Links-of-Xray-Ultimate-1[.]16[.]5-for-Mine_148001[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Links-of-Xray-Ultimate-1.16.5-for-Mine_148001.exe
Size

10.8MB
MD5

634afc391b7147a1d5eb2798796ea210
SHA1

c7946e715b00e0e1ebe1fa23832120d56c4446c6
SHA256

3812835dd14174aa7f9c5b06a633b33ae694163f20b418d58e2343be1ed08cd1
SHA512

1e632c714db0144d0067b2a026fafee99fa6be1f03793a9d09d27cf6b3a8db3794d756512dc11060aa05897de1ba1511483ed3538a1ca6f8426f5a09f2952fc6
SSDEEP

196608:5UJjjjqbj2j9ebvKpxUB4JoV4y5Ar2rVr2vgr+/WNiNqiNzxLOV81NnR0LtCGu8r:5pKpxUB4JoV4y5Ar2rVr2vgrwWNiNqiW

Score

1^/10

Malware Config

Signatures

Files

Links-of-Xray-Ultimate-1.16.5-for-Mine_148001.exe
.exe windows:6 windows x86 arch:x86

Password: fiesta

217305667e45ca3ce6d7f6eb4a7f5eeb

Code Sign

42:81:90:c7:6b:e1:70:d2:34:31:6f:b3:57:4f:8f:dd
Certificate

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

15/11/2022, 18:07

Not After

15/11/2023, 18:06

Subject

SERIALNUMBER=L22000439212,CN=Digital Media Pros LLC,O=Digital Media Pros LLC,L=Delray Beach,ST=Florida,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#1307466c6f72696461,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26/03/2019, 17:44

Not After

22/03/2034, 17:44

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:59:1e:ed:bf:2a:b5:a9:0b:19:7e:8e:95:c0:02:aa:76:f0:45:c8:2e:42:00:9b:8e:2c:8d:c4:61:5c:1f:ad
Signer

Actual PE Digest

83:59:1e:ed:bf:2a:b5:a9:0b:19:7e:8e:95:c0:02:aa:76:f0:45:c8:2e:42:00:9b:8e:2c:8d:c4:61:5c:1f:ad

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
MulDiv
GetUserDefaultUILanguage
RtlUnwind
GlobalSize
DeleteCriticalSection
SetCurrentDirectoryW
GetUserDefaultLCID
SetFilePointerEx
TerminateProcess
GetFileAttributesW
GetTempFileNameW
AttachConsole
GetProcessHeap
QueryPerformanceCounter
EnumSystemLocalesW
GetTimeZoneInformation
MoveFileExW
HeapSize
GetLogicalDriveStringsW
GetDriveTypeW
ExpandEnvironmentStringsW
WaitForSingleObjectEx
MultiByteToWideChar
GetFileAttributesExW
IsValidLocale
GetModuleHandleW
GetLocaleInfoW
GetConsoleScreenBufferInfo
LoadResource
GetOEMCP
UnhandledExceptionFilter
InitializeCriticalSectionEx
GetTimeFormatW
RaiseException
TlsGetValue
GetStdHandle
QueryPerformanceFrequency
LockResource
SetStdHandle
IsProcessorFeaturePresent
FreeLibrary
GetEnvironmentStringsW
GetEnvironmentVariableA
SetEnvironmentVariableW
SystemTimeToFileTime
GetTickCount
GetCurrentThread
GetCurrentProcess
GetFileType
GetFileSizeEx
GetTickCount64
GetStartupInfoW
TlsSetValue
WriteConsoleA
SetEvent
GlobalUnlock
LoadLibraryExW
WriteConsoleW
CopyFileW
InitializeCriticalSection
GetSystemTime
GetExitCodeProcess
GetSystemTimeAsFileTime
FreeConsole
SetThreadPriority
HeapReAlloc
ReleaseSRWLockExclusive
VerifyVersionInfoW
WriteFile
FreeEnvironmentStringsW
GetStringTypeW
FindFirstFileW
ResetEvent
FindClose
GetCommandLineW
ExitThread
FillConsoleOutputCharacterW
SizeofResource
LocalFree
GetNativeSystemInfo
CreateProcessW
GlobalHandle
ConvertThreadToFiber
SetLastError
CreateDirectoryW
IsValidCodePage
FindResourceW
SetEndOfFile
InitializeCriticalSectionAndSpinCount
GetTempPathW
CompareFileTime
AcquireSRWLockExclusive
ReadConsoleW
GetDateFormatW
FlushFileBuffers
ConvertFiberToThread
lstrlenA
CreateEventW
GetFullPathNameW
GetCPInfo
GetLongPathNameW
GetCurrentProcessId
GetModuleHandleA
GetConsoleOutputCP
GetCurrentThreadId
FormatMessageW
GlobalLock
GetACP
LoadLibraryW
GlobalAlloc
GlobalFree
EncodePointer
GetProcAddress
SwitchToFiber
CompareStringW
SetConsoleCtrlHandler
DecodePointer
LeaveCriticalSection
lstrcatA
CreateFileW
ExitProcess
SetConsoleMode
VerSetConditionMask
CreateThread
GetConsoleMode
LCMapStringEx
EnterCriticalSection
InitializeSListHead
SetConsoleCursorPosition
LoadLibraryA
GetSystemDirectoryW
Sleep
WaitForMultipleObjects
ResumeThread
GetLastError
FindFirstFileExW
ReadConsoleA
SleepEx
OutputDebugStringW
DeleteFileW
GetModuleHandleExW
LCMapStringW
GetModuleFileNameW
HeapAlloc
ReadFile
GetFileInformationByHandle
FreeLibraryAndExitThread
CreateMutexW
CreatePipe
ReadConsoleOutputCharacterA
SetErrorMode
TlsFree
GetEnvironmentVariableW
WideCharToMultiByte
IsDebuggerPresent
SetUnhandledExceptionFilter
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetVersionExW
GetCurrentDirectoryW
HeapFree
CreateFiber
SetNamedPipeHandleState
PeekNamedPipe
WaitForSingleObject
DeleteFiber
TlsAlloc
GetCommandLineA
FindNextFileW
SetHandleInformation

user32

DdeGetData
GetMenuItemID
BeginDeferWindowPos
DdeFreeStringHandle
ScrollWindow
FillRect
InsertMenuW
SetCapture
keybd_event
ReleaseDC
RegisterClassW
SetForegroundWindow
GetAsyncKeyState
EndDeferWindowPos
GetDesktopWindow
EnableScrollBar
DestroyWindow
SetWindowRgn
UnregisterHotKey
DdeFreeDataHandle
DeferWindowPos
BringWindowToTop
DrawFrameControl
ShowWindow
SetWindowLongW
GetWindowRect
GetMenuItemInfoW
UnregisterClassW
CreateDialogParamW
EnumDisplayMonitors
PostThreadMessageW
DestroyCursor
SetParent
LoadBitmapW
DdeCreateStringHandleW
GetActiveWindow
GetUserObjectInformationW
DdeCreateDataHandle
GetUpdateRgn
HideCaret
VkKeyScanW
PtInRect
SetWindowTextW
SetScrollInfo
ChildWindowFromPoint
FlashWindowEx
PostQuitMessage
SetMenu
GetSystemMetrics
GetMenuState
BeginPaint
GetWindowPlacement
DestroyIcon
GetParent
LoadImageW
IsRectEmpty
ScreenToClient
DdeNameService
EnumDisplaySettingsW
EnableMenuItem
DdeQueryStringW
ValidateRgn
RemoveMenu
DdeUninitialize
WindowFromPoint
IsClipboardFormatAvailable
GetComboBoxInfo
OffsetRect
DrawTextW
GetWindowDC
RegisterHotKey
InvalidateRect
PeekMessageW
MsgWaitForMultipleObjects
SendMessageW
MoveWindow
RedrawWindow
DdeInitializeW
GetMessageTime
SetMenuItemInfoW
GetClientRect
GetMenuItemCount
GetDlgItem
DdeClientTransaction
GetSysColorBrush
SetRectEmpty
ChildWindowFromPointEx
LoadIconW
CreateIconIndirect
GetCursorPos
ReleaseCapture
CheckMenuRadioItem
IsMenu
DispatchMessageW
CallWindowProcW
GetCaretBlinkTime
GetSystemMenu
MessageBeep
SetWindowsHookExW
MonitorFromWindow
GetDC
SetFocus
UnhookWindowsHookEx
GetWindowLongW
ValidateRect
GetDoubleClickTime
IsWindowVisible
CallNextHookEx
IsDialogMessageW
DrawEdge
CreateWindowExW
CreateDialogIndirectParamW
DestroyMenu
InsertMenuItemW
MonitorFromPoint
AnimateWindow
DdeGetLastError
GetKeyState
SetMenuInfo
GetScrollInfo
DrawMenuBar
EnableWindow
GetMessagePos
GetMonitorInfoW
RegisterWindowMessageW
GetMessageW
ModifyMenuW
CreatePopupMenu
PostMessageW
DdePostAdvise
GetSubMenu
CreateAcceleratorTableW
IsIconic
GetFocus
IsWindow
SetTimer
WaitForInputIdle
SetRect
ChangeDisplaySettingsExW
TrackPopupMenu
GetClassNameW
SetCursorPos
MessageBoxW
SystemParametersInfoW
GetSysColor
SetLayeredWindowAttributes
CopyRect
CheckMenuItem
LoadCursorW
GetWindowTextW
CreateMenu
GetIconInfo
DdeConnect
EndPaint
DefWindowProcW
DdeDisconnect
TranslateAcceleratorW
MapWindowPoints
GetProcessWindowStation
GetProcessDefaultLayout
FindWindowExW
SetCursor
UnionRect
DestroyAcceleratorTable
RegisterClipboardFormatW
SetWindowPos
MapVirtualKeyW
UpdateWindow
wsprintfA
KillTimer
AppendMenuW
DrawFocusRect
IsZoomed
DrawIconEx
IsWindowEnabled
GetWindowTextLengthW
GetCapture
DrawStateW
ClientToScreen
GetWindow
InflateRect
GetClipboardFormatNameW
GetDialogBaseUnits
TranslateMessage

comctl32

ImageList_Create
ImageList_SetBkColor
ImageList_Draw
ImageList_Replace
ImageList_GetIconSize
ImageList_Destroy
ImageList_Add
ord16
ord17
ImageList_GetImageInfo

oleacc

LresultFromObject

uxtheme

GetThemeSysFont
DrawThemeParentBackground
IsAppThemed
CloseThemeData
GetThemePartSize
GetThemeFont
IsThemeActive
OpenThemeData
GetThemeBackgroundContentRect
GetThemeColor
GetThemeMargins
DrawThemeBackground
IsThemePartDefined
GetThemeSysColor
GetCurrentThemeName
GetThemeBackgroundExtent
IsThemeBackgroundPartiallyTransparent
GetThemeInt

ws2_32

WSAIoctl
WSACleanup
__WSAFDIsSet
select
accept
WSAEventSelect
listen
WSAWaitForMultipleEvents
WSAResetEvent
recvfrom
sendto
ioctlsocket
gethostname
shutdown
WSACreateEvent
WSACloseEvent
freeaddrinfo
getnameinfo
getaddrinfo
closesocket
WSAGetLastError
recv
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
setsockopt
socket
send
WSASetLastError
WSAEnumNetworkEvents
htonl
WSAStartup

wldap32

ord127
ord27
ord26
ord117
ord301
ord142
ord147
ord79
ord133
ord167
ord208
ord46
ord219
ord145
ord41
ord216
ord14

crypt32

CertGetEnhancedKeyUsage
CertFreeCertificateContext
CertFindCertificateInStore
CertDuplicateCertificateContext
CertOpenSystemStoreW
CertGetIntendedKeyUsage
CertGetCertificateContextProperty
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore

shlwapi

SHAutoComplete

msimg32

AlphaBlend
GradientFill

bcrypt

BCryptGenRandom

gdi32

GetNearestPaletteIndex
SetTextColor
DeleteEnhMetaFile
LPtoDP
Pie
GetClipBox
GetLayout
CloseEnhMetaFile
CreatePen
GetOutlineTextMetricsW
GetPixel
DPtoLP
GetSystemPaletteEntries
CreateBitmapIndirect
CreateCompatibleDC
CreateDIBitmap
MaskBlt
GdiFlush
ExtCreatePen
GetDIBits
GetRgnBox
GetDIBColorTable
CombineRgn
DeleteObject
EndPage
StretchDIBits
PlayEnhMetaFile
CreateHatchBrush
GetWorldTransform
Polyline
ModifyWorldTransform
SelectObject
EnumFontFamiliesExW
ExcludeClipRect
GetObjectW
ExtCreateRegion
SelectClipRgn
StartDocW
GetEnhMetaFileW
PtInRegion
CreateDIBSection
MoveToEx
SetLayout
SetWindowExtEx
GetTextMetricsW
PolyPolygon
SetAbortProc
RealizePalette
GetWindowExtEx
ExtSelectClipRgn
CreateICW
GetEnhMetaFileHeader
Polygon
GetStockObject
SetPixel
CreateFontIndirectW
GetCharABCWidthsW
CreateSolidBrush
SetWindowOrgEx
EqualRgn
GetViewportExtEx
SetGraphicsMode
GetTextExtentPoint32W
CreateBitmap
StretchBlt
EndDoc
OffsetRgn
SetViewportOrgEx
CreatePatternBrush
SetViewportExtEx
GetTextExtentExPointW
GetRegionData
SelectPalette
SetROP2
SetBkMode
DeleteDC
Ellipse
GetPaletteEntries
SetWorldTransform
SetBrushOrgEx
Rectangle
SetBkColor
RectInRegion
Arc
SetPolyFillMode
GetObjectType
ExtTextOutW
SetStretchBltMode
BitBlt
CreatePalette
RoundRect
CreateDCW
GetGraphicsMode
CreateEnhMetaFileW
CreateCompatibleBitmap
GetDeviceCaps
PolyBezier
LineTo
CreateRectRgnIndirect
GetBkColor
SetMapMode
CreateRectRgn
ExtFloodFill
SetDIBColorTable
StartPage

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

comdlg32

PageSetupDlgW
ChooseFontW
CommDlgExtendedError
PrintDlgW

advapi32

CryptEnumProvidersW
CryptSetHashParam
CryptAcquireContextW
GetUserNameW
CryptDestroyHash
CryptGetProvParam
RegQueryValueExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
CryptSignHashW
DeregisterEventSource
RegisterEventSourceW
RegDeleteKeyW
RegEnumValueW
CryptGetUserKey
CryptDestroyKey
RegCreateKeyExW
RegSetValueExW
CryptCreateHash
CryptExportKey
ReportEventW
CryptDecrypt
CryptReleaseContext
RegEnumKeyW

shell32

SHGetFolderPathW
DragFinish
ExtractIconExW
CommandLineToArgvW
DragAcceptFiles
DragQueryPoint
SHGetFileInfoW
DragQueryFileW
ord6
ExtractIconW

ole32

OleFlushClipboard
OleSetClipboard
CoCreateInstance
OleIsCurrentClipboard
CoTaskMemFree
RegisterDragDrop
CoTaskMemAlloc
OleInitialize
CoLockObjectExternal
OleGetClipboard
OleUninitialize
RevokeDragDrop
ReleaseStgMedium

Sections

.text
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 346KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: fiesta

217305667e45ca3ce6d7f6eb4a7f5eeb

Code Sign

42:81:90:c7:6b:e1:70:d2:34:31:6f:b3:57:4f:8f:ddCertificate

Extended Key Usages

Key Usages

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04Certificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

83:59:1e:ed:bf:2a:b5:a9:0b:19:7e:8e:95:c0:02:aa:76:f0:45:c8:2e:42:00:9b:8e:2c:8d:c4:61:5c:1f:adSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comctl32

oleacc

uxtheme

ws2_32

wldap32

crypt32

shlwapi

msimg32

bcrypt

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 9.1MB - Virtual size: 9.1MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 346KB - Virtual size: 415KB

.rsrc Size: 68KB - Virtual size: 68KB

.reloc Size: 244KB - Virtual size: 244KB

42:81:90:c7:6b:e1:70:d2:34:31:6f:b3:57:4f:8f:dd
Certificate

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

83:59:1e:ed:bf:2a:b5:a9:0b:19:7e:8e:95:c0:02:aa:76:f0:45:c8:2e:42:00:9b:8e:2c:8d:c4:61:5c:1f:ad
Signer

.text
Size: 9.1MB - Virtual size: 9.1MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 346KB - Virtual size: 415KB

.rsrc
Size: 68KB - Virtual size: 68KB

.reloc
Size: 244KB - Virtual size: 244KB