64c42eaadd69f217df4b00f427499c67f7d8256b85219acd2755023bbeea6262

Sharing

Copy URL Twitter E-mail

General

Target

64c42eaadd69f217df4b00f427499c67f7d8256b85219acd2755023bbeea6262
Size

1.4MB
MD5

c144225c29f1b8b89f1152f86dcc210e
SHA1

858f5453ea52b6d77ad4baadf6fcbee28eb282d5
SHA256

64c42eaadd69f217df4b00f427499c67f7d8256b85219acd2755023bbeea6262
SHA512

82e583910a3876a8b8c1964b9406bf1ededcbae6e389deb23196adb1a9331579479525d888cea6b9bc6f652279d3f4caf509f26bebfac40a0071afb0ca2227d6
SSDEEP

12288:Hy3Mlcfwkc/p5B166j/8NAag8ag4Za04pDxaS5QSYEef:Hy543/G6z8rqDZa04SS53YEO

Score

1^/10

Malware Config

Signatures

Files

64c42eaadd69f217df4b00f427499c67f7d8256b85219acd2755023bbeea6262
.exe windows:4 windows x86

df695c210087605205c0d758b6f6f67e

Code Sign

33:00:00:04:25:35:21:6f:36:08:7c:eb:06:00:00:00:00:04:25
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

63:cd:6f:ff:cc:9b:67:1e:43:13:c8:91:d6:86:5e:da:65:40:39:8f:71:91:93:2f:06:9c:b4:19:64:58:95:07
Signer

Actual PE Digest

63:cd:6f:ff:cc:9b:67:1e:43:13:c8:91:d6:86:5e:da:65:40:39:8f:71:91:93:2f:06:9c:b4:19:64:58:95:07

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
calloc
free
fwrite
malloc
mbstowcs
memcpy
realloc
setlocale
signal
strcoll
strlen
tolower
vfprintf
wcstombs

libgcc_s_dw2-1

_Unwind_Resume
__deregister_frame_info
__register_frame_info

libstdc++-6

_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4sizeEv
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEixEj
_ZNSaIcEC1Ev
_ZNSaIcED1Ev
_ZNSolsEPFRSoS_E
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1EPKcRKS3_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1ERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEED1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEixEj
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZSt4cout
_ZSt4endlIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc
_ZStlsIcSt11char_traitsIcESaIcEERSt13basic_ostreamIT_T0_ES7_RKNSt7__cxx1112basic_stringIS4_S5_T1_EE
__gxx_personality_v0

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 116B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df695c210087605205c0d758b6f6f67e

Code Sign

33:00:00:04:25:35:21:6f:36:08:7c:eb:06:00:00:00:00:04:25Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

63:cd:6f:ff:cc:9b:67:1e:43:13:c8:91:d6:86:5e:da:65:40:39:8f:71:91:93:2f:06:9c:b4:19:64:58:95:07Signer

Headers

File Characteristics

Imports

kernel32

msvcrt

libgcc_s_dw2-1

libstdc++-6

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 28B

.rdata Size: 1024B - Virtual size: 816B

/4 Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 116B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

/14 Size: 512B - Virtual size: 88B

/29 Size: 50KB - Virtual size: 49KB

/41 Size: 2KB - Virtual size: 2KB

/55 Size: 2KB - Virtual size: 1KB

/67 Size: 512B - Virtual size: 56B

/80 Size: 1024B - Virtual size: 944B

.rsrc Size: 1.3MB - Virtual size: 1.3MB

33:00:00:04:25:35:21:6f:36:08:7c:eb:06:00:00:00:00:04:25
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

63:cd:6f:ff:cc:9b:67:1e:43:13:c8:91:d6:86:5e:da:65:40:39:8f:71:91:93:2f:06:9c:b4:19:64:58:95:07
Signer

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 28B

.rdata
Size: 1024B - Virtual size: 816B

/4
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 116B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

/14
Size: 512B - Virtual size: 88B

/29
Size: 50KB - Virtual size: 49KB

/41
Size: 2KB - Virtual size: 2KB

/55
Size: 2KB - Virtual size: 1KB

/67
Size: 512B - Virtual size: 56B

/80
Size: 1024B - Virtual size: 944B

.rsrc
Size: 1.3MB - Virtual size: 1.3MB