3db8e1edc3b3ca7f02874cf77a1f13b2

Sharing

Copy URL

Twitter E-mail

General

Target

3db8e1edc3b3ca7f02874cf77a1f13b2
Size

67KB
MD5

3db8e1edc3b3ca7f02874cf77a1f13b2
SHA1

257d8f9a7bb7a6fc00aebdf73b201ba420de7ef5
SHA256

81cbc431533fb2f3fd0018102aa9292b20ea7b139c6902fddd76ada4323389ee
SHA512

abedeb5744a4879cf58e778681bd8442c9f86700b05a251825e36ce6e47f84345d50518c53043e96279996a6d1c84932bba4e88d557d9c6252026bd28cf9fa76
SSDEEP

1536:VS5oDjpN2DBt5imXue9hwn0Bt5iGFXyladCD:6ipN2HUe9hwn8VywU

Score

1^/10

Malware Config

Signatures

Files

3db8e1edc3b3ca7f02874cf77a1f13b2
.exe windows:6 windows x86 arch:x86

417365d9c1dd50b3baa3205d644853d4

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

94:b3:a2:fa:22:04:1e:2e:cb:8a:85:04:76:c2:e2:c7:87:8c:2b:ab:53:38:7d:42:39:d9:de:21:69:0f:92:41
Signer

Actual PE Digest

94:b3:a2:fa:22:04:1e:2e:cb:8a:85:04:76:c2:e2:c7:87:8c:2b:ab:53:38:7d:42:39:d9:de:21:69:0f:92:41

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSetInformation
FreeLibrary
GetModuleFileNameW
GetProcessHeap
GetModuleHandleW
LoadLibraryW
VerifyVersionInfoW
IsDebuggerPresent
SetLastError
GetLastError
SetUnhandledExceptionFilter
OutputDebugStringA
VerSetConditionMask
GetCurrentProcess
GetProcAddress
GetModuleHandleA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
GetStartupInfoW

advapi32

RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memset
__current_exception_context
memmove
__std_exception_copy
wcsstr
__current_exception
_except_handler4_common
wcsrchr
__CxxFrameHandler3
__std_terminate
__std_exception_destroy
_CxxThrowException
memcpy

api-ms-win-crt-runtime-l1-1-0

_initterm
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_set_app_type
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
exit
_initterm_e

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
_set_fmode
__p__commode

api-ms-win-crt-string-l1-1-0

wcslen
wcscmp
wcsncpy_s
wcsncat_s

api-ms-win-crt-heap-l1-1-0

free
_get_heap_handle
malloc
_callnewh
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

417365d9c1dd50b3baa3205d644853d4

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:eaCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

94:b3:a2:fa:22:04:1e:2e:cb:8a:85:04:76:c2:e2:c7:87:8c:2b:ab:53:38:7d:42:39:d9:de:21:69:0f:92:41Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 964B

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

94:b3:a2:fa:22:04:1e:2e:cb:8a:85:04:76:c2:e2:c7:87:8c:2b:ab:53:38:7d:42:39:d9:de:21:69:0f:92:41
Signer

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 964B