8a6dc060429918cc4fd83cde20cf4830b26617b7c4dc6d072a98264c04f48977

Sharing

Copy URL Twitter E-mail

General

Target

8a6dc060429918cc4fd83cde20cf4830b26617b7c4dc6d072a98264c04f48977
Size

733KB
MD5

7715a33dbbd4f96c2370ffc1edacb24a
SHA1

901fb1c2f0c02e376f19d942736d847d1af5585a
SHA256

8a6dc060429918cc4fd83cde20cf4830b26617b7c4dc6d072a98264c04f48977
SHA512

08ebdcb721c90e2f3fb4c2c84463897d89d8aa642e9697f253708858bfeb4b85cd61522a749b7e86dfc300a740f06324de0a0c08684f57697bbd314fcf5f0586
SSDEEP

6144:+ETqWy83oce4gwWUGK+ot2j8vqlBGkQ2ti726Gg1gTUHjKALqSHC3Oq+c4pXkrbN:BTqudgwxltX6Ab2/g1gTejKmCt+LpXUR

Score

1^/10

Malware Config

Signatures

Files

8a6dc060429918cc4fd83cde20cf4830b26617b7c4dc6d072a98264c04f48977
.exe windows:4 windows x86 arch:x86

3f8c1da2b1510b2ced9fb2132f407749

Code Sign

0a
Certificate

Issuer

CN=AN Certification Authority,O=AN,C=CZ

Not Before

25/03/2022, 21:04

Not After

24/03/2024, 21:04

Subject

CN=Ai4rei/AN,O=AN,C=CZ

bd:f8:8d:e9:84:ac:a8:60
Certificate

Issuer

CN=AN Certification Authority,O=AN,C=CZ

Not Before

08/02/2021, 16:23

Not After

09/02/2121, 16:23

Subject

CN=AN Certification Authority,O=AN,C=CZ

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

36:34:0e:25:24:49:1b:7b:ba:23:7f:18:59:7c:30:ed:0d:88:c8:f7
Signer

Actual PE Digest

36:34:0e:25:24:49:1b:7b:ba:23:7f:18:59:7c:30:ed:0d:88:c8:f7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallMsgFilterA
GetWindowLongA
SendMessageA
GetAsyncKeyState
DispatchMessageA
TranslateMessage
IsDialogMessageA
TranslateAcceleratorA
GetMessageA
ShowWindow
PostMessageA
GetDlgItem
CreateDialogIndirectParamA
MessageBoxA
LoadAcceleratorsA
FindWindowA
SetWindowTextA
SetTimer
PostQuitMessage
DestroyWindow
SetWindowLongA
SetCursor
LoadCursorA
DestroyIcon
LoadImageA
PeekMessageA
MsgWaitForMultipleObjects
EnableWindow
KillTimer
EnumDisplaySettingsA
CreateWindowExA
GetWindowTextA
EnumChildWindows
MessageBoxIndirectA
GetWindowRect
IsDlgButtonChecked
GetNextDlgTabItem
GetSystemMetrics
IsWindowEnabled
GetDlgCtrlID
GetParent
DialogBoxParamA
DefDlgProcA
SetWindowPos
EndDialog
GetWindow
DefWindowProcA
IsChild
SetFocus
GetFocus
LoadIconA
GetClassInfoExA
RegisterClassExA
WaitMessage
MapWindowPoints
SetRect
AdjustWindowRectEx
GetMenu
GetSysColorBrush
GetSysColor
SetForegroundWindow
LoadStringA
IsWindowVisible
OffsetRect
FindWindowExA
GetWindowThreadProcessId
CheckDlgButton
CreateDialogParamA
GetDC
ReleaseDC
SystemParametersInfoW
SystemParametersInfoA
CallWindowProcA

gdi32

DeleteObject
GetDeviceCaps
CreateFontA
SetTextColor
SetBkColor
GetObjectA
CreateCompatibleDC
SaveDC
SelectObject
BitBlt
RestoreDC
DeleteDC

comctl32

ImageList_Destroy
ImageList_Create
ImageList_Add
InitCommonControlsEx

advapi32

RegOpenKeyExA
OpenProcessToken
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegFlushKey
RegQueryValueExA
RegDeleteValueA
RegCloseKey

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

wininet

HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
InternetSetOptionA
InternetReadFile
InternetQueryDataAvailable
InternetQueryOptionA
InternetOpenA

d3d9

Direct3DCreate9

shell32

ShellExecuteExA
SHFileOperationA

kernel32

IsBadCodePtr
ReadFile
InitializeCriticalSection
VirtualFree
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
TlsGetValue
TlsAlloc
TlsSetValue
HeapSize
GetVersion
GetSystemTime
GetSystemTimeAsFileTime
MoveFileA
ExitProcess
DuplicateHandle
RtlUnwind
InterlockedExchange
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
OutputDebugStringA
GetCurrentThreadId
Sleep
GetTimeZoneInformation
SetEnvironmentVariableA
SetEndOfFile
GetStartupInfoA
GetStdHandle
CreateProcessA
GetSystemDirectoryA
GetTempPathA
VirtualAlloc
DeleteFileA
GlobalAlloc
GlobalFree
FindResourceA
SizeofResource
EnterCriticalSection
EnumSystemCodePagesA
LeaveCriticalSection
DeleteCriticalSection
TerminateProcess
GetCPInfo
MultiByteToWideChar
MulDiv
SetErrorMode
LoadLibraryA
FreeLibrary
WritePrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
FindResourceExA
LoadResource
LockResource
WideCharToMultiByte
FreeResource
CreateFileA
CreateDirectoryA
SetLastError
GetTickCount
GetLocaleInfoW
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
CompareStringW
CompareStringA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsBadReadPtr
IsValidCodePage
IsValidLocale
lstrcpynA
CreatePipe
SetStdHandle
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetOEMCP
GetACP
GetLastError
GetFileSize
OpenProcess
RaiseException
GetCurrentProcessId
WaitForSingleObject
ReleaseMutex
CreateMutexA
InterlockedIncrement
GetVersionExA
IsBadWritePtr
InterlockedDecrement
WriteFile
GlobalMemoryStatus
GetProcAddress
GetModuleHandleA
CloseHandle
ResumeThread
CreateThread
lstrlenA
SetFilePointer
GetFileAttributesA
GetCommandLineA
GetCurrentProcess
GetModuleFileNameA
GetExitCodeProcess
GetPrivateProfileStringA
GetPrivateProfileIntA
FormatMessageA
GetLocalTime

Sections

.text
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f8c1da2b1510b2ced9fb2132f407749

Code Sign

0aCertificate

bd:f8:8d:e9:84:ac:a8:60Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

36:34:0e:25:24:49:1b:7b:ba:23:7f:18:59:7c:30:ed:0d:88:c8:f7Signer

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

comctl32

advapi32

version

wininet

d3d9

shell32

kernel32

Sections

.text Size: 252KB - Virtual size: 250KB

.rdata Size: 36KB - Virtual size: 34KB

.data Size: 16KB - Virtual size: 129KB

.shared Size: 4KB - Virtual size: 1KB

.rsrc Size: 392KB - Virtual size: 389KB

.reloc Size: 20KB - Virtual size: 18KB

0a
Certificate

bd:f8:8d:e9:84:ac:a8:60
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

36:34:0e:25:24:49:1b:7b:ba:23:7f:18:59:7c:30:ed:0d:88:c8:f7
Signer

.text
Size: 252KB - Virtual size: 250KB

.rdata
Size: 36KB - Virtual size: 34KB

.data
Size: 16KB - Virtual size: 129KB

.shared
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 392KB - Virtual size: 389KB

.reloc
Size: 20KB - Virtual size: 18KB