94602ba03b31435160f7f4905afcef737d0fc0a8fdbd77ef4844a8f9bf0dc832

Sharing

Copy URL Twitter E-mail

General

Target

94602ba03b31435160f7f4905afcef737d0fc0a8fdbd77ef4844a8f9bf0dc832
Size

10.0MB
MD5

b9581d7fb16da5ec51582d6719c256da
SHA1

261ca59841f77f896cc44a0453c701f26a0623c6
SHA256

94602ba03b31435160f7f4905afcef737d0fc0a8fdbd77ef4844a8f9bf0dc832
SHA512

c431855e5415f637aa9f011fcd486a5962886af9bfec264d50cf84748ee73f8647ca04adad5ffb3eccf8f9251420f0df4c48ea4cf8fd9faf046b5e82d40a9c23
SSDEEP

196608:fqx36hTrlFRz8keo9lnAnUMxsc1Y2nGEITit+pxeh214L+2PrGwtZW:f6CrnRzteo9lnAnQAYKIWues14LnP66W

Score

1^/10

Malware Config

Signatures

Files

94602ba03b31435160f7f4905afcef737d0fc0a8fdbd77ef4844a8f9bf0dc832
.exe windows:6 windows x86 arch:x86

623dd788dac4e2f6e1fbfbf2d8a71486

Code Sign

41:1c:70:6c:8a:bd:47:ae:ef:14:7a:21:e3:eb:32:eb
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

11/03/2020, 00:00

Not After

11/04/2021, 23:59

Subject

CN=Autodesk\, Inc.,OU=DCP,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:d5:1b:71:bb:b8:d1:32:9d:3f:ec:d9:96:ff:6b:58:f4:f6:c8:af:06:b7:9b:9d:14:4e:44:6f:7b:8b:5e:80
Signer

Actual PE Digest

72:d5:1b:71:bb:b8:d1:32:9d:3f:ec:d9:96:ff:6b:58:f4:f6:c8:af:06:b7:9b:9d:14:4e:44:6f:7b:8b:5e:80

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocStringLen
VariantClear
SysStringLen

user32

GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
OffsetRect
CopyRect
GetWindowRect
LoadIconW
DialogBoxParamW
SendMessageW
SetWindowPos
LoadStringW
CharUpperW
SetWindowTextW
EndDialog
ShowWindow
DestroyWindow
PostMessageW
MessageBoxW
SetTimer
KillTimer
GetDlgItem

shell32

ShellExecuteExW
CommandLineToArgvW

kernel32

GetModuleHandleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
LCMapStringW
GetFileType
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
VirtualQuery
EncodePointer
GetCommandLineW
ExpandEnvironmentStringsW
DecodePointer
CloseHandle
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetVersionExW
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
LocalFree
lstrlenW
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
FormatMessageW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetTempPathW
SetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetSystemDirectoryW
WriteConsoleW
GetProcAddress
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetModuleHandleA
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
GetCurrentProcess
GetSystemInfo
GlobalMemoryStatus
GetProcessAffinityMask
GetStdHandle
GetFileInformationByHandle
WaitForMultipleObjects
Sleep
VirtualAlloc
VirtualFree
lstrcatW
InitializeCriticalSection
SetEvent
ResetEvent
CreateEventW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
OutputDebugStringW
RtlUnwind

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

623dd788dac4e2f6e1fbfbf2d8a71486

Code Sign

41:1c:70:6c:8a:bd:47:ae:ef:14:7a:21:e3:eb:32:ebCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

72:d5:1b:71:bb:b8:d1:32:9d:3f:ec:d9:96:ff:6b:58:f4:f6:c8:af:06:b7:9b:9d:14:4e:44:6f:7b:8b:5e:80Signer

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

user32

shell32

kernel32

Sections

.text Size: 181KB - Virtual size: 180KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 3KB - Virtual size: 14KB

.rsrc Size: 319KB - Virtual size: 319KB

41:1c:70:6c:8a:bd:47:ae:ef:14:7a:21:e3:eb:32:eb
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

72:d5:1b:71:bb:b8:d1:32:9d:3f:ec:d9:96:ff:6b:58:f4:f6:c8:af:06:b7:9b:9d:14:4e:44:6f:7b:8b:5e:80
Signer

.text
Size: 181KB - Virtual size: 180KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 3KB - Virtual size: 14KB

.rsrc
Size: 319KB - Virtual size: 319KB