92351a576724d57d36306ce8d410ec166f02c4cc740619a0e3bdbb7b5d115d8d

Sharing

Copy URL

Twitter E-mail

General

Target

92351a576724d57d36306ce8d410ec166f02c4cc740619a0e3bdbb7b5d115d8d
Size

19KB
MD5

5c6a73a131bc013050eb9a2f770855e1
SHA1

7c3287b5884b04b77786e2655ac7727284916377
SHA256

92351a576724d57d36306ce8d410ec166f02c4cc740619a0e3bdbb7b5d115d8d
SHA512

83c68b9d5614060b4ae37e78dc0dacb8f0f254f5265cefa9e52c88a1d4ff787f9b52a5f9928ac45e0b98d0cbd02ad473284d77623f134b6e9e26f3c55c040f6a
SSDEEP

384:Gj3QcAMJNljTNb7ZmXjDBRJS7Y1lxwM6:g37AMn37AXj1Px6

Score

1^/10

Malware Config

Signatures

Files

92351a576724d57d36306ce8d410ec166f02c4cc740619a0e3bdbb7b5d115d8d
.exe windows x86

537153ce7faf1809a635aaa37f84d448

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03-07-2018 20:45

Not After

26-07-2019 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

66:b3:37:9e:18:0c:ae:f6:54:e3:3e:f1:0b:fe:e9:2a:43:de:53:7d:1f:66:5a:9f:ec:34:66:83:6c:44:a3:7a
Signer

Actual PE Digest

66:b3:37:9e:18:0c:ae:f6:54:e3:3e:f1:0b:fe:e9:2a:43:de:53:7d:1f:66:5a:9f:ec:34:66:83:6c:44:a3:7a

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
SetProcessMitigationPolicy
Sleep
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW

vcruntime140

memset
__current_exception_context
__current_exception
_except_handler4_common

api-ms-win-crt-time-l1-1-0

clock

api-ms-win-crt-runtime-l1-1-0

__p___argv
_initialize_onexit_table
_register_onexit_function
__p___argc
_register_thread_local_exe_atexit_callback
_controlfp_s
terminate
_exit
exit
_initialize_narrow_environment
_initterm_e
_c_exit
_crt_atexit
_configure_narrow_argv
_cexit
_set_app_type
_seh_filter_exe
_initterm
_get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

537153ce7faf1809a635aaa37f84d448

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

66:b3:37:9e:18:0c:ae:f6:54:e3:3e:f1:0b:fe:e9:2a:43:de:53:7d:1f:66:5a:9f:ec:34:66:83:6c:44:a3:7aSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 364B

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

66:b3:37:9e:18:0c:ae:f6:54:e3:3e:f1:0b:fe:e9:2a:43:de:53:7d:1f:66:5a:9f:ec:34:66:83:6c:44:a3:7a
Signer

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 364B