4a77ac0f55526b22bec37edacdea21af8dd0785a1fa407e79616ef0d82125690

Sharing

Copy URL Twitter E-mail

General

Target

4a77ac0f55526b22bec37edacdea21af8dd0785a1fa407e79616ef0d82125690
Size

4.2MB
MD5

fc0add0f43fec6d8eeeb1d75d24c40d4
SHA1

d23086a7193a0c24603485c194a68e1a4bd54709
SHA256

4a77ac0f55526b22bec37edacdea21af8dd0785a1fa407e79616ef0d82125690
SHA512

c78a02fe64acfcbd97eb92159208d4e42877df795b09627de1deb0938d0179c92d9f77ac75f5838ac123d6a317de301c3e60ff1fb3898e890a81c367c41d3df5
SSDEEP

98304:UwoXpkWNTgOS+nVloQaNd4FZLBWi1jjFLOAkGkzdnEVomFHKnPovK:UwohThKSFZLBWidjFLOyomFHKnPMK

Score

1^/10

Malware Config

Signatures

Files

4a77ac0f55526b22bec37edacdea21af8dd0785a1fa407e79616ef0d82125690
.exe windows:6 windows x86 arch:x86

d8c08218d0d1aed2b7236c518b904a75

Code Sign

01:00:77:8b:e2:33:c3:ea:da:78:d3:aa:8e:7e:cc:3a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/02/2021, 00:00

Not After

25/04/2024, 23:59

Subject

SERIALNUMBER=OC333740,CN=FabulaTech\, LLP,O=FabulaTech\, LLP,L=London,C=GB,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024742

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b6:d2:72:75:62:7d:04:bc:eb:f1:45:8d:7a:a0:16:b7:4e:6b:b2:e8:2f:25:e2:aa:fe:41:de:64:67:e1:63:b2
Signer

Actual PE Digest

b6:d2:72:75:62:7d:04:bc:eb:f1:45:8d:7a:a0:16:b7:4e:6b:b2:e8:2f:25:e2:aa:fe:41:de:64:67:e1:63:b2

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

setsockopt
sendto
inet_ntoa
htons
WSACreateEvent
WSAGetOverlappedResult
WSARecvFrom
WSASocketW
WSAWaitForMultipleEvents
getnameinfo
WSAStartup
shutdown
WSACleanup
WSAGetLastError
htonl
WSACloseEvent
closesocket
socket
bind

kernel32

OutputDebugStringW
LoadLibraryExA
ExpandEnvironmentStringsA
RtlUnwind
InterlockedPushEntrySList
QueryPerformanceFrequency
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetSystemInfo
VirtualAlloc
VirtualQuery
GetCommandLineA
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
ExitProcess
GetACP
GetStringTypeW
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetLastError
GetVersionExW
LocalAlloc
LocalFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
DecodePointer
RaiseException
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
LoadResource
LockResource
SizeofResource
FindResourceW
FreeLibrary
GetProcAddress
LoadLibraryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
FormatMessageW
SetLastError
GlobalLock
GlobalUnlock
CloseHandle
GetCurrentProcess
GetModuleHandleW
lstrcpynW
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
Sleep
SetEvent
WaitForSingleObject
CreateEventW
ResumeThread
WaitForMultipleObjects
GetCommandLineW
ResetEvent
OpenEventW
GetDateFormatW
CreateFileW
ReadFile
WriteFile
GetOverlappedResult
GetCurrentProcessId
TerminateProcess
CreateThread
ProcessIdToSessionId
CreateMailslotW
GetTickCount
ReleaseMutex
InitializeCriticalSectionAndSpinCount
GlobalAlloc
GlobalSize
GlobalFree
MulDiv
CopyFileW
OutputDebugStringA
EncodePointer
GetCurrentThreadId
GetSystemDirectoryW
FreeResource
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
LoadLibraryA
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GlobalGetAtomNameW
SetThreadPriority
SearchPathW
VerSetConditionMask
lstrcpyW
VerifyVersionInfoW
GetProfileIntW
GetFileAttributesW
GetFileSize
GlobalReAlloc
GetCurrentDirectoryW
GetCurrentThread
lstrcmpA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
SetFilePointer
GetTempPathW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalReAlloc
GlobalFlags
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
DeleteFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
lstrcmpiW
GetFileTime
GetTempFileNameW
FindResourceExW
GetFileAttributesExW
GetFileSizeEx
SetErrorMode
GetWindowsDirectoryW
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
WriteConsoleW

user32

RegisterClipboardFormatW
CopyImage
DrawStateW
SetRect
EnumDisplayMonitors
GetSysColorBrush
SetLayeredWindowAttributes
EmptyClipboard
SetClipboardData
WindowFromPoint
TranslateMessage
GetMessageW
ReuseDDElParam
UnpackDDElParam
DestroyIcon
GetDesktopWindow
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
GetActiveWindow
BringWindowToTop
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
GetClassInfoExW
GetClassInfoW
RegisterClassW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
IsDialogMessageW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
SetFocus
DrawEdge
CheckDlgButton
GetDlgItem
EndDialog
MoveWindow
ShowWindow
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
FillRect
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
GetNextDlgTabItem
PostQuitMessage
ShowOwnedPopups
DrawTextW
RemoveMenu
InsertMenuW
GetMenuStringW
DrawIconEx
DestroyMenu
SetMenuDefaultItem
AppendMenuW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
LoadMenuW
GetWindow
DestroyWindow
SendMessageTimeoutW
wsprintfW
DestroyCursor
GetSysColor
MessageBoxW
PostThreadMessageW
RegisterWindowMessageW
ReleaseDC
MapDialogRect
LoadIconW
LoadBitmapW
GetClipboardData
CloseClipboard
OpenClipboard
LoadImageW
GetMonitorInfoW
MonitorFromPoint
SystemParametersInfoW
LoadCursorW
GetWindowThreadProcessId
GetParent
PtInRect
IsRectEmpty
OffsetRect
IntersectRect
InflateRect
CopyRect
SetRectEmpty
MapWindowPoints
ScreenToClient
ClientToScreen
SetCursor
DrawFrameControl
SetWindowRgn
DrawFocusRect
SetClassLongW
SetParent
TrackMouseEvent
GetSystemMenu
DeleteMenu
MessageBeep
NotifyWinEvent
UpdateLayeredWindow
EnableScrollBar
UnionRect
FrameRect
ModifyMenuW
ToUnicodeEx
GetWindowRect
GetClientRect
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
WaitMessage
SendDlgItemMessageA
GetDlgCtrlID
RedrawWindow
InvalidateRect
GetDC
AllowSetForegroundWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
GetMenuDefaultItem
GetMenuItemInfoW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetSystemMetrics
EnableWindow
ReleaseCapture
SetCapture
GetAsyncKeyState
GetKeyState
GetFocus
CharUpperW
IsZoomed
IsIconic
IsWindowVisible
GetKeyNameTextW
RealChildWindowFromPoint
SendMessageW
CallWindowProcW
CreateDialogIndirectParamW
CreateWindowExW
SetTimer
KillTimer
GetCursorPos
SetWindowLongW
PostMessageW
AttachThreadInput
UnregisterClassW
IsWindow
IsMenu
SetCursorPos
InvertRect
HideCaret
DrawIcon
GetWindowRgn
SubtractRect
CreateMenu
GetUpdateRect
MapVirtualKeyExW
IsCharLowerW
GetNextDlgGroupItem
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
CharUpperBuffW
CopyIcon
GetIconInfo
GetDoubleClickTime
IsClipboardFormatAvailable
SetWindowPos
LockWindowUpdate

gdi32

SetPixelV
GetTextFaceW
GetSystemPaletteEntries
GetNearestPaletteIndex
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
EnumFontFamiliesExW
GetPaletteEntries
CreatePalette
DPtoLP
SetRectRgn
RoundRect
Rectangle
OffsetRgn
GetRgnBox
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetBkColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
RealizePalette
PatBlt
CombineRgn
GetTextMetricsW
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
CreateDCW
CopyMetaFileW
GetStockObject
GetObjectW
SelectObject
GetCurrentObject
DeleteObject
CreateFontIndirectW
GetDeviceCaps
CreateFontW
GetTextExtentPoint32W
GetTextColor
DeleteDC
CreateRectRgnIndirect

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueExA
RegOpenKeyExA
AllocateAndInitializeSid
DeleteAce
FreeSid
RegEnumValueW
RegEnumKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
RegSetValueExW
RegNotifyChangeKeyValue
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
GetSecurityDescriptorDacl
GetLengthSid
AddAccessAllowedAce

shell32

ShellExecuteW
CommandLineToArgvW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHAppBarMessage
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
Shell_NotifyIconW

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathIsUNCW
PathFindExtensionW

uxtheme

GetThemeSysColor
IsAppThemed
GetThemePartSize
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
DrawThemeText
DrawThemeBackground
GetCurrentThemeName
GetThemeColor
CloseThemeData
OpenThemeData
DrawThemeParentBackground

ole32

DoDragDrop
CreateStreamOnHGlobal
CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize
CoDisconnectObject
OleGetClipboard
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
CoTaskMemAlloc
IsAccelerator
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoInitializeEx

oleaut32

LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysStringLen
VariantCopy
VarBstrFromDate
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysFreeString

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

winmm

PlaySoundW

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8c08218d0d1aed2b7236c518b904a75

Code Sign

01:00:77:8b:e2:33:c3:ea:da:78:d3:aa:8e:7e:cc:3aCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

b6:d2:72:75:62:7d:04:bc:eb:f1:45:8d:7a:a0:16:b7:4e:6b:b2:e8:2f:25:e2:aa:fe:41:de:64:67:e1:63:b2Signer

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

winmm

imm32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 348KB - Virtual size: 348KB

.data Size: 28KB - Virtual size: 49KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.reloc Size: 146KB - Virtual size: 146KB

01:00:77:8b:e2:33:c3:ea:da:78:d3:aa:8e:7e:cc:3a
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

b6:d2:72:75:62:7d:04:bc:eb:f1:45:8d:7a:a0:16:b7:4e:6b:b2:e8:2f:25:e2:aa:fe:41:de:64:67:e1:63:b2
Signer

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 348KB - Virtual size: 348KB

.data
Size: 28KB - Virtual size: 49KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

.reloc
Size: 146KB - Virtual size: 146KB