8790b00d34b49086873055f01d968901b1cfd459710ee8b9ffc2a51b8a82c584

Sharing

Copy URL Twitter E-mail

General

Target

8790b00d34b49086873055f01d968901b1cfd459710ee8b9ffc2a51b8a82c584
Size

507KB
MD5

2c7480f0e0e4d191f2c764a849d1f76e
SHA1

537f4bd371d7b1c6b52fb9045b58dfebffaa7462
SHA256

8790b00d34b49086873055f01d968901b1cfd459710ee8b9ffc2a51b8a82c584
SHA512

77974f67cf8aad2bc6b5ea96d92969c0f95ffed7317411b8373d313df932442c29e6f91fab963e0076828609848a02cacea99395c10580b0863b2bed12898de6
SSDEEP

12288:ZfR9zKTUR3fgOsmyUehD2PAL/KWkYk4qke3xh:lfI6v9smyxD2PyidN

Score

1^/10

Malware Config

Signatures

Files

8790b00d34b49086873055f01d968901b1cfd459710ee8b9ffc2a51b8a82c584
.exe windows:4 windows x86

6cc737a6a83dc45f0bee37a06622f64d

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:36:2e:30:37:2e:32:30:32:31:31:35:3a:32:37:3a:35:33:2c:35:39
Certificate

Issuer

CN=ORB-CA,0.9.2342.19200300.100.1.25=#13036f7262,0.9.2342.19200300.100.1.25=#13056b756e7070,0.9.2342.19200300.100.1.25=#13027275

Not Before

26/07/2021, 12:27

Not After

26/07/2031, 12:27

Subject

CN=Лесных Андрей Владимирович,OU=Неразрушающий контроль,O=АО «НИКИЭТ»,L=Москва,ST=Московская область,C=RU,1.2.840.113549.1.9.1=#0c146c65736e796b685f6176406e696b6965742e7275,1.2.840.113549.1.9.1=#0c116c6573616e647640676d61696c2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19/05/2021, 05:42

Not After

18/05/2032, 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:36:2e:30:37:2e:32:30:32:31:31:35:3a:32:38:3a:31:33:2c:34:33
Certificate

Issuer

CN=ORB-CA,0.9.2342.19200300.100.1.25=#13036f7262,0.9.2342.19200300.100.1.25=#13056b756e7070,0.9.2342.19200300.100.1.25=#13027275

Not Before

26/07/2021, 12:28

Not After

26/07/2031, 12:28

Subject

CN=Лесных Андрей Владимирович,OU=Неразрушающий контроль,O=АО «НИКИЭТ»,L=Москва,ST=Московская область,C=RU,1.2.840.113549.1.9.1=#0c146c65736e796b685f6176406e696b6965742e7275,1.2.840.113549.1.9.1=#0c116c6573616e647640676d61696c2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19/05/2021, 05:42

Not After

18/05/2032, 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e8:94:bb:0d:e6:da:f9:68:d9:95:fa:2a:5d:f3:aa:65:5a:25:59:60:fc:a8:0b:4f:d7:d9:50:d7:37:62:e6:1a
Signer

Actual PE Digest

e8:94:bb:0d:e6:da:f9:68:d9:95:fa:2a:5d:f3:aa:65:5a:25:59:60:fc:a8:0b:4f:d7:d9:50:d7:37:62:e6:1a

Digest Algorithm

sha256

PE Digest Matches

true

52:c6:57:6a:ee:7e:c8:3b:9f:c0:95:f6:a4:18:2e:53:d4:71:6e:b5
Signer

Actual PE Digest

52:c6:57:6a:ee:7e:c8:3b:9f:c0:95:f6:a4:18:2e:53:d4:71:6e:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

oleaut32

SysFreeString

advapi32

RegEnumKeyExA

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

winmm

timeGetTime

shell32

ExtractIconEx

Sections

.text
Size: 476KB - Virtual size: 8.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6cc737a6a83dc45f0bee37a06622f64d

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

32:36:2e:30:37:2e:32:30:32:31:31:35:3a:32:37:3a:35:33:2c:35:39Certificate

Extended Key Usages

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

32:36:2e:30:37:2e:32:30:32:31:31:35:3a:32:38:3a:31:33:2c:34:33Certificate

Extended Key Usages

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

e8:94:bb:0d:e6:da:f9:68:d9:95:fa:2a:5d:f3:aa:65:5a:25:59:60:fc:a8:0b:4f:d7:d9:50:d7:37:62:e6:1aSigner

52:c6:57:6a:ee:7e:c8:3b:9f:c0:95:f6:a4:18:2e:53:d4:71:6e:b5Signer

Headers

File Characteristics

Imports

kernel32

user32

oleaut32

advapi32

mpr

version

gdi32

comctl32

winspool.drv

winmm

shell32

Sections

.text Size: 476KB - Virtual size: 8.1MB

.rsrc Size: 14KB - Virtual size: 16KB

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

32:36:2e:30:37:2e:32:30:32:31:31:35:3a:32:37:3a:35:33:2c:35:39
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

32:36:2e:30:37:2e:32:30:32:31:31:35:3a:32:38:3a:31:33:2c:34:33
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

e8:94:bb:0d:e6:da:f9:68:d9:95:fa:2a:5d:f3:aa:65:5a:25:59:60:fc:a8:0b:4f:d7:d9:50:d7:37:62:e6:1a
Signer

52:c6:57:6a:ee:7e:c8:3b:9f:c0:95:f6:a4:18:2e:53:d4:71:6e:b5
Signer

.text
Size: 476KB - Virtual size: 8.1MB

.rsrc
Size: 14KB - Virtual size: 16KB