1a9a1ef601d88dab27a8057a1b86f69c297f7340502073ff67dc40a8b8188cc8

Sharing

Copy URL Twitter E-mail

General

Target

1a9a1ef601d88dab27a8057a1b86f69c297f7340502073ff67dc40a8b8188cc8
Size

168KB
MD5

0e9bdd2137078909d4978238d498ed3b
SHA1

ac5655007c629ad303b0f703f141495bb7537bb6
SHA256

1a9a1ef601d88dab27a8057a1b86f69c297f7340502073ff67dc40a8b8188cc8
SHA512

23cf7c6a83e8812de4fc0eab0e3861d218e5fb883e9bf29d1c875bd5909b57ed5b33b2a2489fee255480919cc5bda23fb7bc96f7c83d5ecaa201cfebf9168baa
SSDEEP

3072:zt1huDJw1Vy18h8LVyLoIU05GiOiu1IpaB030mSZaTNdFdeb5S/GekdZN4:zhQNIBS1I0I0m7TNHTvkdZ

Score

1^/10

Malware Config

Signatures

Files

1a9a1ef601d88dab27a8057a1b86f69c297f7340502073ff67dc40a8b8188cc8
.dll windows:6 windows x86 arch:x86

1b69f62cfd6593e51cb34758cab032f2

Code Sign

1c:9a:c2:ed:a2:78:3f:a8:a2:ad:76:7c:a5:da:63:72
Certificate

Issuer

CN=JuniorDjjr,O=MixMods,C=55,1.2.840.113549.1.9.1=#0c16636f6e7461746f406d69786d6f64732e636f6d2e6272

Not Before

30/03/2021, 08:35

Not After

31/03/2024, 08:35

Subject

CN=JuniorDjjr,O=MixMods,C=55,1.2.840.113549.1.9.1=#0c16636f6e7461746f406d69786d6f64732e636f6d2e6272

Key Usages

KeyUsageDigitalSignature
KeyUsageDataEncipherment
KeyUsageKeyAgreement

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/09/2020, 07:00

Not After

09/09/2025, 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

67:dd:e9:ec:92:80:1b:40:49:3a:8c:54:e5:18:c5:e3:8f:1b:cf:55
Signer

Actual PE Digest

67:dd:e9:ec:92:80:1b:40:49:3a:8c:54:e5:18:c5:e3:8f:1b:cf:55

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetModuleHandleA
CreateFileW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedFlushSList
RaiseException
GetLastError
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
ExitProcess
WriteFile
OutputDebugStringW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
GetFileSizeEx
SetFilePointerEx
DecodePointer

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b69f62cfd6593e51cb34758cab032f2

Code Sign

1c:9a:c2:ed:a2:78:3f:a8:a2:ad:76:7c:a5:da:63:72Certificate

Key Usages

07Certificate

Key Usages

0b:e6:3a:c9:92:ef:67:baCertificate

Extended Key Usages

Key Usages

67:dd:e9:ec:92:80:1b:40:49:3a:8c:54:e5:18:c5:e3:8f:1b:cf:55Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 102KB - Virtual size: 102KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 15KB - Virtual size: 18KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 7KB - Virtual size: 7KB

1c:9a:c2:ed:a2:78:3f:a8:a2:ad:76:7c:a5:da:63:72
Certificate

07
Certificate

0b:e6:3a:c9:92:ef:67:ba
Certificate

67:dd:e9:ec:92:80:1b:40:49:3a:8c:54:e5:18:c5:e3:8f:1b:cf:55
Signer

.text
Size: 102KB - Virtual size: 102KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 15KB - Virtual size: 18KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 7KB - Virtual size: 7KB