48a76dc0fa41f242fc953fae2a1e6a72_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

48a76dc0fa41f242fc953fae2a1e6a72_mafia_JC.exe
Size

3.4MB
MD5

48a76dc0fa41f242fc953fae2a1e6a72
SHA1

0c97acb1154ac1ab8a9a596327e7ba715543e7ad
SHA256

fdbe07ba60e9ec9aefa7254359d2f93f86707a1882e6e84d22473a2ffb9256a4
SHA512

d8fba9c315eca9375749dcad1610dd668947893004dd4384c914e0764dc74e7ebe27cc42120a8967180a0d47a28881e58af28473de64452c2038e1529cb85c3f
SSDEEP

98304:VZj0S3ysPddfcBXG5WgSsh1n1aB1p2meHgv4VS8NqGIoQVez+mam3uUxy:3dF57v1nEe5VS8Mjmam3uK

Score

1^/10

Malware Config

Signatures

Files

48a76dc0fa41f242fc953fae2a1e6a72_mafia_JC.exe
.exe windows x86

7a32d6cea3f1741ae56e2619e4b6c3d8

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:ab:c9:a3:1d:b3:4f:52:d3:6b:13:43:2e:bb:54:08
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/08/2019, 00:00

Not After

26/08/2020, 12:00

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,OU=Security,O=Beijing Sogou Technology Development Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:79:06:56:54:1e:5f:e8:de:44:99:ca:86:ef:f5:32
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

25/06/2019, 00:00

Not After

24/06/2022, 23:59

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,OU=Security,O=Beijing Sogou Technology Development Co.\, Ltd.,L=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ec:39:bd:97:b7:68:81:7e:cb:5e:5c:73:33:7a:56:8b:9b:f0:92:51:79:5c:4a:24:18:4f:77:32:6a:52:e7:a9
Signer

Actual PE Digest

ec:39:bd:97:b7:68:81:7e:cb:5e:5c:73:33:7a:56:8b:9b:f0:92:51:79:5c:4a:24:18:4f:77:32:6a:52:e7:a9

Digest Algorithm

sha256

PE Digest Matches

false

45:22:35:7d:28:10:39:43:56:1b:4a:fc:f5:84:03:db:f9:07:9e:e1
Signer

Actual PE Digest

45:22:35:7d:28:10:39:43:56:1b:4a:fc:f5:84:03:db:f9:07:9e:e1

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
CreateFileW
SetConsoleCtrlHandler
FatalAppExitA
CompareStringW
GetStringTypeW
LCMapStringW
GetTimeZoneInformation
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
IsValidCodePage
GetStdHandle
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapSize
SizeofResource
HeapQueryInformation
CreateThread
ExitThread
ExitProcess
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
GetStartupInfoW
HeapSetInformation
GetCommandLineA
IsValidLocale
DecodePointer
EncodePointer
HeapReAlloc
RtlUnwind
FindResourceExW
LocalLock
LocalUnlock
SetErrorMode
SearchPathA
GetFileSizeEx
LocalFileTimeToFileTime
SetFileAttributesA
GetFileAttributesExA
FileTimeToLocalFileTime
GetNumberFormatA
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
MoveFileA
DeleteFileA
lstrcmpiA
GetStringTypeExA
GetCurrentDirectoryA
GetTempPathA
SetFilePointer
GetACP
GetAtomNameA
GetOEMCP
EnumSystemLocalesA
GetConsoleMode
RaiseException
GetConsoleCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
ReplaceFileA
GetUserDefaultLCID
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleW
Sleep
GetWindowsDirectoryA
lstrcmpA
CreateFileA
GetFileSize
CloseHandle
GetFileAttributesA
GlobalReAlloc
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProfileIntA
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
lstrcpyA
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MulDiv
SystemTimeToFileTime
FileTimeToSystemTime
FindResourceA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
MultiByteToWideChar
lstrcmpW
InterlockedDecrement
InterlockedIncrement
GetNativeSystemInfo
HeapAlloc
GetThreadLocale
lstrlenA
GetProcessHeap
HeapFree
FreeLibrary
VirtualFree
VirtualAlloc
IsBadReadPtr
VirtualProtect
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SetEnvironmentVariableA

user32

DefFrameProcA
GetDCEx
UpdateLayeredWindow
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
GetDoubleClickTime
CopyIcon
EnableScrollBar
GetMenuDefaultItem
CharUpperA
UnregisterClassA
RealChildWindowFromPoint
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
WaitMessage
ShowOwnedPopups
GetMessageA
TranslateMessage
PostQuitMessage
RegisterClipboardFormatA
WindowFromDC
InSendMessage
ValidateRect
SetCursorPos
MessageBeep
GetIconInfo
IsClipboardFormatAvailable
GetMenuItemInfoA
SetMenuDefaultItem
LoadMenuW
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
KillTimer
SetTimer
LockWindowUpdate
GetUpdateRect
UnionRect
SetRect
SetClassLongA
NotifyWinEvent
SetParent
IsMenu
GetAsyncKeyState
MonitorFromPoint
WindowFromPoint
SetCapture
IsZoomed
GetSystemMenu
DeleteMenu
PostThreadMessageA
CreateMenu
CopyAcceleratorTableA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetMenuBarInfo
DestroyIcon
SetCursor
ReleaseCapture
LoadAcceleratorsA
IsIconic
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
GetDesktopWindow
TranslateAcceleratorA
ClipCursor
GetCursorPos
InvalidateRect
DestroyAcceleratorTable
GetWindowThreadProcessId
LoadCursorA
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
SetRectEmpty
DefMDIChildProcA
GetSystemMetrics
DrawIconEx
GetSysColorBrush
SetWindowRgn
DrawFocusRect
DrawFrameControl
DrawEdge
OffsetRect
DrawStateA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
ScrollWindowEx
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetDC
RegisterWindowMessageA
LoadIconW
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
DrawMenuBar
TranslateMDISysAccel
CharUpperBuffA
SendNotifyMessageA
FrameRect
SubtractRect
GetTabbedTextExtentA
GetWindowRgn
MapVirtualKeyExA
IsCharLowerA
HideCaret
InvertRect
DrawIcon
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
DestroyCursor
GetDialogBaseUnits
GetTabbedTextExtentW
GetNextDlgGroupItem
MapDialogRect
IntersectRect
EnumChildWindows
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
SendMessageA
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
GetWindow
ClientToScreen
GetActiveWindow
IsRectEmpty
RedrawWindow
PostMessageA
EnableWindow
GetClientRect
FillRect
LoadBitmapW
InflateRect
LoadImageA

gdi32

CreateHatchBrush
CreateEllipticRgn
CreatePolygonRgn
CombineRgn
GetBkColor
GetTextColor
Polyline
Ellipse
Polygon
GetTextExtentPoint32A
CreateFontIndirectA
SetRectRgn
GetMapMode
DPtoLP
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
GetCharWidthA
CreateFontA
StretchDIBits
SetBrushOrgEx
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
SetPixel
CreateDIBSection
Rectangle
RoundRect
CreateRoundRectRgn
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
CreateSolidBrush
CreatePen
SetAbortProc
AbortDoc
EndDoc
OffsetRgn
GetRgnBox
GetCurrentObject
UnrealizeObject
CreatePalette
GetPaletteEntries
GetWindowOrgEx
GetTextAlign
GetViewportOrgEx
LPtoDP
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
EnumFontFamiliesExA
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
SetPixelV
Escape
ExtTextOutA
TextOutA
StartPage
ExtCreatePen
RectVisible
PlayMetaFile
SelectObject
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
EndPage
SetTextColor
PtVisible
StartDocA
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetLayout
GetLayout
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetObjectA
SetBkColor
SetViewportOrgEx

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
GetJobA
OpenPrinterA
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegSetValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExW
RegCloseKey
GetFileSecurityA
SetFileSecurityA
RegQueryValueA

shell32

ExtractIconA
DragQueryFileA
SHAppBarMessage
SHGetFileInfoA
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteExA
ShellExecuteA
SHAddToRecentDocs
DragFinish
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA

comctl32

ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoRevokeClassObject
CoRegisterClassObject
CoDisconnectObject
CreateGenericComposite
CreateItemMoniker
OleSaveToStream
WriteClassStm
StgCreateDocfileOnILockBytes
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegEnumVerbs
StgIsStorageFile
StgOpenStorage
CreateFileMoniker
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfile
CLSIDFromString
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoInitialize
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
StringFromGUID2
OleRun
CLSIDFromProgID
CoInitializeEx
OleQueryLinkFromData
OleQueryCreateFromData
CoRegisterMessageFilter
CoGetClassObject
CoGetMalloc
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSave
OleSetMenuDescriptor
OleLockRunning
CreateStreamOnHGlobal
OleGetClipboard
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
GetRunningObjectTable
OleIsRunning
PropVariantCopy
OleDestroyMenuDescriptor
CoCreateGuid

oleaut32

VariantClear
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
SysReAllocStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysAllocString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantInit
VariantChangeType
VariantCopy

oledlg

ord8

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 564KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a32d6cea3f1741ae56e2619e4b6c3d8

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate

Extended Key Usages

Key Usages

09:ab:c9:a3:1d:b3:4f:52:d3:6b:13:43:2e:bb:54:08Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

74:79:06:56:54:1e:5f:e8:de:44:99:ca:86:ef:f5:32Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

ec:39:bd:97:b7:68:81:7e:cb:5e:5c:73:33:7a:56:8b:9b:f0:92:51:79:5c:4a:24:18:4f:77:32:6a:52:e7:a9Signer

45:22:35:7d:28:10:39:43:56:1b:4a:fc:f5:84:03:db:f9:07:9e:e1Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 471KB - Virtual size: 470KB

.data Size: 312KB - Virtual size: 342KB

.rsrc Size: 564KB - Virtual size: 568KB

.reloc Size: 174KB - Virtual size: 174KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

09:ab:c9:a3:1d:b3:4f:52:d3:6b:13:43:2e:bb:54:08
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

74:79:06:56:54:1e:5f:e8:de:44:99:ca:86:ef:f5:32
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ec:39:bd:97:b7:68:81:7e:cb:5e:5c:73:33:7a:56:8b:9b:f0:92:51:79:5c:4a:24:18:4f:77:32:6a:52:e7:a9
Signer

45:22:35:7d:28:10:39:43:56:1b:4a:fc:f5:84:03:db:f9:07:9e:e1
Signer

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 471KB - Virtual size: 470KB

.data
Size: 312KB - Virtual size: 342KB

.rsrc
Size: 564KB - Virtual size: 568KB

.reloc
Size: 174KB - Virtual size: 174KB