lmm[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

lmm.exe
Size

5.1MB
MD5

db4e728d2e4714377d3675e9035d6432
SHA1

90f460319ecccc7787f09245b339a78a0b9867b0
SHA256

1fc4464d484a34121ed5c5ba4a12b2c456db0be9d50949b0d5abdfd7156fb6b3
SHA512

b44229acbf9d9714f8757513a9a2ac7cb06f46f7778a87562ed3d9b2e770707036c3399f1eb1bfd868bbc3a508573d0c9ede8a8de5ee2f2f780a4ad6ec0ed276
SSDEEP

98304:gqNAQ6FGtvX6KN5hBAud6kDjGpUefle0GzDyKuUM81d/mB71S4zQ:gqN5u06KN5hZnse0GzMUMOxmhW

Score

1^/10

Malware Config

Signatures

Files

lmm.exe
.exe windows:6 windows x86

8e74766fe9c3784e2bf12dc7a7704ea1

Code Sign

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:7b:9b:c1:a2:3b:f2:e9:9d:ae:af:4b:20:35:ac:26
Certificate

Issuer

CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

13/08/2021, 00:00

Not After

12/08/2024, 00:00

Subject

SERIALNUMBER=35437570,CN=Martin Malik - REALiX,O=Martin Malik - REALiX,POSTALCODE=90101,STREET=Boženy Nemcovej 2291/28,L=Malacky,ST=Bratislavsky kraj,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13114272617469736c6176736b79206b72616a,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:ad:bb:de:a8:a7:75:56:7f:45:94:4d:5b:63:2a:4c:b0:e4:97:9c:5a:e5:af:f8:47:14:6b:c4:9c:bb:ab:d0
Signer

Actual PE Digest

cb:ad:bb:de:a8:a7:75:56:7f:45:94:4d:5b:63:2a:4c:b0:e4:97:9c:5a:e5:af:f8:47:14:6b:c4:9c:bb:ab:d0

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringW
UuidCreate
UuidFromStringW
RpcStringFreeW

kernel32

GetSystemTimeAsFileTime
InitializeSListHead
WriteConsoleW
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
GetDriveTypeW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetACP
QueryPerformanceCounter
GetModuleFileNameA
ExitProcess
VirtualQuery
VirtualAlloc
GetSystemInfo
GetFullPathNameA
GetFileType
SetStdHandle
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineA
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
lstrcpynW
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetStringTypeW
LCMapStringW
OutputDebugStringW
GetStartupInfoW
IsDebuggerPresent
GetStdHandle
IsProcessorFeaturePresent
GetCommandLineW
GetLastError
SetLastError
GetModuleHandleW
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
ReadFile
SetFilePointer
WriteFile
GetTempPathW
CloseHandle
QueryPerformanceFrequency
WaitForSingleObject
CreateEventW
Sleep
CreateProcessW
GetVersionExW
FindResourceExW
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
lstrcmpW
lstrcpyW
lstrcatW
lstrlenW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
CopyFileW
CompareStringW
CompareStringA
DecodePointer
RaiseException
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
GetFileAttributesW
LoadLibraryW
EnumResourceNamesW
GetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathW
CreateDirectoryW
FileTimeToLocalFileTime
GetFullPathNameW
GetTempFileNameW
RemoveDirectoryW
SetFileAttributesW
GetSystemDirectoryW
GetWindowsDirectoryW
GetProcAddress
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
LocalFree
FormatMessageW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetNumberFormatW
InitializeCriticalSectionAndSpinCount
GetFileSize
SetEndOfFile
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GlobalFree
MulDiv
SetErrorMode
GetCurrentThread
GetCurrentThreadId
GlobalDeleteAtom
lstrcmpA
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
FlushFileBuffers
GetShortPathNameW
GetVolumeInformationW
LockFile
UnlockFile
OutputDebugStringA
DuplicateHandle
GetCurrentProcess
GetModuleHandleA
lstrcmpiW
LoadLibraryA
MoveFileW
GetStringTypeExW
GetThreadLocale
GetFileAttributesExW
GetFileSizeEx
GetFileTime
LocalFileTimeToFileTime
SetFileTime
SystemTimeToFileTime
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetCurrentProcessId
GlobalGetAtomNameW
GetAtomNameW
SetEvent
SetThreadPriority
SuspendThread
ResumeThread
EncodePointer
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalAddAtomW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
FreeResource
GlobalFindAtomW
VirtualProtect
VerSetConditionMask
VerifyVersionInfoW
GetTickCount
GetProfileIntW
GetDiskFreeSpaceW
ReplaceFileW
GetUserDefaultLCID
LocalLock
LocalUnlock
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess

user32

TrackMouseEvent
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetMenuItemInfoW
DestroyMenu
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetTopWindow
GetClassLongW
EqualRect
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
IntersectRect
InflateRect
CopyRect
IsDialogMessageW
SetWindowLongW
GetDialogBaseUnits
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
IsWindow
GetScrollPos
SetScrollPos
SetFocus
DestroyIcon
InvalidateRect
UpdateWindow
DrawStateW
SetTimer
RealChildWindowFromPoint
GetWindow
GetClassNameW
PtInRect
GetWindowRect
SetWindowTextW
GetDlgCtrlID
DeleteMenu
SetCursor
ShowOwnedPopups
SystemParametersInfoW
CopyImage
GetClientRect
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
DrawEdge
DrawFrameControl
IsZoomed
MsgWaitForMultipleObjects
LoadStringW
wsprintfW
GetDesktopWindow
UnregisterClassW
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetWindowRgn
ScrollWindowEx
SetParent
LoadImageW
SendMessageW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
PostMessageW
PostQuitMessage
UnhookWindowsHookEx
CharUpperW
GetSystemMetrics
ReuseDDElParam
EnableWindow
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetParent
GetWindowThreadProcessId
GetLastActivePopup
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
LoadCursorW
GetWindowTextW
GetWindowTextLengthW
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
FillRect
GetMessageW
TranslateMessage
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
GetMenuBarInfo
UnpackDDElParam
GetTabbedTextExtentW
GetDCEx
DestroyCursor
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageW
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
SetRect
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetComboBoxInfo
KillTimer

gdi32

GetTextFaceW
GetTextAlign
GetStretchBltMode
GetPolyFillMode
GetNearestColor
GetBkMode
GetROP2
SetAbortProc
AbortDoc
EndPage
StartPage
EndDoc
DeleteMetaFile
CreateMetaFileW
CloseMetaFile
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
StretchDIBits
GetCharWidthW
CreateFontW
GetCurrentObject
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetDIBits
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
GetTextExtentPoint32W
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CreateFontIndirectW
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolylineTo
PolyBezierTo
ExtTextOutW
TextOutW
MoveToEx
GetObjectW
ExtCreatePen
SetArcDirection
SelectClipPath
PolyDraw
ArcTo
StartDocW
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
SetTextJustification
SetTextAlign
SetTextColor
SetTextCharacterExtra
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
SetMapperFlags
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateBitmap
BitBlt
GetDeviceCaps
CreateDCW
CopyMetaFileW

msimg32

AlphaBlend
TransparentBlt

winspool.drv

GetJobW
OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyExW
RegQueryValueW
RegSetValueW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
IsTextUnicode

shell32

DragFinish
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHAddToRecentDocs
ExtractIconW
ShellExecuteExW
SHAppBarMessage
SHFileOperationW
DragQueryFileW
SHGetDesktopFolder
ShellExecuteW

shlwapi

PathFindFileNameW
UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathRemoveExtensionW
PathRemoveFileSpecW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetCurrentThemeName
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize

ole32

StgCreateDocfile
StgOpenStorage
StgOpenStorageOnILockBytes
StgIsStorageFile
CreateOleAdviseHolder
CreateDataAdviseHolder
OleRun
GetHGlobalFromILockBytes
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
WriteClassStm
CreateItemMoniker
OleTranslateAccelerator
CreateGenericComposite
StgCreateDocfileOnILockBytes
OleRegEnumVerbs
OleRegGetMiscStatus
OleLockRunning
OleSetMenuDescriptor
PropVariantCopy
RevokeDragDrop
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CLSIDFromString
CoCreateInstance
CoDisconnectObject
StringFromGUID2
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
CreateILockBytesOnHGlobal
CreateFileMoniker
IsAccelerator
WriteClassStg

oleaut32

LoadTypeLibEx
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantClear
VariantCopy
VariantChangeType
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
VariantInit
SysStringByteLen
SysAllocString
SysFreeString
SysStringLen
SysAllocStringLen
SafeArrayLock
SysReAllocStringLen

oledlg

OleUIBusyW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wininet

InternetErrorDlg
InternetGetCookieW
InternetSetCookieW
HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExW
InternetAutodial
HttpAddRequestHeadersW
HttpOpenRequestW
GopherGetAttributeW
GopherOpenFileW
GopherFindFirstFileW
GopherCreateLocatorW
FtpCommandW
FtpGetCurrentDirectoryW
FtpSetCurrentDirectoryW
FtpRemoveDirectoryW
FtpCreateDirectoryW
FtpOpenFileW
FtpRenameFileW
FtpDeleteFileW
FtpPutFileW
FtpGetFileW
FtpFindFirstFileW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetGetConnectedState
HttpSendRequestW
FtpFindFirstFileA
InternetQueryOptionW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetOpenUrlW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetFindNextFileW
InternetSetOptionW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipCreateFromHDC
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 592KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e74766fe9c3784e2bf12dc7a7704ea1

Code Sign

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89Certificate

Extended Key Usages

Key Usages

73:7b:9b:c1:a2:3b:f2:e9:9d:ae:af:4b:20:35:ac:26Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

cb:ad:bb:de:a8:a7:75:56:7f:45:94:4d:5b:63:2a:4c:b0:e4:97:9c:5a:e5:af:f8:47:14:6b:c4:9c:bb:ab:d0Signer

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oledlg

version

wininet

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 592KB - Virtual size: 592KB

.data Size: 35KB - Virtual size: 63KB

.gfids Size: 140KB - Virtual size: 140KB

.giats Size: 512B - Virtual size: 28B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 211KB - Virtual size: 210KB

bb:f0:cc:b5:b7:b8:31:fd:21:ae:32:77:8a:e4:0c:89
Certificate

73:7b:9b:c1:a2:3b:f2:e9:9d:ae:af:4b:20:35:ac:26
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

cb:ad:bb:de:a8:a7:75:56:7f:45:94:4d:5b:63:2a:4c:b0:e4:97:9c:5a:e5:af:f8:47:14:6b:c4:9c:bb:ab:d0
Signer

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 592KB - Virtual size: 592KB

.data
Size: 35KB - Virtual size: 63KB

.gfids
Size: 140KB - Virtual size: 140KB

.giats
Size: 512B - Virtual size: 28B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 211KB - Virtual size: 210KB