db72dd16612d30a3e1a3126bbc946de1ea89a0fb597ef41a35c15748f4b73a9b

Resubmissions

27/11/2023, 07:52

231127-jqsw1afb3t 10

27/11/2023, 02:09

231127-clncdsdg26 10

Sharing

Copy URL Twitter E-mail

General

Target

db72dd16612d30a3e1a3126bbc946de1ea89a0fb597ef41a35c15748f4b73a9b
Size

88KB
MD5

8fe9cbe0f75fec5fe0b99f164dfab038
SHA1

23793ac54daac77a15ff728576751016820e8f71
SHA256

db72dd16612d30a3e1a3126bbc946de1ea89a0fb597ef41a35c15748f4b73a9b
SHA512

a656167a8991f40015de427b408afb43bf7fb92c6e330ba5803c29ab428e63d0a05eafe4d476468877adde6883e4fd1ede740a973ce1954ef6f7055b10e17adc
SSDEEP

1536:U+vMkSWA2aXk5r2yNQ+vbgAlMBRk/vfskq:/vhd1aXkV2E7vjosXZq

Score

1^/10

Malware Config

Signatures

Files

db72dd16612d30a3e1a3126bbc946de1ea89a0fb597ef41a35c15748f4b73a9b
.exe windows:4 windows x86 arch:x86

b60515d7006d4aa542ef2a475814aec5

Code Sign

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

05/05/2015, 00:00

Not After

31/12/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:31:cb:14:30:f1:8b:8c:0c:43:ab:40:e1:15:41:69
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

08/07/2015, 00:00

Not After

10/06/2016, 23:59

Subject

CN=3 AM CHP,O=3 AM CHP,L=Harkov,ST=Harkovskaja,C=UA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b1:c2:91:1a:2b:83:59:b8:83:52:17:54:9a:71:99:3f:21:6f:61:2f
Signer

Actual PE Digest

b1:c2:91:1a:2b:83:59:b8:83:52:17:54:9a:71:99:3f:21:6f:61:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

authz

AuthzFreeAuditEvent
AuthzFreeResourceManager

crypt32

CryptEnumOIDInfo
CertSaveStore
CertAddStoreToCollection
CertCompareCertificate
CertFindExtension
CertFindAttribute
CertOpenStore
CertControlStore
CryptFormatObject
CertCloseStore

kernel32

GetACP
GetProcAddress
FormatMessageA
HeapAlloc
CreateDirectoryA
QueryDosDeviceA
FindNextFileA
WaitForSingleObject
GetModuleHandleA
WriteConsoleA
DeleteFileW
GetLastError
GetFileSize
GetDriveTypeA
InterlockedIncrement
GetDiskFreeSpaceW
Heap32First

mprapi

MprAdminDeviceEnum
MprAdminConnectionEnum
MprInfoBlockFind
MprInfoBlockAdd

user32

PostMessageA
LoadImageW
InsertMenuW
IsIconic
CharToOemA
CharPrevA
GetClassInfoW
GetFocus
MessageBoxW
IsCharUpperA
SendMessageA
DialogBoxParamW
GetPropA
DrawTextA
GetMessageA
LoadStringW
IsDialogMessageA

wtsapi32

WTSUnRegisterSessionNotification
WTSFreeMemory
WTSEnumerateSessionsA
WTSSetUserConfigA
WTSVirtualChannelWrite
WTSLogoffSession
WTSQuerySessionInformationA
WTSVirtualChannelClose
WTSWaitSystemEvent
WTSOpenServerA
WTSVirtualChannelRead

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

b60515d7006d4aa542ef2a475814aec5

Code Sign

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6Certificate

Extended Key Usages

Key Usages

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5eCertificate

Extended Key Usages

Key Usages

67:31:cb:14:30:f1:8b:8c:0c:43:ab:40:e1:15:41:69Certificate

Extended Key Usages

Key Usages

b1:c2:91:1a:2b:83:59:b8:83:52:17:54:9a:71:99:3f:21:6f:61:2fSigner

Headers

File Characteristics

Imports

authz

crypt32

kernel32

mprapi

user32

wtsapi32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 496B

9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6
Certificate

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

67:31:cb:14:30:f1:8b:8c:0c:43:ab:40:e1:15:41:69
Certificate

b1:c2:91:1a:2b:83:59:b8:83:52:17:54:9a:71:99:3f:21:6f:61:2f
Signer

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 496B