8de5430a1ad9f2f1414db4ae44a548de1e8099d1228dde1
SHA512

51dc9d4682d64e54fe7507c971b4b125a41f8eab30b55360191e8fca97ffc0cdec3e7fc34b77e0916b622e5fc45c2991528b41935e8b11d392f80e0dca56d324
SSDEEP

3072:z7Yk9j0btDL01h1l/tMAyrbP+yPJSDJlL4j7KHN:HL2du/VyP4DJl0jGHN

Score

1^/10

Malware Config

Signatures

Files

4170ba635a24ada6c8de5430a1ad9f2f1414db4ae44a548de1e8099d1228dde1
.dll windows x64

75fefe7ed58121670fba93690b3deb61

Code Sign

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

07-05-2021 15:43

Not After

07-11-2030 16:13

Subject

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Certificate

Issuer

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

Not Before

07-05-2021 19:19

Not After

29-12-2040 23:59

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:0e:c5:8d:18:0d:7c:4f:95:06:e5:45:d0:85:5e:75
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

Not Before

03-05-2022 17:27

Not After

20-05-2024 17:27

Subject

SERIALNUMBER=11429614000100,CN=Tecfinance Informatica E Projetos De Sistemas Ltda,OU=TI,O=Tecfinance Informatica E Projetos De Sistemas Ltda,L=Sao Paulo,ST=Sao Paulo,C=BR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024252

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c6:53:2c:66:bd:5b:c1:8f:db:a6:df:9c:f7:5e:2e:5e:11:66:b8:46
Signer

Actual PE Digest

c6:53:2c:66:bd:5b:c1:8f:db:a6:df:9c:f7:5e:2e:5e:11:66:b8:46

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
realloc
signal
strlen
strncmp
vfprintf

wininet

InternetCheckConnectionA

Exports

Exports

f

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 61B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

75fefe7ed58121670fba93690b3deb61

Code Sign

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7fCertificate

Extended Key Usages

Key Usages

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2bCertificate

Extended Key Usages

Key Usages

2b:0e:c5:8d:18:0d:7c:4f:95:06:e5:45:d0:85:5e:75Certificate

Extended Key Usages

Key Usages

c6:53:2c:66:bd:5b:c1:8f:db:a6:df:9c:f7:5e:2e:5e:11:66:b8:46Signer

Headers

File Characteristics

Imports

kernel32

msvcrt

wininet

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.data Size: 109KB - Virtual size: 109KB

.rdata Size: 1024B - Virtual size: 672B

.pdata Size: 1024B - Virtual size: 552B

.xdata Size: 512B - Virtual size: 456B

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 61B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 100B

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Certificate

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Certificate

2b:0e:c5:8d:18:0d:7c:4f:95:06:e5:45:d0:85:5e:75
Certificate

c6:53:2c:66:bd:5b:c1:8f:db:a6:df:9c:f7:5e:2e:5e:11:66:b8:46
Signer

.text
Size: 52KB - Virtual size: 51KB

.data
Size: 109KB - Virtual size: 109KB

.rdata
Size: 1024B - Virtual size: 672B

.pdata
Size: 1024B - Virtual size: 552B

.xdata
Size: 512B - Virtual size: 456B

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 61B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 100B