5466ba20f94b4a5f28a7dd9b2ee00b611104da3267e71d976dd6dc88ff6e83c1

Target

5466ba20f94b4a5f28a7dd9b2ee00b611104da3267e71d976dd6dc88ff6e83c1
Size

1.3MB
MD5

029121f4c1fc507eee2da7ef0f81c52f
SHA1

5bdfc541991da167e6fb256a64e05e05f92fc5db
SHA256

5466ba20f94b4a5f28a7dd9b2ee00b611104da3267e71d976dd6dc88ff6e83c1
SHA512

94e38cc00fcbc431da0300eba6683f251e0b4c4ca71cc88d941acf998207d3df14b59322d9d59d5522649c80f26689fa1a44ad59371eeafcd4107c9dd42d3e2f
SSDEEP

24576:GP2e+mt0BUefY1OOz6KgoHPLVGdbiCu4SMZ4QU:89EfG3s28vuWg

Score

1^/10

Malware Config

Signatures

Files

5466ba20f94b4a5f28a7dd9b2ee00b611104da3267e71d976dd6dc88ff6e83c1
.exe windows:5 windows x86 arch:x86

34c8190d5a058a80ef545c9eb5e42f68

Code Sign

06:91:71:2a:8e:58:ee:aa:4c:c0:90:5b:63:80:d7:5a
Certificate

Issuer

CN=JGOCGMZT

Not Before

30-11-2018 12:27

Not After

31-12-2039 23:59

Subject

CN=JGOCGMZT

Extended Key Usages

ExtKeyUsageCodeSigning

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

55:67:1e:93:8a:ab:54:58:11:ea:bd:80:c5:2f:e8:2c:1e:7a:e4:51
Signer

Actual PE Digest

55:67:1e:93:8a:ab:54:58:11:ea:bd:80:c5:2f:e8:2c:1e:7a:e4:51

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAllocEx

user32

GetShellWindow
IsWindowVisible
GetKeyboardType
CharUpperA
GetKBCodePage
WindowFromDC
CharUpperW
GetDialogBaseUnits
OemKeyScan
GetWindowTextLengthA
GetMenuContextHelpId
GetWindowDC
CharNextW
GetThreadDesktop
PaintDesktop
ShowCaret
EndMenu
IsCharAlphaNumericW
IsCharLowerA
CloseClipboard
GetListBoxInfo
GetMenuCheckMarkDimensions
GetClipboardOwner
GetDoubleClickTime
GetWindowContextHelpId
GetLastActivePopup
EnumClipboardFormats
CloseWindowStation
GetMessageExtraInfo
IsWindowEnabled
IsGUIThread
GetInputState
GetKeyState
GetClipboardSequenceNumber
DestroyIcon
IsCharAlphaNumericA
GetClipboardData
GetActiveWindow
IsMenu
IsWindowUnicode
GetTopWindow
CreateMenu
IsCharUpperW
CharLowerA
GetFocus
GetKeyboardLayout
GetOpenClipboardWindow
GetMenu
InSendMessage
LoadCursorFromFileA
GetMessagePos

gdi32

DeleteColorSpace
RealizePalette
AddFontResourceW
CreatePatternBrush
FillPath
EndPage
CreateHalftonePalette
GetSystemPaletteUse
AddFontResourceA
GetBkMode
CreateSolidBrush
CloseEnhMetaFile
GetEnhMetaFileW
DeleteObject
GetMapMode
SwapBuffers
GetPolyFillMode
GetColorSpace
GetROP2
GetLayout
GetTextCharacterExtra
GetEnhMetaFileA
CloseMetaFile
GetTextCharset

advapi32

RegOpenKeyExW
RegQueryValueExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 733KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

34c8190d5a058a80ef545c9eb5e42f68

Code Sign

06:91:71:2a:8e:58:ee:aa:4c:c0:90:5b:63:80:d7:5aCertificate

Extended Key Usages

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

55:67:1e:93:8a:ab:54:58:11:ea:bd:80:c5:2f:e8:2c:1e:7a:e4:51Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 724B

.rsrc Size: 2KB - Virtual size: 733KB

06:91:71:2a:8e:58:ee:aa:4c:c0:90:5b:63:80:d7:5a
Certificate

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

55:67:1e:93:8a:ab:54:58:11:ea:bd:80:c5:2f:e8:2c:1e:7a:e4:51
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 724B

.rsrc
Size: 2KB - Virtual size: 733KB