547f45713dd63f4e0ef05e4f717bcd2bacbbc7f81c0e59374de31018440eaf83

Sharing

Copy URL Twitter E-mail

General

Target

547f45713dd63f4e0ef05e4f717bcd2bacbbc7f81c0e59374de31018440eaf83
Size

754KB
MD5

9efb432b855158b26fdb8ef07c204d21
SHA1

f488e9184d931ee15ed6d587a698206226bb053f
SHA256

547f45713dd63f4e0ef05e4f717bcd2bacbbc7f81c0e59374de31018440eaf83
SHA512

3eab798c95a27a9bcee4db62c1816a7bc1635a5ceef2ecb0f290c4b3d16665588515553e870ab809fccd706a78b52ae829f4576582fa2d6cbeba1c0bbf1a23d4
SSDEEP

12288:syPmDv12lywLUpsKR1f9ANlVzHq6nWkAsedW7yA:sqmDv12lyOKR1lANzLasd7yA

Score

1^/10

Malware Config

Signatures

Files

547f45713dd63f4e0ef05e4f717bcd2bacbbc7f81c0e59374de31018440eaf83
.exe windows:4 windows x86 arch:x86

6cb1711ff589273b5cf9fd8a60f1bf5b

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:42:02:c8:24:77:41:6d:28:9c:aa:05:c4:52:98:95
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

11/10/2023, 00:00

Not After

10/10/2026, 23:59

Subject

SERIALNUMBER=2688614,CN=AllAlex\, Inc,O=AllAlex\, Inc,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:64:28:21:41:3b:04:da:f8:c5:a7:73:f1:f0:55:65:39:61:9b:d8:50:bd:c4:90:23:5b:9c:10:80:e2:a5:cb
Signer

Actual PE Digest

45:64:28:21:41:3b:04:da:f8:c5:a7:73:f1:f0:55:65:39:61:9b:d8:50:bd:c4:90:23:5b:9c:10:80:e2:a5:cb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW
SHGetFolderPathW
ShellExecuteW
ShellExecuteExW
ShellExecuteA
DragFinish
DragQueryFileW

kernel32

SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
GetVolumeInformationW
GetFullPathNameW
GetFileAttributesW
SetErrorMode
GetStartupInfoW
RtlUnwind
ExitThread
GetLocalTime
GetSystemTimeAsFileTime
RaiseException
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
VirtualFree
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
WritePrivateProfileStringW
GetThreadLocale
lstrlenA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
ResumeThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetVersion
GetCurrentProcessId
GlobalGetAtomNameW
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
GetModuleHandleA
InterlockedDecrement
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
FreeLibrary
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
HeapFree
CreateDirectoryW
FindFirstFileW
GetFileTime
FileTimeToSystemTime
lstrlenW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
SetCurrentDirectoryW
GetCurrentThread
GetModuleFileNameW
HeapCreate
HeapDestroy
GetTickCount
LoadResource
LockResource
SizeofResource
FindResourceW
GetProcessId
ExitProcess
DeleteFileW
WaitForSingleObject
Beep
GetLastError
GetFileSize
ReadFile
CreateFileW
WriteFile
CloseHandle
CopyFileW
CreateThread
GetCurrentThreadId
Sleep
lstrcpynW
GetVersionExW
GetModuleHandleW
GetProcAddress
GetProcessHeap
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA

user32

SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
GetSysColorBrush
UnregisterClassW
MessageBeep
SetRect
IsRectEmpty
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
CharUpperW
RegisterClipboardFormatW
PostThreadMessageW
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
WindowFromPoint
IsDialogMessageW
SetDlgItemInt
GetDlgItemTextW
UnregisterClassA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextLengthW
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
MapWindowPoints
TrackPopupMenu
GetKeyState
MapDialogRect
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
PtInRect
TranslateAcceleratorW
GetDlgCtrlID
DefWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetActiveWindow
CreateDialogIndirectParamW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
GetDC
LoadCursorW
UpdateWindow
PeekMessageW
PostQuitMessage
MessageBoxA
MessageBoxW
EnableWindow
SetFocus
SetLayeredWindowAttributes
SetCursorPos
WaitForInputIdle
DestroyWindow
SendInput
GetMessagePos
ScreenToClient
GetMenu
EnableMenuItem
GetSubMenu
CheckMenuItem
ModifyMenuW
GetCursorPos
SetForegroundWindow
PostMessageW
CopyRect
ReleaseCapture
SetCapture
MoveWindow
EnumWindows
GetClientRect
BringWindowToTop
KillTimer
GetForegroundWindow
LoadMenuW
SetMenu
DrawMenuBar
SetTimer
FindWindowExW
IsWindowVisible
SetWindowsHookExW
GetMessageW
UnpackDDElParam
ReuseDDElParam
SetCursor
LoadAcceleratorsW
InvalidateRect
InsertMenuItemW
CreatePopupMenu
GetMenuItemID
SetRectEmpty
TranslateMessage
DispatchMessageW
UnhookWindowsHookEx
CallNextHookEx
GetWindowLongW
SetWindowLongW
AttachThreadInput
SetActiveWindow
SendMessageW
FindWindowW
SetWindowPos
SetWindowTextW
GetWindowThreadProcessId
IsWindow
ShowWindow
GetWindowTextW
IsIconic
GetClassNameW
LoadIconW
GetSystemMetrics
SystemParametersInfoW
GetDesktopWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
ReleaseDC
MonitorFromPoint
DestroyMenu
GetMenuItemInfoW
InflateRect
EndPaint
BeginPaint
CallWindowProcW

gdi32

ExtSelectClipRgn
DeleteDC
CreatePatternBrush
PtVisible
CreateCompatibleDC
GetStockObject
CreateSolidBrush
GetTextExtentPoint32W
SetWindowExtEx
CreateCompatibleBitmap
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetPixel
CreateFontIndirectW
ScaleWindowExtEx
BitBlt
GetWindowExtEx
GetViewportExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateFontW
CreateDCW
GetDeviceCaps
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
RectVisible

msimg32

GradientFill

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegOpenKeyW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey

comctl32

ord17

shlwapi

PathStripToRootW
UrlUnescapeW
PathFindFileNameW
PathFindExtensionW
PathAppendW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantClear
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysFreeString
SysStringLen
VariantChangeType
SysAllocStringLen
SysAllocString
VariantInit

ws2_32

WSAStartup

wininet

InternetCanonicalizeUrlW
HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpAddRequestHeadersW
InternetErrorDlg
InternetQueryDataAvailable
InternetCrackUrlW
InternetSetStatusCallbackW
HttpQueryInfoW

Sections

.text
Size: 344KB - Virtual size: 341KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cb1711ff589273b5cf9fd8a60f1bf5b

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

21:42:02:c8:24:77:41:6d:28:9c:aa:05:c4:52:98:95Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

45:64:28:21:41:3b:04:da:f8:c5:a7:73:f1:f0:55:65:39:61:9b:d8:50:bd:c4:90:23:5b:9c:10:80:e2:a5:cbSigner

Headers

File Characteristics

Imports

shell32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

Sections

.text Size: 344KB - Virtual size: 341KB

.rdata Size: 96KB - Virtual size: 93KB

.data Size: 12KB - Virtual size: 298KB

.rsrc Size: 288KB - Virtual size: 287KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

21:42:02:c8:24:77:41:6d:28:9c:aa:05:c4:52:98:95
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

45:64:28:21:41:3b:04:da:f8:c5:a7:73:f1:f0:55:65:39:61:9b:d8:50:bd:c4:90:23:5b:9c:10:80:e2:a5:cb
Signer

.text
Size: 344KB - Virtual size: 341KB

.rdata
Size: 96KB - Virtual size: 93KB

.data
Size: 12KB - Virtual size: 298KB

.rsrc
Size: 288KB - Virtual size: 287KB