1d438e29c19b00bd0bd402de0f259bd5d60194d0047d095fed64a3e3b6612ef3

Sharing

Copy URL Twitter E-mail

General

Target

1d438e29c19b00bd0bd402de0f259bd5d60194d0047d095fed64a3e3b6612ef3
Size

45KB
MD5

cf1fba5c7817b7fca64a13680a529d05
SHA1

e7096dc28cdfdbf9f180c42d25a3dd5689a10366
SHA256

1d438e29c19b00bd0bd402de0f259bd5d60194d0047d095fed64a3e3b6612ef3
SHA512

8db64b5b8fb1ffa54f1b2a8d31a523bb7c6b569adcade1c8bbbc7a028afad37ba5335a26bc85259292300e1a3dcd1b9c434dc86621fecb51905178bb27551df5
SSDEEP

768:Dllzabn3dkm9GlT9X1MdS4o8BWPKbKqBCgmdE8haq2JQWFoKgc:DlVckgm0S4oqiTF8q2JQSo+

Score

1^/10

Malware Config

Signatures

Files

1d438e29c19b00bd0bd402de0f259bd5d60194d0047d095fed64a3e3b6612ef3
.dll windows:6 windows x86 arch:x86

2b56ed8b4d5534034a9ac2a5015e4856

Code Sign

07:cd:e1:a1:a0:f3:36:d7:40:b9:57:23:74:13:8d:6b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

21/07/2020, 23:59

Subject

CN=Electronic Arts\, Inc.,OU=EAC,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:32:97:89:bd:48:72:b2:df:e8:ec:53:ea:3f:ce:24:c9:ba:55:f2
Signer

Actual PE Digest

4b:32:97:89:bd:48:72:b2:df:e8:ec:53:ea:3f:ce:24:c9:ba:55:f2

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetModuleFileNameW
ResumeThread
GetLastError
LoadLibraryA
CloseHandle
GetProcAddress
FreeLibrary
CreateProcessA
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter

user32

MessageBoxW

msvcp140

?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
?_Xlength_error@std@@YAXPBD@Z

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA

vcruntime140

memset
__std_type_info_destroy_list
__std_exception_destroy
__std_terminate
memcpy
_CxxThrowException
_except_handler4_common
__std_exception_copy
__CxxFrameHandler3
memmove

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll

Exports

Exports

SteamAPI_Init

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b56ed8b4d5534034a9ac2a5015e4856

Code Sign

07:cd:e1:a1:a0:f3:36:d7:40:b9:57:23:74:13:8d:6bCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

4b:32:97:89:bd:48:72:b2:df:e8:ec:53:ea:3f:ce:24:c9:ba:55:f2Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

wininet

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

07:cd:e1:a1:a0:f3:36:d7:40:b9:57:23:74:13:8d:6b
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

4b:32:97:89:bd:48:72:b2:df:e8:ec:53:ea:3f:ce:24:c9:ba:55:f2
Signer

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB