i_view64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

i_view64.exe
Size

2.3MB
MD5

0713333588d28d07957665a17fe3d8ea
SHA1

041fd361e59e3b2d19e4cbc06e98892bc2566b5f
SHA256

463519d44207191c98bb71ce0dbfd2a4045c271e8d61c53854f309d0461844b5
SHA512

8837bdfd92c51db21939057a4aaa95217ced288f37116a466878ee80d7a58a56bfdd9103c4083b6a75491af83af5e5a781c4b31df5a8c92f9c9b9cc324c79e32
SSDEEP

49152:G1OGEwKR4jwDg6sFzVe0+vgx2m6ICnTYUtrB:lG0S0Mkv82bMUT

Score

1^/10

Malware Config

Signatures

Files

i_view64.exe
.exe windows x64

13059235b8177bc2eeff64b51ac1eb53

Code Sign

71:ab:43:b1:12:97:54:ea:58:09:10:2a:59:ec:89:50
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/01/2020, 00:00

Not After

27/04/2023, 23:59

Subject

CN=Irfan Skiljan,O=Irfan Skiljan,POSTALCODE=2723,L=Winzendorf-Muthmannsdorf,C=AT

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:d2:69:e4:12:73:03:69:b8:30:d9:76:d5:cd:68:b8:2a:f8:76:b4
Signer

Actual PE Digest

6a:d2:69:e4:12:73:03:69:b8:30:d9:76:d5:cd:68:b8:2a:f8:76:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

CreateStatusWindowW
ImageList_AddMasked
ImageList_LoadImageW
ImageList_Replace
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Add
ImageList_Create
ImageList_GetIconSize
CreateToolbarEx
ImageList_Destroy
ord17

kernel32

CopyFileW
LocalFileTimeToFileTime
CompareStringW
SetEvent
CreateEventW
ExitProcess
CreateThread
GetDriveTypeW
GetLogicalDrives
GetDiskFreeSpaceExW
MoveFileW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetLocaleInfoW
GetNumberFormatW
LoadLibraryA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetFileSizeEx
SetEnvironmentVariableA
SetEndOfFile
HeapSize
WriteConsoleW
SetStdHandle
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
GetTimeFormatW
GetTimeZoneInformation
DeleteCriticalSection
GetFileType
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
LeaveCriticalSection
EnterCriticalSection
GetStdHandle
FlushFileBuffers
GetModuleHandleExW
GetProcessHeap
GetCPInfo
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetACP
CreateDirectoryW
ExitThread
DecodePointer
EncodePointer
HeapReAlloc
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
GetFileAttributesExW
SetEnvironmentVariableW
GetCurrentDirectoryW
DeleteFileW
HeapAlloc
HeapFree
GetStringTypeW
IsProcessorFeaturePresent
IsDebuggerPresent
LoadLibraryExA
RaiseException
FindFirstFileW
FindNextFileW
GetSystemDirectoryW
FreeLibrary
FreeResource
GetProcAddress
LoadResource
LockResource
SizeofResource
GlobalUnlock
GetProcessAffinityMask
ResumeThread
GetCurrentProcess
SetFileTime
GetFileTime
GetTickCount
MoveFileExW
FindResourceExW
GetProfileStringW
SetDllDirectoryW
CreateProcessW
GetPrivateProfileIntA
WritePrivateProfileStringA
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
GetModuleFileNameW
GetFileAttributesW
GetEnvironmentVariableW
GetLastError
GetFileSize
EnumResourceNamesW
LoadLibraryExW
CloseHandle
WriteFile
SetFilePointer
ReadFile
CreateFileW
SystemTimeToFileTime
GetLocalTime
FileTimeToLocalFileTime
GlobalFree
CompareFileTime
GlobalSize
GlobalHandle
GlobalAlloc
GetCurrentThreadId
GetDateFormatW
VerifyVersionInfoW
GetTempPathW
FindFirstFileExW
VerSetConditionMask
GetWindowsDirectoryW
FindClose
GetShortPathNameW
GetFullPathNameW
GetCommandLineW
GetPrivateProfileIntW
MulDiv
Sleep
SetFileAttributesW
SetCurrentDirectoryW
GlobalLock
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileStringW
GetPrivateProfileStringW
FindResourceW
LoadLibraryW

user32

GetMonitorInfoW
EnumDisplayMonitors
GetScrollRange
ShowScrollBar
GetMenuStringW
CopyAcceleratorTableW
CreateAcceleratorTableW
MapVirtualKeyExW
GetKeyNameTextW
CharNextW
CharLowerBuffW
IsMenu
GetKeyboardLayout
WinHelpW
GetDesktopWindow
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
GetMenuItemRect
DeleteMenu
AppendMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
EnableMenuItem
CheckMenuItem
DestroyMenu
DrawMenuBar
GetMenuState
HiliteMenuItem
GetMenu
LoadMenuW
TranslateAcceleratorW
DestroyAcceleratorTable
MonitorFromWindow
IsIconic
GetWindowPlacement
CloseWindow
RegisterClassW
CallWindowProcW
PostQuitMessage
SendNotifyMessageW
UnregisterHotKey
RegisterHotKey
GetMessageW
RegisterWindowMessageW
IsClipboardFormatAvailable
GetClipboardData
DrawIconEx
GetWindowThreadProcessId
IsRectEmpty
GetCursor
AttachThreadInput
SystemParametersInfoW
ShowCursor
EndPaint
BeginPaint
BringWindowToTop
DefWindowProcW
GetMessagePos
GetIconInfo
DestroyIcon
DrawTextA
WindowFromPoint
GetCursorPos
SetCapture
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
MonitorFromPoint
SetScrollInfo
InsertMenuW
DrawFrameControl
MessageBoxA
ScrollWindow
SetCursorPos
ReleaseCapture
GetCapture
GetAsyncKeyState
FindWindowExW
SetScrollRange
LoadImageW
GetSysColor
GetMenuItemInfoW
ModifyMenuW
LoadAcceleratorsW
IsChild
GetScrollInfo
GetClassNameW
EnumChildWindows
CopyRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
ClientToScreen
MessageBoxW
GetClientRect
GetScrollPos
SetScrollPos
DrawTextW
GetSystemMetrics
IsWindowEnabled
GetKeyState
GetFocus
CheckRadioButton
IsZoomed
SetWindowPos
ShowWindow
DrawEdge
wsprintfW
FindWindowW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetParent
ScreenToClient
GetWindowTextW
SetWindowTextW
InvalidateRect
SetForegroundWindow
GetForegroundWindow
UpdateWindow
EnableWindow
GetActiveWindow
SendDlgItemMessageW
IsDlgButtonChecked
GetDlgItemInt
SetDlgItemInt
CreateDialogParamW
MoveWindow
DestroyWindow
IsWindow
CreateWindowExW
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
LoadCursorW
SetCursor
IsWindowVisible
LoadIconW
MessageBeep
GetWindowRect
SetWindowTextA
ReleaseDC
GetDC
SetActiveWindow
DrawIcon
KillTimer
SetTimer
SetFocus
GetDlgItemTextW
GetDlgItemTextA
SetDlgItemTextW
SetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxParamW
SendMessageW
LoadStringW
TrackPopupMenu
SetMenu

gdi32

PatBlt
CreateSolidBrush
DeleteObject
GetPixel
SelectObject
SetBkColor
SetBkMode
SetTextColor
GetBkColor
GetTextColor
CreateCompatibleDC
CreateFontIndirectW
CreateICW
GetDeviceCaps
CreateBitmap
GetStockObject
GetTextMetricsW
GetObjectW
CreatePalette
DeleteMetaFile
GetMetaFileBitsEx
GetMetaFileW
Rectangle
RealizePalette
SelectPalette
StretchDIBits
SetStretchBltMode
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
PlayEnhMetaFile
SetWinMetaFileBits
BitBlt
CreateBrushIndirect
CreateCompatibleBitmap
CreateDCW
CreatePen
DeleteDC
Ellipse
GetDIBits
CreateDIBitmap
GetSystemPaletteEntries
ResetDCW
SetDIBits
StretchBlt
StartDocW
EndDoc
StartPage
EndPage
LineTo
MoveToEx
GetTextExtentPoint32W
TextOutA
GetNearestPaletteIndex

advapi32

RegOpenKeyExA
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueW
IsTextUnicode
RegQueryValueExA
RegCloseKey

shell32

SHGetMalloc
SHGetDataFromIDListW
SHGetDesktopFolder
SHGetKnownFolderPath
ShellExecuteExW
SHGetFileInfoW
SHChangeNotify
SHGetSpecialFolderLocation
DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconW
SHCreateItemFromParsingName
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13059235b8177bc2eeff64b51ac1eb53

Code Sign

71:ab:43:b1:12:97:54:ea:58:09:10:2a:59:ec:89:50Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

6a:d2:69:e4:12:73:03:69:b8:30:d9:76:d5:cd:68:b8:2a:f8:76:b4Signer

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 472KB - Virtual size: 471KB

.data Size: 12KB - Virtual size: 88KB

.pdata Size: 58KB - Virtual size: 58KB

.rsrc Size: 220KB - Virtual size: 220KB

.reloc Size: 3KB - Virtual size: 2KB

71:ab:43:b1:12:97:54:ea:58:09:10:2a:59:ec:89:50
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

6a:d2:69:e4:12:73:03:69:b8:30:d9:76:d5:cd:68:b8:2a:f8:76:b4
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 472KB - Virtual size: 471KB

.data
Size: 12KB - Virtual size: 88KB

.pdata
Size: 58KB - Virtual size: 58KB

.rsrc
Size: 220KB - Virtual size: 220KB

.reloc
Size: 3KB - Virtual size: 2KB