30dbc96a617474a580e47eb70bd3a8b08445ba136585e730cf67d0c46dfd5d44

Sharing

Copy URL

Twitter E-mail

General

Target

30dbc96a617474a580e47eb70bd3a8b08445ba136585e730cf67d0c46dfd5d44
Size

8.3MB
MD5

5f6cc6117169556267529b4201016e14
SHA1

1d2b2e076b3a3f84f4eeaf764f7b1b01ae1abd55
SHA256

30dbc96a617474a580e47eb70bd3a8b08445ba136585e730cf67d0c46dfd5d44
SHA512

7658c9ceb7419658cbb6ca269d4177dc62fa757d9068ddffaaa9cf18fdb0e9ac561bdcefa5c9ce2d3920bfe51e576456b8efd959b8398aeb90ada629f60ea259
SSDEEP

196608:CdD+oQmYqGRepU4/fhrjezPkt7YxtzG955iio2NZalv:CdD+cjoeRfp2ktBv5kZ

Score

1^/10

Malware Config

Signatures

Files

30dbc96a617474a580e47eb70bd3a8b08445ba136585e730cf67d0c46dfd5d44
.zip
VA_X64.dll
.dll regsvr32 windows:6 windows x64

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:c0:7a:2f:8a:dc:9d:21:62:d8:9a:84:51:b0:c3:e8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

05-03-2021 00:00

Not After

25-03-2024 23:59

Subject

CN=Idera\, Inc.,O=Idera\, Inc.,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ea:23:4a:db:7f:50:fd:2d:ea:af:d6:08:4f:31:54:72:14:d2:87:3c
Signer

Actual PE Digest

ea:23:4a:db:7f:50:fd:2d:ea:af:d6:08:4f:31:54:72:14:d2:87:3c

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DispatchMessageAHook
DispatchMessageWHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetVaService
PeekMessageWHook
VAGraphCallback
VaConnectSetup

Sections

.text
Size: - Virtual size: 11.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

jkl.text
Size: - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

jkl.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 622KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jkl.xdat
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jkl.pdat
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jkl.data
Size: - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jkl.rdat
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text1
Size: 680KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 208KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata1
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 4KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc1
Size: 8KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata2
Size: 6.7MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0f:c0:7a:2f:8a:dc:9d:21:62:d8:9a:84:51:b0:c3:e8Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

ea:23:4a:db:7f:50:fd:2d:ea:af:d6:08:4f:31:54:72:14:d2:87:3cSigner

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: - Virtual size: 11.8MB

jkl.text Size: - Virtual size: 135KB

jkl.bss Size: - Virtual size: 112B

.rdata Size: 3.6MB - Virtual size: 3.6MB

.data Size: - Virtual size: 622KB

.pdata Size: - Virtual size: 442KB

jkl.xdat Size: - Virtual size: 16KB

jkl.pdat Size: - Virtual size: 11KB

jkl.data Size: - Virtual size: 656B

jkl.rdat Size: - Virtual size: 11KB

_RDATA Size: - Virtual size: 1.5MB

.reloc Size: - Virtual size: 199KB

.text1 Size: 680KB - Virtual size: 704KB

.adata Size: 4KB - Virtual size: 64KB

.data1 Size: 208KB - Virtual size: 256KB

.pdata1 Size: 60KB - Virtual size: 64KB

.tls Size: 4KB - Virtual size: 64KB

.reloc1 Size: 8KB - Virtual size: 64KB

.pdata2 Size: 6.7MB - Virtual size: 6.8MB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0f:c0:7a:2f:8a:dc:9d:21:62:d8:9a:84:51:b0:c3:e8
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

ea:23:4a:db:7f:50:fd:2d:ea:af:d6:08:4f:31:54:72:14:d2:87:3c
Signer

.text
Size: - Virtual size: 11.8MB

jkl.text
Size: - Virtual size: 135KB

jkl.bss
Size: - Virtual size: 112B

.rdata
Size: 3.6MB - Virtual size: 3.6MB

.data
Size: - Virtual size: 622KB

.pdata
Size: - Virtual size: 442KB

jkl.xdat
Size: - Virtual size: 16KB

jkl.pdat
Size: - Virtual size: 11KB

jkl.data
Size: - Virtual size: 656B

jkl.rdat
Size: - Virtual size: 11KB

_RDATA
Size: - Virtual size: 1.5MB

.reloc
Size: - Virtual size: 199KB

.text1
Size: 680KB - Virtual size: 704KB

.adata
Size: 4KB - Virtual size: 64KB

.data1
Size: 208KB - Virtual size: 256KB

.pdata1
Size: 60KB - Virtual size: 64KB

.tls
Size: 4KB - Virtual size: 64KB

.reloc1
Size: 8KB - Virtual size: 64KB

.pdata2
Size: 6.7MB - Virtual size: 6.8MB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB