5067687cf7a71071424f74a5dd4bbbe7e60674282a93ca99446967fbcdf7148a

Sharing

Copy URL Twitter E-mail

General

Target

5067687cf7a71071424f74a5dd4bbbe7e60674282a93ca99446967fbcdf7148a
Size

417KB
MD5

cacf419fe5c811cef1535294e914a1c5
SHA1

262bddcaffa158f67bb55d72a5dc857c016823a9
SHA256

5067687cf7a71071424f74a5dd4bbbe7e60674282a93ca99446967fbcdf7148a
SHA512

0b78ed121b72e544cfca1dbedae89bd09caf869da1e577557e64f2e7603b5ddec22692d742715c608ac1de8af29e4c672bc204fd78cddcb7902cc7b418c4a068
SSDEEP

6144:6yKvbtjiBgaAfUy94Fr/rI2Kry7ksQ73tz5mDDPHR2AI:lmttlM/rOXbN0DDP8AI

Score

1^/10

Malware Config

Signatures

Files

5067687cf7a71071424f74a5dd4bbbe7e60674282a93ca99446967fbcdf7148a
.exe windows x86

c1d8dc34360d5ef7aa5bc95ab2a0e4a8

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/03/2023, 18:43

Not After

14/03/2024, 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:a4:e3:38:3e:cf:5c:cf:d3:29:c1:5d:70:8b:69:3f:77:b1:58:1e:e2:df:48:fe:b9:99:cf:e6:ab:80:ab:05
Signer

Actual PE Digest

35:a4:e3:38:3e:cf:5c:cf:d3:29:c1:5d:70:8b:69:3f:77:b1:58:1e:e2:df:48:fe:b9:99:cf:e6:ab:80:ab:05

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateThread
lstrlenW
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
LockResource
LoadResource
Sleep
FindResourceW
GetModuleHandleW
GetLastError
CreateMutexA
GetModuleHandleA
GetConsoleWindow
SizeofResource
GetACP
GetCommandLineA
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

user32

ShowWindow

advapi32

RegDeleteKeyA

ole32

OleInitialize

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 341KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1d8dc34360d5ef7aa5bc95ab2a0e4a8

Code Sign

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4dCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

35:a4:e3:38:3e:cf:5c:cf:d3:29:c1:5d:70:8b:69:3f:77:b1:58:1e:e2:df:48:fe:b9:99:cf:e6:ab:80:ab:05Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 341KB - Virtual size: 341KB

33:00:00:03:4d:4e:91:a6:1a:28:b0:78:8f:00:00:00:00:03:4d
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

35:a4:e3:38:3e:cf:5c:cf:d3:29:c1:5d:70:8b:69:3f:77:b1:58:1e:e2:df:48:fe:b9:99:cf:e6:ab:80:ab:05
Signer

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 341KB - Virtual size: 341KB