e113166f62152698e866ff0848842846[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

e113166f62152698e866ff0848842846.bin
Size

2.7MB
MD5

e113166f62152698e866ff0848842846
SHA1

d5da2c5b237a40ec11ebf42e1dbf45314feb0a23
SHA256

41d5eb11fbdee29d43f6b2cbfec00257792bb5c36db9bc2389d7c7a0f90ecf28
SHA512

6ff78dfe5929c946c27d9ec181f531372a80fcf11458aeef6f2dfbac96cedfa8a943d961d2d9158a0bb317d24f3c7b199bec1f9988dc544062f9fb5866227531
SSDEEP

49152:+kXri7vK+Hbc3a70wglq274jKa9nYqKWlpWa:+kXri7K+HbcK70wOqjVmrwU

Score

1^/10

Malware Config

Signatures

Files

e113166f62152698e866ff0848842846.bin
.exe windows:4 windows x86 arch:x86

2a236cac1f37a7fc1f32163f6eaa98a0

Code Sign

42:81:90:c7:6b:e1:70:d2:34:31:6f:b3:57:4f:8f:dd
Certificate

Issuer

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

15/11/2022, 18:07

Not After

15/11/2023, 18:06

Subject

SERIALNUMBER=L22000439212,CN=Digital Media Pros LLC,O=Digital Media Pros LLC,L=Delray Beach,ST=Florida,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#1307466c6f72696461,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

Issuer

CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

26/03/2019, 17:44

Not After

22/03/2034, 17:44

Subject

CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

09/12/2022, 18:30

Not After

06/12/2032, 18:30

Subject

CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

13/11/2019, 18:50

Not After

12/11/2034, 18:50

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

60:10:46:fd:06:84:42:c5:2f:a8:f4:73:83:59:b5:1f:33:30:bf:9b:56:ad:aa:80:b0:8d:99:e9:43:87:b9:7d
Signer

Actual PE Digest

60:10:46:fd:06:84:42:c5:2f:a8:f4:73:83:59:b5:1f:33:30:bf:9b:56:ad:aa:80:b0:8d:99:e9:43:87:b9:7d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentThread
EnumResourceTypesA
TlsSetValue
MulDiv
GetDateFormatA
HeapFree
LoadLibraryA
TryEnterCriticalSection
GetModuleHandleA
Sleep
SetLastError
GetProcAddress
IsDebuggerPresent
FindResourceExA
WaitForSingleObject
SetThreadPriority
GlobalSize
TerminateThread
CreateDirectoryW
RtlUnwind
FileTimeToLocalFileTime
GetFileAttributesW
ReadFile
GetCurrentThreadId
GetWindowsDirectoryA
MultiByteToWideChar
CreateEventA
IsBadReadPtr
SetThreadLocale
Process32FirstW
GetExitCodeThread
GlobalLock
GlobalUnlock
GetLocalTime
FileTimeToDosDateTime
LocalAlloc
FreeResource
EnumCalendarInfoA
MoveFileW
OpenThread
GetStartupInfoA
LockResource
GlobalAlloc
GetTickCount64
LoadLibraryW
GetDateFormatW
GlobalDeleteAtom
CreateFileW
GetLocaleInfoA
FindClose
GetConsoleCP
GetEnvironmentStringsW
ExitProcess
CompareStringA
LocalFree
CreateThread
GetUserDefaultLCID
VirtualProtect
FreeEnvironmentStringsW
FindFirstFileExW
GetThreadPriority
GetProcessHeap
GetFullPathNameW
DeleteCriticalSection
GetCurrentProcess
InitializeCriticalSection
FindNextFileA
SetEvent
GetSystemInfo
EnterCriticalSection
GetOEMCP
EnumResourceNamesA
CreateMutexA
GetStdHandle
LeaveCriticalSection
GetLocaleInfoW
ExitThread
CompareStringW
GetCPInfo
CloseHandle
PeekNamedPipe
VirtualFree
GetACP
TlsAlloc
SetFilePointer
GetConsoleOutputCP
GetVersionExA
GetTimeZoneInformation
FormatMessageA
SetEndOfFile
GlobalAddAtomA
WriteFile
SuspendThread
GetCommandLineW
GetThreadLocale
FindResourceA
EnumResourceLanguagesA
CreateToolhelp32Snapshot
GetExitCodeProcess
GetConsoleMode
GetCurrentProcessId
TlsGetValue
GetLastError
SizeofResource
WideCharToMultiByte
GetModuleFileNameA
FormatMessageW
LoadResource
GetFileSize
RaiseException
FindNextFileW
Process32NextW
DeviceIoControl
VirtualAlloc
CreateFileA
CreateProcessW
GetTickCount
ReadProcessMemory
FreeLibrary
GetModuleFileNameW
GetCurrentDirectoryW
FindFirstFileA
GetCommandLineA
ResetEvent
HeapAlloc
GlobalReAlloc
ResumeThread
GetDriveTypeA

oleaut32

VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
VariantClear
SafeArrayPtrOfIndex
SysAllocStringLen
VariantChangeTypeEx
SafeArrayAccessData
SysReAllocStringLen
SysFreeString
SafeArrayPutElement
SafeArrayCreate
VariantInit
SafeArrayUnaccessData
SafeArrayGetElement

user32

GetWindowThreadProcessId
CharUpperBuffW
IsWindow
GetWindowLongW
SetWindowTextW
SetWindowPos
FillRect
RegisterClassA
DispatchMessageW
GetClipboardFormatNameA
GetSysColor
GetClassInfoW
DrawTextW
GetClassInfoA
PeekMessageA
SetMenu
GetSystemMetrics
LoadIconA
GetTopWindow
CreateWindowExW
GetDCEx
CharLowerBuffA
DestroyCaret
ClientToScreen
DestroyWindow
ShowCaret
MessageBoxA
IsWindowVisible
GetCursorPos
CharUpperA
GetPropA
DefWindowProcA
GetMenuItemInfoA
WindowFromPoint
DrawMenuBar
DestroyIcon
SetCaretPos
DefWindowProcW
GetWindow
GetLastActivePopup
OffsetRect
GetSysColorBrush
MoveWindow
DrawEdge
SendMessageW
BeginPaint
GetClassNameA
SetMenuItemInfoW
SetParent
GetCapture
ScreenToClient
DestroyMenu
CreateWindowExA
GetClassLongA
SetScrollInfo
EndPaint
CountClipboardFormats
BringWindowToTop
ChildWindowFromPointEx
GetMenuItemInfoW
InflateRect
IsZoomed
RegisterClipboardFormatA
ReleaseDC
GetMenu
IsClipboardFormatAvailable
RedrawWindow
GetForegroundWindow
DrawIconEx
CreatePopupMenu
PostMessageA
SetPropA
CallWindowProcA
GetSubMenu
SendMessageA
CharLowerA
SetWindowLongA
LoadCursorA
IsMenu
DrawStateW
SystemParametersInfoA
EnableScrollBar
PeekMessageW
CopyImage
IntersectRect
RemoveMenu
GetKeyState
ScrollWindowEx
SetFocus
EndDeferWindowPos
GetActiveWindow
TranslateMDISysAccel
LoadImageA
FrameRect
GetIconInfo
SetActiveWindow
CallWindowProcW
TranslateMessage
RemovePropA
DefFrameProcW
DeleteMenu
SetWindowLongW
SetCapture
GetDoubleClickTime
TrackPopupMenuEx
SetCursor
EnumThreadWindows
SetRect
KillTimer
IsIconic
DrawFrameControl
DrawFocusRect
DestroyCursor
ShowOwnedPopups
GetWindowRect
LoadBitmapA
InvalidateRgn
GetScrollInfo
MsgWaitForMultipleObjects
SwitchToThisWindow
GetWindowLongA
MessageBoxW
InsertMenuItemW
GetClipboardData
EnumClipboardFormats
BeginDeferWindowPos
SetWindowRgn
DefMDIChildProcW
CloseClipboard
CharUpperBuffA
EnableWindow
GetUpdateRect
UnregisterClassA
GetWindowDC
ShowScrollBar
GetDesktopWindow
CharLowerBuffW
EnumPropsA
GetSystemMenu
UpdateWindow
GetParent
UnregisterClassW
CharToOemA
IsWindowEnabled
CallNextHookEx
GetWindowTextW
FlashWindowEx
ReleaseCapture
SetClassLongA
EnableMenuItem
FindWindowExW
GetMenuItemRect
SetForegroundWindow
GetDC
GetClientRect
SetWindowPlacement
EmptyClipboard
MessageBeep
ShowWindow
HideCaret
GetCaretPos
PostQuitMessage
SetTimer
MapWindowPoints
DeferWindowPos
GetWindowTextLengthW
CreateMenu
WindowFromDC
SetClipboardData
SetCursorPos
OpenClipboard
GetFocus
AdjustWindowRectEx
RegisterClassW
SetSysColors
InvalidateRect
CreateIconIndirect
ShowWindowAsync
GetWindowPlacement
GetMenuItemCount
CreateCaret

advapi32

OpenProcessToken
GetUserNameA
QueryServiceStatus
AdjustTokenPrivileges
RegQueryValueExW
OpenServiceW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegCreateKeyExW
LookupPrivilegeValueA
OpenSCManagerW
GetTokenInformation
RegFlushKey

gdi32

GetTextColor
IntersectClipRect
SetTextAlign
CreateDIBitmap
CreateEllipticRgn
SetBrushOrgEx
SetBkColor
ExcludeClipRect
ExtCreateRegion
GetStockObject
SetTextColor
GetCurrentObject
RectVisible
CreateCompatibleDC
GetTextExtentPoint32W
GetMapMode
SetStretchBltMode
SelectPalette
GetRandomRgn
LPtoDP
EnumFontFamiliesA
CreatePolygonRgn
GetBkColor
GetTextMetricsA
DeleteDC
GetRgnBox
GetObjectA
GetCharABCWidthsA
GetObjectType
SetPolyFillMode
SetPixel
SetArcDirection
BitBlt
SetMapMode
SetBkMode
GetTextExtentExPointW
SetViewportOrgEx
GetCharABCWidthsW
EqualRgn
RectInRegion
ExtFloodFill
StretchBlt
ExtSelectClipRgn
RoundRect
CreateCompatibleBitmap
Ellipse
OffsetViewportOrgEx
ExtCreatePen
SetWindowOrgEx
GetViewportOrgEx
FillRgn
PolyBezier
GetPixel
GetClipRgn
CreateDIBSection
Arc
SelectClipRgn
CreatePenIndirect
CreateRoundRectRgn
CreateBitmap
CreateRectRgn
GetWindowExtEx
MaskBlt
GetDIBits
PaintRgn
CreateBrushIndirect
ExtTextOutW
OffsetRgn
TextOutW
Polygon
Chord
GetROP2
Polyline
CreatePen
RestoreDC
SetWindowExtEx
LineTo
GetDCOrgEx
SaveDC
GetRegionData
SetViewportExtEx
CombineRgn
CreatePatternBrush
CreateSolidBrush
CreateFontIndirectA
GetTextExtentPointA
GetDeviceCaps
GetClipBox
GetTextAlign
EnumFontFamiliesExW
GetWindowOrgEx
SelectObject
PatBlt
GetObjectW
DPtoLP
CreateFontIndirectW
SetRectRgn
MoveToEx
PtInRegion
Pie
Rectangle
ExtTextOutA
DeleteObject
SetROP2
GetViewportExtEx
RealizePalette
GetBitmapBits
SetTextCharacterExtra

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

shell32

DragQueryFileW
ShellExecuteW
DragQueryFileA
DragAcceptFiles
DragFinish
ShellExecuteExW
SHGetFolderPathW
SHGetKnownFolderPath

ole32

OleInitialize
OleUninitialize

comctl32

ImageList_DrawIndirect
ImageList_Replace
ImageList_Copy
ImageList_EndDrag
ImageList_Add
InitCommonControls
ImageList_DragLeave
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Remove
_TrackMouseEvent
ImageList_Create
ImageList_AddMasked
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_DragMove
ImageList_DrawEx
ImageList_DragEnter
ImageList_BeginDrag

psapi

EnumProcessModules

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 708KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 374KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a236cac1f37a7fc1f32163f6eaa98a0

Code Sign

42:81:90:c7:6b:e1:70:d2:34:31:6f:b3:57:4f:8f:ddCertificate

Extended Key Usages

Key Usages

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04Certificate

Extended Key Usages

Key Usages

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate

Extended Key Usages

Key Usages

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate

Extended Key Usages

Key Usages

60:10:46:fd:06:84:42:c5:2f:a8:f4:73:83:59:b5:1f:33:30:bf:9b:56:ad:aa:80:b0:8d:99:e9:43:87:b9:7dSigner

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

advapi32

gdi32

version

shell32

ole32

comctl32

psapi

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.data Size: 708KB - Virtual size: 708KB

.rdata Size: 374KB - Virtual size: 373KB

.bss Size: - Virtual size: 47KB

.CRT Size: 512B - Virtual size: 12B

.idata Size: 12KB - Virtual size: 12KB

.rsrc Size: 130KB - Virtual size: 129KB

.reloc Size: 132KB - Virtual size: 132KB

42:81:90:c7:6b:e1:70:d2:34:31:6f:b3:57:4f:8f:dd
Certificate

42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Certificate

1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Certificate

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Certificate

60:10:46:fd:06:84:42:c5:2f:a8:f4:73:83:59:b5:1f:33:30:bf:9b:56:ad:aa:80:b0:8d:99:e9:43:87:b9:7d
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 708KB - Virtual size: 708KB

.rdata
Size: 374KB - Virtual size: 373KB

.bss
Size: - Virtual size: 47KB

.CRT
Size: 512B - Virtual size: 12B

.idata
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 130KB - Virtual size: 129KB

.reloc
Size: 132KB - Virtual size: 132KB