8ad01b028e6aa711d26879d346a7bef82516e372e0f14e8e69db6aef0f25d992

Sharing

Copy URL Twitter E-mail

General

Target

8ad01b028e6aa711d26879d346a7bef82516e372e0f14e8e69db6aef0f25d992
Size

45KB
MD5

96eabcc77a6734ea8587599685fbf1b4
SHA1

6a36962709abbfc1f88f87e7fe88a417302bfe43
SHA256

8ad01b028e6aa711d26879d346a7bef82516e372e0f14e8e69db6aef0f25d992
SHA512

63f32e72ed7c5aacbd13a02c894e832fa6f501592a2146c77d39fb3f8d960c0c178a936d8b73957f5f1a56f3c8ea730c932f40b16ff8d721fc7211e5fbd22419
SSDEEP

768:IeJl5Qts45WwD469JJAi6SsrDWYsyGh7NN71YOOMRrraEPAQLFCQiGKC5d/b:Ik5Qts45X46jJjsPqxtdYCrraEPAQLsW

Score

1^/10

Malware Config

Signatures

Files

8ad01b028e6aa711d26879d346a7bef82516e372e0f14e8e69db6aef0f25d992
.exe windows:4 windows x86 arch:x86

653ee44c85bc91d12ec33dfed8056c27

Code Sign

01:fd:d0:93:f6:50:87:f4:e9:ae:11:ed:65:0d:83:e8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/08/2019, 00:00

Not After

15/08/2022, 12:00

Subject

CN=Kuwait Telecommunications Company KSC,OU=Kuwait Telecommunications Company,O=Kuwait Telecommunications Company KSC,L=Salmiya,C=KW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:0f:84:a5:36:56:a4:0b:63:3e:1b:b3:b9:02:af:79:15:f3:f4:4a
Signer

Actual PE Digest

07:0f:84:a5:36:56:a4:0b:63:3e:1b:b3:b9:02:af:79:15:f3:f4:4a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptCreateHash
CryptDecrypt
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptHashData
CryptImportKey

comdlg32

GetOpenFileNameA

kernel32

AddAtomA
CloseHandle
CreateDirectoryW
CreateFileW
CreateMutexA
CreatePipe
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindAtomA
FindClose
FindFirstFileW
FindFirstVolumeW
FindNextFileW
FindNextVolumeW
FindVolumeClose
FlushFileBuffers
GetAtomNameA
GetCurrentProcess
GetDriveTypeW
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetLastError
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempPathA
GetVolumePathNamesForVolumeNameW
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
LeaveCriticalSection
LoadLibraryW
MoveFileExW
MultiByteToWideChar
OpenMutexA
ReadFile
ReleaseMutex
SetFileAttributesW
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetUnhandledExceptionFilter
SetVolumeMountPointW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteFile
lstrcatW
lstrcpyW
lstrlenA
lstrlenW

msvcrt

_strlwr
_wcslwr
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
_snwprintf
_wcslwr
abort
atexit
exit
free
malloc
memcpy
memset
rand
realloc
signal
sprintf
srand
strcat
strcmp
strcpy
strlen
strstr
swprintf
time
wcscat
wcscpy
wcsrchr
wcsstr

user32

MessageBoxA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 66KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

653ee44c85bc91d12ec33dfed8056c27

Code Sign

01:fd:d0:93:f6:50:87:f4:e9:ae:11:ed:65:0d:83:e8Certificate

Extended Key Usages

Key Usages

07:0f:84:a5:36:56:a4:0b:63:3e:1b:b3:b9:02:af:79:15:f3:f4:4aSigner

Headers

File Characteristics

Imports

advapi32

comdlg32

kernel32

msvcrt

user32

Sections

.text Size: 27KB - Virtual size: 27KB

.data Size: 8KB - Virtual size: 8KB

.rdata Size: 1024B - Virtual size: 772B

.bss Size: - Virtual size: 66KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 1KB

01:fd:d0:93:f6:50:87:f4:e9:ae:11:ed:65:0d:83:e8
Certificate

07:0f:84:a5:36:56:a4:0b:63:3e:1b:b3:b9:02:af:79:15:f3:f4:4a
Signer

.text
Size: 27KB - Virtual size: 27KB

.data
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 772B

.bss
Size: - Virtual size: 66KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 1KB