2024-03-20_591b3745f006f4b87125b98f9f403d30_floxif_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-20_591b3745f006f4b87125b98f9f403d30_floxif_mafia
Size

11.0MB
MD5

591b3745f006f4b87125b98f9f403d30
SHA1

29170d59d3e2d10d9b55b0d1eeebe4c0ba5b5fc6
SHA256

04ca5f55240a9cef7c7d8eb844b79e287862b8922185a765d82ef88329d86128
SHA512

f4cf0efe1504098087c7e8ab90dbe6a09286ba8e41b7fdbb0a2ccbdaad1540790c4c0e1dfc2271e557d488c00204a73e9155e1fc9f5aff278c126eedbe6240a9
SSDEEP

98304:M9xL/jYL3Tf7bHDPrHPe+dWl8pR5dBFpp1NRtF7f8wMJ1pNEpSzl0G15syMwU4Y2:ezQkGC3pF46I7JG5az5oOcz

Score

1^/10

Malware Config

Signatures

Files

2024-03-20_591b3745f006f4b87125b98f9f403d30_floxif_mafia
.exe windows:5 windows x86 arch:x86

3cc47c2bb021f4304899289a77f365d3

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:23:9c:21:87:ef:ae:7b:a9:f3:cd:89:c4:fe:9d:84
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

27/08/2012, 00:00

Not After

03/09/2015, 23:59

Subject

CN=Hewlett Packard,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Desktop Consumer Solutions,O=Hewlett Packard,L=San Diego,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:bc:4e:d0:3f:bf:03:61:b7:d2:12:60:47:92:de:68:57:3a:f1:5f
Signer

Actual PE Digest

68:bc:4e:d0:3f:bf:03:61:b7:d2:12:60:47:92:de:68:57:3a:f1:5f

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\jnks\workspace\K88_Prod_Active_Build\build1315\SxS\src\Release\HP-DQEX5.pdb

Imports

ole32

StgCreateDocfileOnILockBytes
CoInitializeEx
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleLockRunning
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StringFromGUID2
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoCreateGuid
CLSIDFromString
CoCreateInstance
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
IsAccelerator
OleDraw
CoUninitialize
CoInitialize

msimg32

AlphaBlend
TransparentBlt
GradientFill

comctl32

ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathIsUNCW
PathStripToRootW
PathFileExistsW
PathRemoveFileSpecW
PathIsFileSpecW
PathFindFileNameW
PathFindExtensionW

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameW
GetModuleFileNameExW

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

msi

ord8
ord163
ord123
ord20
ord92
ord232
ord49
ord19
ord96
ord205
ord70
ord32
ord159
ord160
ord114
ord118
ord120
ord221
ord116
ord47
ord137
ord34
ord169
ord88
ord17
ord125
ord171
ord141

kernel32

GetFullPathNameW
FileTimeToLocalFileTime
GetNumberFormatW
GetProfileIntW
VirtualProtect
EncodePointer
DecodePointer
HeapSetInformation
ExitThread
HeapFree
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
HeapAlloc
RtlUnwind
ExitProcess
RaiseException
HeapReAlloc
HeapQueryInformation
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
GetVolumeInformationW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
InterlockedCompareExchange
LocalSize
SetHandleInformation
SetEnvironmentVariableW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LoadLibraryA
GetPrivateProfileStringA
WritePrivateProfileStringA
LoadLibraryW
FreeLibrary
GetProcAddress
GetModuleFileNameW
GetVersionExW
GetCurrentThreadId
CreateProcessW
CloseHandle
GetTickCount
GetTempPathW
GetDiskFreeSpaceExW
CreateThread
GetExitCodeThread
GetExitCodeProcess
GetCurrentProcess
TerminateThread
CreateEventW
OpenEventW
ResetEvent
SetEvent
WaitForSingleObject
GetLocalTime
GetSystemTime
SetLastError
GetFileAttributesW
GetFileAttributesExW
CreateMutexW
OpenMutexW
ReleaseMutex
CreateDirectoryW
GetCommandLineW
GetShortPathNameW
LockFile
FlushFileBuffers
ReadFile
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GlobalGetAtomNameW
lstrlenA
GetConsoleMode
lstrcmpiW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
lstrcpyW
ResumeThread
SetThreadPriority
GlobalSize
MulDiv
FreeResource
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
SetErrorMode
lstrlenW
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
lstrcmpW
LoadLibraryExW
InterlockedExchange
ActivateActCtx
DeactivateActCtx
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetFileInformationByHandle
FileTimeToDosDateTime
FormatMessageA
IsWow64Process
FindResourceExW
GetModuleHandleW
GetUserDefaultUILanguage
GetWindowsDirectoryW
FormatMessageW
SearchPathW
GetLongPathNameW
OutputDebugStringW
SetFilePointer
ExpandEnvironmentStringsW
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
SetFileAttributesW
CopyFileW
MoveFileExW
GetSystemDirectoryW
DeviceIoControl
GetFileTime
SizeofResource
LockResource
LoadResource
FindResourceW
GlobalFree
GlobalUnlock
GetCurrentProcessId
GlobalLock
ProcessIdToSessionId
GlobalAlloc
LocalFree
LocalAlloc
Sleep
GetUserDefaultLangID
SetCurrentDirectoryW
GetCurrentDirectoryW
GetComputerNameExW
WriteFile
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameW
DeleteFileW
FindClose
FindNextFileW
FindFirstFileW
GetLocaleInfoW
GetUserDefaultLCID
GetSystemDefaultUILanguage
GetSystemDefaultLCID
UnmapViewOfFile
FlushViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GlobalMemoryStatusEx
GetStartupInfoW
CreatePipe
WaitForMultipleObjects
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
PeekNamedPipe
OpenProcess
CreateFileW
GetFileSizeEx
UnhandledExceptionFilter

user32

GetWindowRgn
DestroyCursor
DrawIcon
MapDialogRect
SubtractRect
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
CharUpperBuffW
CopyIcon
RegisterClipboardFormatW
ExitWindowsEx
CloseClipboard
SetClipboardData
OpenClipboard
GetUpdateRect
FrameRect
SetMenuDefaultItem
WaitMessage
PostThreadMessageW
CreateMenu
IsMenu
UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
GetNextDlgGroupItem
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
DestroyIcon
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawStateW
ReleaseCapture
SetCapture
GetSystemMenu
SetClassLongW
NotifyWinEvent
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
IsIconic
OffsetRect
IsRectEmpty
CharUpperW
CopyImage
DestroyMenu
GetMenuItemInfoW
SetRect
MessageBeep
IsClipboardFormatAvailable
CloseDesktop
OpenDesktopW
SetThreadDesktop
GetThreadDesktop
SetProcessWindowStation
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorW
SetLayeredWindowAttributes
GetSystemMetrics
EnumDisplayMonitors
SystemParametersInfoW
SetRectEmpty
DeleteMenu
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
IntersectRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
FillRect
GetCursorPos
WindowFromPoint
LoadMenuW
MapVirtualKeyW
GetKeyNameTextW
ReleaseDC
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
RedrawWindow
ValidateRect
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
GetProcessWindowStation
CloseWindowStation
OpenWindowStationW
RegisterClassW
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
PtInRect
GetParent
GetWindowTextLengthW
GetScrollPos
SetScrollPos
GetWindow
GetWindowLongW
SetFocus
UnhookWindowsHookEx
PostQuitMessage
LoadImageW
KillTimer
InvalidateRect
GetWindowTextW
DrawEdge
GetSysColor
InflateRect
CopyRect
GetFocus
LoadIconW
GetClientRect
GetDC
SendMessageW
EnableWindow
SetTimer
PostMessageW
IsWindowVisible
wsprintfW
GetAsyncKeyState
WaitForInputIdle
MsgWaitForMultipleObjectsEx
AllowSetForegroundWindow
MsgWaitForMultipleObjects
SendMessageCallbackW
FlashWindowEx
InvalidateRgn
CharNextW
SetWindowContextHelpId
TabbedTextOutW
EmptyClipboard

gdi32

GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
LPtoDP
CreateDIBitmap
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceW
SetPixelV
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
SelectClipRgn
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
GetTextExtentPoint32W
DeleteObject
GetObjectW
CreateFontW
CreateFontIndirectW
CreateCompatibleDC
BitBlt
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SelectPalette
GetStockObject
CreateCompatibleBitmap
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CopyMetaFileW
CreateDCW
CreateRectRgnIndirect
PatBlt
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
CreatePatternBrush
SetViewportExtEx
DeleteDC
GetWindowOrgEx
ScaleViewportExtEx
ExtSelectClipRgn

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

comdlg32

GetFileTitleW

advapi32

RegEnumValueW
ControlService
QueryServiceConfigW
ChangeServiceConfigW
CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
FreeSid
OpenEventLogW
CloseEventLog
BackupEventLogW
SetEntriesInAclW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ImpersonateLoggedOnUser
DuplicateToken
RevertToSelf
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
StartServiceW
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
GetUserNameW
RegQueryValueExW
CheckTokenMembership
OpenProcessToken
CryptReleaseContext
QueryServiceStatus

shell32

ShellExecuteExW
SHBrowseForFolderW
SHAppBarMessage
DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
CommandLineToArgvW
SHGetSpecialFolderPathW
ExtractIconW
ShellExecuteW
SHGetFolderPathW
SHGetFileInfoW

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
VariantChangeType
VariantInit
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
OleCreateFontIndirect

wininet

InternetOpenUrlW
InternetReadFile
InternetCrackUrlW
InternetSetStatusCallbackW
InternetConnectW
HttpOpenRequestW
InternetWriteFile
HttpAddRequestHeadersW
InternetGetConnectedState
InternetOpenW
HttpQueryInfoW
HttpSendRequestExW
HttpSendRequestW
InternetCloseHandle
HttpEndRequestW

secur32

GetUserNameExW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

ws2_32

ioctlsocket
connect
WSAAddressToStringW
WSAStringToAddressW
WSASocketW
WSACreateEvent
WSAEventSelect
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSAStartup
WSACloseEvent
WSADuplicateSocketW
getaddrinfo
htons
freeaddrinfo
select
inet_addr
WSAGetLastError
accept
listen
getsockopt
send
gethostbyname
closesocket
__WSAFDIsSet
socket
bind
recv
WSACleanup
setsockopt
shutdown

iphlpapi

DeleteIPAddress
AddIPAddress
IpRenewAddress
IcmpCreateFile
GetInterfaceInfo
GetIfEntry
GetAdaptersAddresses
GetAdaptersInfo
IcmpSendEcho
IcmpCloseHandle
IpReleaseAddress
NotifyAddrChange

crypt32

CertOpenStore
CertCloseStore
CertDeleteCertificateFromStore
CertAddEncodedCertificateToStore
CryptUnprotectData

setupapi

CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_DevNode_Registry_PropertyW
CM_Set_DevNode_Registry_PropertyW
CM_Disable_DevNode
SetupDiGetClassDevsW
SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsW
CMP_WaitNoPendingInstallEvents
SetupCloseInfFile
SetupGetLineTextW
SetupFindFirstLineW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiRemoveDevice
SetupDiDestroyDriverInfoList
SetupDiBuildDriverInfoList
SetupDiOpenDevRegKey
SetupDiCreateDevRegKeyW
SetupDiOpenClassRegKey
SetupDiCallClassInstaller
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiCreateDeviceInfoW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.5MB - Virtual size: 8.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cc47c2bb021f4304899289a77f365d3

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fdCertificate

Extended Key Usages

Key Usages

44:23:9c:21:87:ef:ae:7b:a9:f3:cd:89:c4:fe:9d:84Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

68:bc:4e:d0:3f:bf:03:61:b7:d2:12:60:47:92:de:68:57:3a:f1:5fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ole32

msimg32

comctl32

shlwapi

psapi

oledlg

oleacc

imm32

winmm

msi

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

oleaut32

wininet

secur32

version

ws2_32

iphlpapi

crypt32

setupapi

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 488KB - Virtual size: 488KB

.data Size: 35KB - Virtual size: 81KB

.rsrc Size: 8.5MB - Virtual size: 8.5MB

.reloc Size: 240KB - Virtual size: 240KB

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

44:23:9c:21:87:ef:ae:7b:a9:f3:cd:89:c4:fe:9d:84
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

68:bc:4e:d0:3f:bf:03:61:b7:d2:12:60:47:92:de:68:57:3a:f1:5f
Signer

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 488KB - Virtual size: 488KB

.data
Size: 35KB - Virtual size: 81KB

.rsrc
Size: 8.5MB - Virtual size: 8.5MB

.reloc
Size: 240KB - Virtual size: 240KB