147a93a6a2af226c0c0509a1e9d682a0417778dfa2e6bda1515648c9ddd3b8f9

Sharing

Copy URL Twitter E-mail

General

Target

147a93a6a2af226c0c0509a1e9d682a0417778dfa2e6bda1515648c9ddd3b8f9
Size

33KB
MD5

6eeaff08090fdc50e5c2945dad8387ad
SHA1

c07071626fc2b0bcb78f64b0dbdbd992d677a441
SHA256

147a93a6a2af226c0c0509a1e9d682a0417778dfa2e6bda1515648c9ddd3b8f9
SHA512

a61918825089b94e5d0e9caf2862c647a901e8b5bf9c72a766fccbb1c78120e01226f9e377e5dae5fdad06f132a8740eb97dc7354b003e70e93e71cc35979cf2
SSDEEP

384:rVhO67khef0EgaBXz3Hr3fnDQOEHJeHpVWHCEjZOX9Y9WpC0ciFR849R9ziRdru:J7lBD3HTUP8GHoPxz869zx

Score

1^/10

Malware Config

Signatures

Files

147a93a6a2af226c0c0509a1e9d682a0417778dfa2e6bda1515648c9ddd3b8f9
.dll regsvr32 windows:6 windows x86 arch:x86

5cf2c34d8452e90f48dab4173bbe1557

Code Sign

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/09/2023, 19:14

Not After

04/09/2024, 19:14

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a9:a4:1d:b1:34:91:6b:26:20:38:8c:c6:72:90:95:50:2b:25:02:dd:32:57:19:11:c3:30:28:4a:9b:68:7e:0f
Signer

Actual PE Digest

a9:a4:1d:b1:34:91:6b:26:20:38:8c:c6:72:90:95:50:2b:25:02:dd:32:57:19:11:c3:30:28:4a:9b:68:7e:0f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\builds\polaris\6.0.106.0\tvrating\objchk_wlh_x86\i386\cxTVRate.pdb

Imports

msvcp60

??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z

msvcrt

_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_callnewh
malloc
_CxxThrowException
free
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
_assert
_purecall
__CxxFrameHandler3

atl

ord30
ord32
ord58
ord15
ord23
ord57
ord18
ord21
ord16

kernel32

InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
lstrlenW
DisableThreadLibraryCalls

oleaut32

SysStringLen
LoadRegTypeLi
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cf2c34d8452e90f48dab4173bbe1557

Code Sign

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

a9:a4:1d:b1:34:91:6b:26:20:38:8c:c6:72:90:95:50:2b:25:02:dd:32:57:19:11:c3:30:28:4a:9b:68:7e:0fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcp60

msvcrt

atl

kernel32

oleaut32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 1KB - Virtual size: 1KB

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

a9:a4:1d:b1:34:91:6b:26:20:38:8c:c6:72:90:95:50:2b:25:02:dd:32:57:19:11:c3:30:28:4a:9b:68:7e:0f
Signer

.text
Size: 13KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 1KB - Virtual size: 1KB