Advanced_Ip_Scanner (1)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Advanced_Ip_Scanner (1).exe
Size

5.3MB
MD5

745a0a1af8180e312c8ccb459a75e281
SHA1

92697819ff772f397faf3b910348217760a78d32
SHA256

123b285236757f7ac0c4f2107756a0ed661c9190aad81914c54debdd3bfa00f4
SHA512

6d51d6c51cd78a3f6df1da013b3f97a537ce43f28f49afd3d906a445e86ce01a9b81a37a5ece99ef6a10c3d724a8d98900879fae8b53ef6c1c023c23814e3a28
SSDEEP

98304:Gzwo+KYoxXJgc80PlTTwqZKt9MsAVuQDjgFEUjOgn2Jy:GzNFYuJggm9MsAkQDUFd8y

Score

1^/10

Malware Config

Signatures

Files

Advanced_Ip_Scanner (1).exe
.exe windows:6 windows x86

9608718565ebd5f634103e2a836a4eb8

Code Sign

17:55:2a:90:52:d4:85:0d:53:4a:93:70:35:2d:04:32
Certificate

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

21/08/2023, 20:58

Not After

20/08/2024, 20:58

Subject

SERIALNUMBER=11161476,CN=BRAIN ANALYTICS LTD,O=BRAIN ANALYTICS LTD,L=London,C=GB,1.3.6.1.4.1.311.60.2.1.3=#13024742,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26/03/2019, 17:44

Not After

22/03/2034, 17:44

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e9:a7:08:3b:d5:8d:42:67:73:ee:ad:99:b2:e9:a6:98:2b:60:a9:95:bd:cc:2e:c5:2a:c8:90:52:ca:07:1c:f5
Signer

Actual PE Digest

e9:a7:08:3b:d5:8d:42:67:73:ee:ad:99:b2:e9:a6:98:2b:60:a9:95:bd:cc:2e:c5:2a:c8:90:52:ca:07:1c:f5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

kernel32

GetProcessHeap
GetTimeFormatA
GetDateFormatA
SizeofResource
FindResourceA
GetLocaleInfoA
Sleep
LockResource
CloseHandle
CreateThread
FindResourceExW
LoadResource
FindResourceW
GetTickCount
GlobalMemoryStatus
FlushConsoleInputBuffer
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetConsoleCP
DeleteCriticalSection
GetCurrentDirectoryW
GetFullPathNameW
SetConsoleMode
ReadConsoleInputW
WideCharToMultiByte
GetFileSize
CreateFileA
WriteFile
ReadFile
DeleteFileA
WriteConsoleW
SetEndOfFile
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
HeapDestroy
DecodePointer
HeapAlloc
GetACP
IsValidCodePage
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
HeapFree
MulDiv
FindFirstFileExW
ReadConsoleW
FlushFileBuffers
SetConsoleCtrlHandler
SetFilePointerEx
CreateDirectoryA
GetFileAttributesA
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryA
MoveFileExA
MultiByteToWideChar
GetCurrentDirectoryA
LocalFileTimeToFileTime
SetFileTime
SystemTimeToFileTime
FileTimeToLocalFileTime
GetFileInformationByHandle
GetTickCount64
MapViewOfFile
UnmapViewOfFile
FileTimeToDosDateTime
CreateFileMappingA
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
ExitProcess
OpenProcess
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
CopyFileA
CreateFileW
ReleaseMutex
WaitForSingleObject
CreateMutexA
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
CopyFileW
CompareFileTime
FindFirstFileExA
SetLastError
GetSystemTime
IsDebuggerPresent
OutputDebugStringW
RaiseException
GlobalAlloc
GlobalFree
lstrlenA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx

user32

GetActiveWindow
IsWindowEnabled
GetSystemMetrics
SetActiveWindow
InvalidateRgn
GetWindowTextA
MessageBoxA
WindowFromPoint
GetDesktopWindow
EnumChildWindows
EnumWindows
GetClassNameA
GetWindowThreadProcessId
GetMonitorInfoA
EnumDisplayMonitors
wsprintfA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetDoubleClickTime
SetLayeredWindowAttributes
DialogBoxParamA
GetKeyState
GetKeyNameTextA
MapVirtualKeyA
SetCapture
ReleaseCapture
GetForegroundWindow
SetWindowTextA
AdjustWindowRectEx
MessageBeep
SetCursor
ChildWindowFromPoint
SetClassLongA
FindWindowExA
LoadIconA
DestroyIcon
IsDialogMessageA
MonitorFromRect
MonitorFromWindow
SetProcessDPIAware
IsZoomed
IsRectEmpty
DrawFrameControl
WindowFromDC
GetSysColor
CreateIconIndirect
GetIconInfo
SystemParametersInfoA
GetDC
SetParent
GetWindowDC
DrawFocusRect
SetScrollInfo
IsWindowVisible
TrackPopupMenuEx
InsertMenuItemA
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
SetDlgItemTextW
SendMessageA
GetParent
RedrawWindow
EnableWindow
EndPaint
BeginPaint
InvalidateRect
FillRect
SetForegroundWindow
LoadCursorA
ScreenToClient
AdjustWindowRect
RegisterClassA
DrawIconEx
PostQuitMessage
PtInRect
IsIconic
ReleaseDC
GetCursorPos
LoadImageA
GetWindowRect
GetFocus
DestroyWindow
SetWindowPos
PostMessageA
EndDialog
ShowWindow
GetAsyncKeyState
GetDlgItemTextA
SetTimer
SetWindowLongA
GetDlgCtrlID
CallWindowProcA
MapWindowPoints
GetWindowLongA
DefWindowProcA
CreateWindowExA
SetFocus
BringWindowToTop
SendDlgItemMessageA
SetDlgItemTextA
CreateDialogParamA
GetClientRect
GetDlgItem
KillTimer
DrawTextA
CopyRect
FrameRect
SetRect
GetProcessWindowStation
GetUserObjectInformationW
CreatePopupMenu
OffsetRect

gdi32

GetTextExtentPoint32A
PatBlt
SelectClipRgn
GetDIBits
CreateRectRgnIndirect
BitBlt
GetDeviceCaps
CreateFontA
StretchDIBits
SetBkMode
LineTo
CreatePen
Rectangle
MoveToEx
CreateRectRgn
CreateSolidBrush
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetStockObject
GetPixel
DeleteDC
SetTextColor
CreatePalette
SetBkColor
DeleteObject
SetDCBrushColor
SetDCPenColor
PlayEnhMetaFile
SetMapMode
CreateDIBSection
GetObjectA
CombineRgn
SetStretchBltMode
SetDIBits
SetWinMetaFileBits
SetEnhMetaFileBits
ExtTextOutA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
DeleteEnhMetaFile
SelectPalette
RealizePalette
CreateBitmap
Ellipse
Polygon

comdlg32

GetSaveFileNameA
ChooseFontA
CommDlgExtendedError
GetOpenFileNameA
ChooseColorA

shell32

SHFileOperationA
FindExecutableA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHCreateItemFromIDList
ShellExecuteA
Shell_NotifyIconA

shlwapi

ord176

version

VerQueryValueA
GetFileVersionInfoA

msimg32

GradientFill

advapi32

ReportEventA
RegisterEventSourceA
CryptVerifySignatureA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptImportKey
CryptReleaseContext
OpenProcessToken
GetTokenInformation
ImpersonateLoggedOnUser
GetUserNameA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CryptAcquireContextA
DeregisterEventSource

ole32

CoTaskMemFree
CoInitialize
OleInitialize
CoCreateInstance
OleUninitialize
CoUninitialize

oleaut32

SysAllocString
VariantClear
SysFreeString

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 499KB - Virtual size: 498KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 962KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Erot
Size: 856KB - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fletche
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.adena
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9608718565ebd5f634103e2a836a4eb8

Code Sign

17:55:2a:90:52:d4:85:0d:53:4a:93:70:35:2d:04:32Certificate

Extended Key Usages

Key Usages

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04Certificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

e9:a7:08:3b:d5:8d:42:67:73:ee:ad:99:b2:e9:a6:98:2b:60:a9:95:bd:cc:2e:c5:2a:c8:90:52:ca:07:1c:f5Signer

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

shell32

shlwapi

version

msimg32

advapi32

ole32

oleaut32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 499KB - Virtual size: 498KB

.data Size: 962KB - Virtual size: 3.7MB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 66KB - Virtual size: 66KB

Erot Size: 856KB - Virtual size: 856KB

.fletche Size: 512B - Virtual size: 4KB

.adena Size: 512B - Virtual size: 512B

17:55:2a:90:52:d4:85:0d:53:4a:93:70:35:2d:04:32
Certificate

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

e9:a7:08:3b:d5:8d:42:67:73:ee:ad:99:b2:e9:a6:98:2b:60:a9:95:bd:cc:2e:c5:2a:c8:90:52:ca:07:1c:f5
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 499KB - Virtual size: 498KB

.data
Size: 962KB - Virtual size: 3.7MB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 66KB - Virtual size: 66KB

Erot
Size: 856KB - Virtual size: 856KB

.fletche
Size: 512B - Virtual size: 4KB

.adena
Size: 512B - Virtual size: 512B