388e56393ae6b4d2ad4c434721060000f6782c412aea274f3465757a114efe04

Target

388e56393ae6b4d2ad4c434721060000f6782c412aea274f3465757a114efe04
Size

1.3MB
MD5

588c44f7d45328df605aaa90902f51b4
SHA1

db8209e71f200f0c6169fb13e5315fe5e3d1682d
SHA256

388e56393ae6b4d2ad4c434721060000f6782c412aea274f3465757a114efe04
SHA512

d0635547ca3e121034c1ee25f696b7a051c60d616fbeec70093307c5aa811ce76aaf0af4db0a3429e206868ddd20059e910532e06f4fe3973bc687630905b3cf
SSDEEP

24576:DDGl+7masKgsej3pyZ9yJDIUJF24a/lA564UzrtBe+C:DS+7mU5A3pcyZVJJa922C

Score

1^/10

Malware Config

Signatures

Files

388e56393ae6b4d2ad4c434721060000f6782c412aea274f3465757a114efe04
.exe windows:5 windows x86 arch:x86

d25f9a9f367300098266dd0aa7330ff5

Code Sign

55:1d:ac:92:34:b3:a8:43:bd:d3:14:50:d0:c5:8c:41
Certificate

Issuer

CN=XSRKLLCM

Not Before

04-03-2019 20:03

Not After

31-12-2039 23:59

Subject

CN=XSRKLLCM

Extended Key Usages

ExtKeyUsageCodeSigning

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ca:e2:e2:8c:cb:e1:7b:fd:70:ce:b9:a7:68:f9:36:79:52:23:ed:73:b1:2b:57:92:8c:88:9e:03:e4:ce:f3:01
Signer

Actual PE Digest

ca:e2:e2:8c:cb:e1:7b:fd:70:ce:b9:a7:68:f9:36:79:52:23:ed:73:b1:2b:57:92:8c:88:9e:03:e4:ce:f3:01

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAlloc

user32

GetDialogBaseUnits
CharNextW

gdi32

StretchDIBits
StretchBlt
BitBlt
CombineRgn
CreateBitmapIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
ExcludeClipRect
GdiFlush
GetCurrentObject
GetDIBits
GetDeviceCaps
GetNearestColor
GetStockObject
GetTextAlign
PatBlt
RectVisible
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetBrushOrgEx
SetStretchBltMode
SetTextAlign
SetTextColor

advapi32

RegQueryValueExA
RegOpenKeyA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 792KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

Files

d25f9a9f367300098266dd0aa7330ff5

Code Sign

55:1d:ac:92:34:b3:a8:43:bd:d3:14:50:d0:c5:8c:41Certificate

Extended Key Usages

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate

Extended Key Usages

Key Usages

ca:e2:e2:8c:cb:e1:7b:fd:70:ce:b9:a7:68:f9:36:79:52:23:ed:73:b1:2b:57:92:8c:88:9e:03:e4:ce:f3:01Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 792KB

55:1d:ac:92:34:b3:a8:43:bd:d3:14:50:d0:c5:8c:41
Certificate

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

ca:e2:e2:8c:cb:e1:7b:fd:70:ce:b9:a7:68:f9:36:79:52:23:ed:73:b1:2b:57:92:8c:88:9e:03:e4:ce:f3:01
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 792KB