General

Malware Config

Signatures

Files

• 000e39cf56971261e509fd2f258a22f18996588d41a049470debf0f27af015e3

  .exe windows:6 windows x86 arch:x86

  f694bea4efc768e9484cedf409bd9016

  
  

  Code Sign

  0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29

  Certificate

  Issuer

  CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0b:02:2e:55:67:d2:57:70:10:64:4d:e5:2c:9a:36:56

  Certificate

  Issuer

  CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  13-05-2022 00:00

  Not After

  22-05-2024 23:59

  Subject

  SERIALNUMBER=C3105953,CN=FOXIT SOFTWARE INC.,O=FOXIT SOFTWARE INC.,L=Fremont,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29

  Certificate

  Issuer

  CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0b:02:2e:55:67:d2:57:70:10:64:4d:e5:2c:9a:36:56

  Certificate

  Issuer

  CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  13-05-2022 00:00

  Not After

  22-05-2024 23:59

  Subject

  SERIALNUMBER=C3105953,CN=FOXIT SOFTWARE INC.,O=FOXIT SOFTWARE INC.,L=Fremont,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  85:ac:a4:48:5d:c4:34:b3:d8:f0:bd:20:e7:cb:51:c8:58:88:2f:64:fc:34:f8:97:cc:c2:c8:73:00:7c:7f:a2

  Signer

  Actual PE Digest

  85:ac:a4:48:5d:c4:34:b3:d8:f0:bd:20:e7:cb:51:c8:58:88:2f:64:fc:34:f8:97:cc:c2:c8:73:00:7c:7f:a2

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  57:ae:21:32:c1:8d:cf:19:d8:42:ba:35:f8:f7:11:aa:dc:43:9e:86

  Signer

  Actual PE Digest

  57:ae:21:32:c1:8d:cf:19:d8:42:ba:35:f8:f7:11:aa:dc:43:9e:86

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetStringTypeW

  SetEnvironmentVariableW

  SetEnvironmentVariableA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  FindFirstFileExW

  ReadConsoleW

  GetConsoleMode

  GetConsoleCP

  LCMapStringW

  GetStdHandle

  ExitProcess

  QueryPerformanceFrequency

  VirtualQuery

  GetCommandLineW

  GetCommandLineA

  HeapQueryInformation

  GetFileType

  SetStdHandle

  GetModuleHandleExW

  FreeLibraryAndExitThread

  RtlUnwind

  GetACP

  VirtualFree

  VirtualAlloc

  ExitThread

  SetFilePointerEx

  OutputDebugStringW

  WaitForSingleObject

  CloseHandle

  WriteConsoleW

  ResumeThread

  MultiByteToWideChar

  WideCharToMultiByte

  CreateFileW

  GetLastError

  LocalFree

  GetModuleFileNameW

  SizeofResource

  LockResource

  LoadResource

  FindResourceW

  GetLocalTime

  DeleteFileW

  Sleep

  QueueUserWorkItem

  LocalAlloc

  CreateToolhelp32Snapshot

  Process32FirstW

  ProcessIdToSessionId

  Process32NextW

  GetTickCount

  WTSGetActiveConsoleSessionId

  OpenProcess

  GetCurrentProcess

  lstrcmpiW

  HeapFree

  InitializeCriticalSectionEx

  HeapSize

  HeapReAlloc

  RaiseException

  HeapAlloc

  DecodePointer

  DeleteCriticalSection

  GetProcessHeap

  CreateThread

  SetThreadPriority

  FindFirstFileW

  FindClose

  CreateDirectoryW

  SetFileAttributesW

  GetSystemInfo

  GetModuleHandleW

  GetVersionExW

  GlobalAlloc

  GlobalFree

  GetProcAddress

  CreateEventW

  GetTimeZoneInformation

  GlobalSize

  GlobalLock

  GlobalUnlock

  MulDiv

  FormatMessageW

  CopyFileW

  SetLastError

  FileTimeToLocalFileTime

  FindNextFileW

  SystemTimeToTzSpecificLocalTime

  FileTimeToSystemTime

  OutputDebugStringA

  InitializeCriticalSectionAndSpinCount

  GetModuleHandleA

  LoadLibraryW

  InitializeCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GlobalReAlloc

  GlobalHandle

  LocalReAlloc

  GetCurrentProcessId

  lstrcmpA

  GlobalGetAtomNameW

  FlushFileBuffers

  GetFileSize

  GetFullPathNameW

  GetVolumeInformationW

  LockFile

  ReadFile

  SetEndOfFile

  SetFilePointer

  UnlockFile

  WriteFile

  DuplicateHandle

  LoadLibraryExW

  LoadLibraryA

  GetFileAttributesW

  GetFileAttributesExW

  GetFileSizeEx

  GetFileTime

  GlobalAddAtomW

  EncodePointer

  GetSystemDirectoryW

  CompareStringW

  GetUserDefaultUILanguage

  FreeLibrary

  GlobalFlags

  lstrcmpW

  GetCurrentThreadId

  GlobalDeleteAtom

  FreeResource

  GlobalFindAtomW

  GetCurrentDirectoryW

  VirtualProtect

  lstrcpyW

  FindResourceExW

  GetWindowsDirectoryW

  VerSetConditionMask

  VerifyVersionInfoW

  GetTempFileNameW

  GetTempPathW

  GetProfileIntW

  SearchPathW

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  TerminateProcess

  IsProcessorFeaturePresent

  IsDebuggerPresent

  GetStartupInfoW

  QueryPerformanceCounter

  GetSystemTimeAsFileTime

  InitializeSListHead

  user32

  TranslateAcceleratorW

  LoadAcceleratorsW

  MonitorFromPoint

  UpdateLayeredWindow

  UnionRect

  DrawIcon

  FrameRect

  CopyIcon

  SetCursorPos

  BringWindowToTop

  GetSystemMenu

  IsZoomed

  DrawFrameControl

  DrawEdge

  DrawStateW

  EmptyClipboard

  SetClipboardData

  CloseClipboard

  OpenClipboard

  SetParent

  SetWindowRgn

  SetClassLongW

  EnumDisplayMonitors

  SetLayeredWindowAttributes

  LoadMenuW

  GetKeyNameTextW

  MapVirtualKeyW

  NotifyWinEvent

  InvertRect

  HideCaret

  EnableScrollBar

  MessageBeep

  GetIconInfo

  DrawIconEx

  IsRectEmpty

  DrawFocusRect

  WindowFromPoint

  ReleaseCapture

  SetCapture

  GetNextDlgGroupItem

  GetMenuDefaultItem

  CreatePopupMenu

  LoadImageW

  TrackMouseEvent

  DrawMenuBar

  DefFrameProcW

  DefMDIChildProcW

  GrayStringW

  TabbedTextOutW

  GetWindowDC

  BeginPaint

  EndPaint

  MapDialogRect

  GetAsyncKeyState

  OffsetRect

  SetRectEmpty

  InsertMenuItemW

  GetMenuItemInfoW

  DestroyMenu

  GetNextDlgTabItem

  EndDialog

  CreateDialogIndirectParamW

  InvalidateRect

  KillTimer

  SetTimer

  DeleteMenu

  SetCursor

  ShowOwnedPopups

  SystemParametersInfoW

  CopyImage

  GetMonitorInfoW

  MonitorFromWindow

  WinHelpW

  GetScrollInfo

  SetScrollInfo

  LoadIconW

  GetTopWindow

  GetClassLongW

  EqualRect

  MapWindowPoints

  AdjustWindowRectEx

  TranslateMDISysAccel

  GetPropW

  SetPropW

  ShowScrollBar

  MapVirtualKeyExW

  SetScrollRange

  ScrollWindow

  RedrawWindow

  SetActiveWindow

  UpdateWindow

  TrackPopupMenu

  SetMenu

  GetMenu

  GetCapture

  EndDeferWindowPos

  DeferWindowPos

  BeginDeferWindowPos

  SetWindowPlacement

  ToUnicodeEx

  GetKeyboardState

  CreateAcceleratorTableW

  DestroyAcceleratorTable

  CopyAcceleratorTableW

  SetRect

  LockWindowUpdate

  SetMenuDefaultItem

  GetDoubleClickTime

  ModifyMenuW

  RegisterClipboardFormatW

  CharUpperBuffW

  IsClipboardFormatAvailable

  GetUpdateRect

  UnpackDDElParam

  ReuseDDElParam

  GetComboBoxInfo

  PostThreadMessageW

  WaitMessage

  GetKeyboardLayout

  SendDlgItemMessageA

  IsCharLowerW

  ClientToScreen

  ScreenToClient

  FillRect

  DestroyIcon

  GetDlgCtrlID

  GetFocus

  SetWindowTextW

  PtInRect

  GetDesktopWindow

  GetClassNameW

  GetWindow

  RealChildWindowFromPoint

  GetMessageW

  TranslateMessage

  DispatchMessageW

  PeekMessageW

  IsWindowVisible

  GetActiveWindow

  GetKeyState

  ValidateRect

  GetCursorPos

  SetWindowsHookExW

  CallNextHookEx

  SetFocus

  SetScrollPos

  GetScrollPos

  IsWindow

  ShowWindow

  DrawTextW

  SetWindowPos

  GetDlgItem

  CheckDlgButton

  SetWindowLongW

  IsDialogMessageW

  CopyRect

  InflateRect

  IntersectRect

  PostMessageW

  PostQuitMessage

  IsIconic

  SetForegroundWindow

  CheckMenuItem

  EnableMenuItem

  SetMenuItemBitmaps

  GetMenuCheckMarkDimensions

  SetMenuItemInfoW

  LoadBitmapW

  RegisterWindowMessageW

  GetMessagePos

  GetMessageTime

  DefWindowProcW

  CallWindowProcW

  RegisterClassW

  GetClassInfoW

  GetClassInfoExW

  CreateWindowExW

  SubtractRect

  IsMenu

  IsChild

  DestroyWindow

  GetWindowPlacement

  GetScrollRange

  CreateMenu

  GetWindowRgn

  DestroyCursor

  DrawTextExW

  CharUpperW

  GetWindowTextLengthW

  GetWindowTextW

  GetLastActivePopup

  GetWindowThreadProcessId

  GetParent

  GetWindowLongW

  MessageBoxW

  IsWindowEnabled

  EnableWindow

  SendMessageW

  LoadCursorW

  GetSysColorBrush

  GetSysColor

  ReleaseDC

  GetDC

  GetSystemMetrics

  UnhookWindowsHookEx

  RemoveMenu

  AppendMenuW

  InsertMenuW

  GetWindowRect

  GetClientRect

  MoveWindow

  GetForegroundWindow

  GetMenuStringW

  GetMenuState

  GetSubMenu

  GetMenuItemID

  RemovePropW

  GetMenuItemCount

  gdi32

  GetTextFaceW

  GetViewportOrgEx

  GetWindowOrgEx

  SetPixelV

  SetPaletteEntries

  ExtFloodFill

  PtInRegion

  GetBoundsRect

  FrameRgn

  FillRgn

  RoundRect

  OffsetRgn

  GetRgnBox

  Rectangle

  LPtoDP

  CreateRoundRectRgn

  Polyline

  Polygon

  CreatePolygonRgn

  GetTextColor

  Ellipse

  CreateEllipticRgn

  SetDIBColorTable

  CreateDIBSection

  StretchBlt

  SetPixel

  GetTextCharsetInfo

  EnumFontFamiliesW

  CreateDIBitmap

  CreateCompatibleBitmap

  GetBkColor

  RealizePalette

  GetSystemPaletteEntries

  GetPaletteEntries

  GetNearestPaletteIndex

  CreatePalette

  EnumFontFamiliesExW

  GetTextMetricsW

  GetTextExtentPoint32W

  DPtoLP

  SetRectRgn

  PatBlt

  CreateRectRgnIndirect

  CreateFontIndirectW

  CombineRgn

  ScaleWindowExtEx

  ScaleViewportExtEx

  OffsetWindowOrgEx

  OffsetViewportOrgEx

  SetWindowOrgEx

  SetWindowExtEx

  SetViewportOrgEx

  SetViewportExtEx

  ExtTextOutW

  TextOutW

  MoveToEx

  GetObjectW

  SetTextAlign

  SetTextColor

  SetROP2

  SetPolyFillMode

  GetLayout

  SetLayout

  SetMapMode

  SetBkMode

  SetBkColor

  SelectPalette

  SelectObject

  ExtSelectClipRgn

  SelectClipRgn

  SaveDC

  RestoreDC

  RectVisible

  PtVisible

  LineTo

  IntersectClipRect

  GetWindowExtEx

  GetViewportExtEx

  GetStockObject

  GetPixel

  GetObjectType

  GetClipBox

  ExcludeClipRect

  Escape

  DeleteObject

  DeleteDC

  CreateSolidBrush

  CreateRectRgn

  CreatePatternBrush

  CreatePen

  CreateHatchBrush

  CreateCompatibleDC

  CreateBitmap

  BitBlt

  GetDeviceCaps

  CreateDCW

  CopyMetaFileW

  msimg32

  TransparentBlt

  AlphaBlend

  winspool.drv

  OpenPrinterW

  DocumentPropertiesW

  ClosePrinter

  advapi32

  StartServiceCtrlDispatcherW

  RegisterServiceCtrlHandlerW

  SetServiceStatus

  RegSetValueExW

  RegEnumKeyExW

  RegDeleteValueW

  RegDeleteKeyW

  RegCreateKeyExW

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExW

  CreateProcessAsUserW

  AdjustTokenPrivileges

  SetTokenInformation

  DuplicateTokenEx

  LookupPrivilegeValueW

  OpenProcessToken

  DeleteService

  QueryServiceStatus

  ControlService

  StartServiceW

  CreateServiceW

  ChangeServiceConfig2W

  CloseServiceHandle

  UnlockServiceDatabase

  ChangeServiceConfigW

  QueryServiceConfigW

  OpenServiceW

  EnumServicesStatusW

  LockServiceDatabase

  OpenSCManagerW

  DeregisterEventSource

  ReportEventW

  RegisterEventSourceW

  shell32

  SHAppBarMessage

  DragFinish

  DragQueryFileW

  SHBrowseForFolderW

  SHGetDesktopFolder

  SHGetSpecialFolderLocation

  SHGetPathFromIDListW

  SHGetFileInfoW

  ShellExecuteW

  SHGetSpecialFolderPathW

  shlwapi

  PathFindExtensionW

  PathFindFileNameW

  PathStripToRootW

  PathIsUNCW

  PathRemoveFileSpecW

  StrFormatKBSizeW

  uxtheme

  CloseThemeData

  DrawThemeBackground

  GetThemeColor

  GetCurrentThemeName

  DrawThemeParentBackground

  IsAppThemed

  IsThemeBackgroundPartiallyTransparent

  GetThemeSysColor

  GetThemePartSize

  OpenThemeData

  DrawThemeText

  GetWindowTheme

  ole32

  CoCreateInstance

  IsAccelerator

  OleTranslateAccelerator

  OleDestroyMenuDescriptor

  OleCreateMenuDescriptor

  OleLockRunning

  RevokeDragDrop

  RegisterDragDrop

  CoLockObjectExternal

  OleGetClipboard

  DoDragDrop

  CreateStreamOnHGlobal

  CoInitializeEx

  CoInitialize

  CoUninitialize

  CoDisconnectObject

  ReleaseStgMedium

  OleDuplicateData

  CoTaskMemFree

  CoTaskMemAlloc

  oleaut32

  VariantTimeToSystemTime

  SystemTimeToVariantTime

  SysStringLen

  SysAllocStringLen

  LoadTypeLi

  SysFreeString

  VariantClear

  VariantCopy

  VariantChangeType

  VarBstrFromDate

  SysAllocString

  VariantInit

  crypt32

  CryptQueryObject

  wtsapi32

  WTSQueryUserToken

  WTSEnumerateSessionsW

  userenv

  CreateEnvironmentBlock

  DestroyEnvironmentBlock

  oleacc

  AccessibleObjectFromWindow

  LresultFromObject

  CreateStdAccessibleObject

  gdiplus

  GdipDrawImageI

  GdipSetInterpolationMode

  GdipDeleteGraphics

  GdipBitmapUnlockBits

  GdipDrawImageRectI

  GdipCreateFromHDC

  GdipCreateBitmapFromHBITMAP

  GdipBitmapLockBits

  GdipCreateBitmapFromScan0

  GdiplusShutdown

  GdipAlloc

  GdipFree

  GdiplusStartup

  GdipCloneImage

  GdipDisposeImage

  GdipGetImageGraphicsContext

  GdipGetImageWidth

  GdipGetImageHeight

  GdipGetImagePixelFormat

  GdipGetImagePalette

  GdipGetImagePaletteSize

  GdipCreateBitmapFromStream

  imm32

  ImmReleaseContext

  ImmGetOpenStatus

  ImmGetContext

  winmm

  PlaySoundW

  Sections

  .text

  Size: 1.5MB - Virtual size: 1.5MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 628KB - Virtual size: 627KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 46KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ