023a2943b046bfa20a8b34ba53b2ffcd04415c8608b5e381d71d89d65c6dd0a2

Sharing

Copy URL

Twitter E-mail

General

Target

023a2943b046bfa20a8b34ba53b2ffcd04415c8608b5e381d71d89d65c6dd0a2
Size

2.0MB
MD5

06c6e27ee0fe154f51274a76973ebb8a
SHA1

2d388a79eb74f14af2e1b711331887a8ca43cd4c
SHA256

023a2943b046bfa20a8b34ba53b2ffcd04415c8608b5e381d71d89d65c6dd0a2
SHA512

6aa001faa25981014187497faf1fb4f86c9fb8f0a7e1c04e2a709bc8ad8dceb797392f7d3c68223904f4aaf8e833224f807444f2b0f8c23307224d3bb2e87283
SSDEEP

49152:AwOQiyW+cDje81RhPTCpoltnMriF8jdAptTxEfTMlQJL+iu:tDg+cDje81bTZltnwiuotT2TMlQJL+Z

Score

1^/10

Malware Config

Signatures

Files

023a2943b046bfa20a8b34ba53b2ffcd04415c8608b5e381d71d89d65c6dd0a2
.exe windows:5 windows x86 arch:x86

55c99fe490a157723bad113b2e3509be

Code Sign

03:3f:53:43:9e:7a:47:e7:7b:cd:7a:5c:6a:98:93:2c
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/05/2019, 00:00

Not After

11/05/2022, 12:00

Subject

SERIALNUMBER=2694665,CN=Identiv\, Inc,O=Identiv\, Inc,L=Fremont,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7a:98:ab:0c:e0:02:50:74:e3:85:01:03:c6:10:18:66:6a:c4:3b:7d:70:22:c1:1b:10:e8:90:a3:fb:61:29:1c
Signer

Actual PE Digest

7a:98:ab:0c:e0:02:50:74:e3:85:01:03:c6:10:18:66:6a:c4:3b:7d:70:22:c1:1b:10:e8:90:a3:fb:61:29:1c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardReconnect
SCardStatusA
SCardGetStatusChangeA
SCardListReadersA
SCardReleaseContext
SCardGetAttrib
SCardControl
SCardConnectA
SCardEstablishContext
SCardDisconnect

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

GetFileType
ExitProcess
GetModuleHandleExW
HeapQueryInformation
GetSystemTimeAsFileTime
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetStdHandle
VirtualAlloc
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
GetStringTypeW
OutputDebugStringW
CreateFileW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
GetSystemInfo
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
Sleep
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetTickCount
SetErrorMode
GetCurrentDirectoryA
GetACP
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
GetStringTypeExA
GetVolumeInformationA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
SetStdHandle
CompareStringW
GlobalFlags
GetThreadLocale
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
SystemTimeToFileTime
ReplaceFileA
GetTempFileNameA
SetFileTime
GetFullPathNameA
GetFileTime
GetFileAttributesA
GetDiskFreeSpaceA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetCurrentThread
GetCurrentProcessId
ResumeThread
SuspendThread
SetThreadPriority
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
LoadLibraryW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
EncodePointer
OutputDebugStringA
MultiByteToWideChar
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
InterlockedDecrement
InterlockedIncrement
CreateEventA
CloseHandle
WaitForSingleObject
ResetEvent
SetEvent
WideCharToMultiByte
GetVersionExA
FindResourceW
GetModuleFileNameA
GetLocalTime
SizeofResource
LoadResource
LockResource
GetWindowsDirectoryA
GetSystemDirectoryA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
ExitThread
CreateThread
GetLocaleInfoW
VirtualQuery

user32

MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
SetClassLongA
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuA
CharUpperBuffA
FrameRect
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
GetWindowRgn
GetAsyncKeyState
GetIconInfo
DrawIconEx
DrawFocusRect
RegisterClipboardFormatA
GetMenuDefaultItem
LockWindowUpdate
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
LoadMenuW
LoadAcceleratorsW
SetWindowRgn
DrawIcon
SetRect
WindowFromPoint
KillTimer
SetTimer
CharUpperA
SetParent
DeleteMenu
GetSystemMenu
IsRectEmpty
UnionRect
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
RealChildWindowFromPoint
GetSysColorBrush
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
DestroyCursor
LoadCursorW
LoadCursorA
SetCursorPos
SetCapture
GetSystemMetrics
IsZoomed
ReuseDDElParam
UnpackDDElParam
LoadImageA
DestroyIcon
GetDesktopWindow
OffsetRect
SetRectEmpty
SetCursor
InsertMenuItemA
DestroyMenu
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
BringWindowToTop
MapVirtualKeyA
GetKeyNameTextA
GetCursorPos
GetActiveWindow
TranslateMessage
IsCharLowerA
IsIconic
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
MapWindowPoints
MessageBoxA
AdjustWindowRectEx
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetFocus
IntersectRect
InflateRect
CopyRect
FillRect
GetSysColor
ScreenToClient
ClientToScreen
GetKeyboardLayout
WaitMessage
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
EnableScrollBar
NotifyWinEvent
InvertRect
GetMessageA
HideCaret
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
UnhookWindowsHookEx
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
GetParent
GetWindowRect
UpdateWindow
EnableMenuItem
DrawMenuBar
RegisterDeviceNotificationA
wsprintfA
InvalidateRect
EnableWindow
UnregisterClassA
SendMessageA
GetWindowThreadProcessId
PostThreadMessageA

gdi32

GetObjectA
MoveToEx
TextOutA
ExtTextOutA
SetTextAlign
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectA
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
CreateCompatibleBitmap
GetTextExtentPoint32A
GetTextMetricsA
CreateFontA
GetCharWidthA
StretchDIBits
GetBkColor
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
GetTextColor
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
GetDeviceCaps
CreateDCA
GetTextCharsetInfo
CopyMetaFileA
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExW
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegEnumValueA

shell32

SHBrowseForFolderA
DragFinish
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHAppBarMessage
DragQueryFileA
ShellExecuteA
SHGetDesktopFolder

shlwapi

PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindExtensionA
StrFormatKBSizeA

uxtheme

GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
IsAppThemed
GetThemePartSize
CloseThemeData
OpenThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeText

ole32

OleFlushClipboard
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
RevokeDragDrop
CoInitialize
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
OleIsCurrentClipboard
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CLSIDFromString
CoRegisterMessageFilter

oleaut32

VarBstrFromDate
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
OleCreateFontIndirect
SysAllocString
SysFreeString
VariantChangeType

oledlg

ord8

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 362KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 650KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55c99fe490a157723bad113b2e3509be

Code Sign

03:3f:53:43:9e:7a:47:e7:7b:cd:7a:5c:6a:98:93:2cCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

7a:98:ab:0c:e0:02:50:74:e3:85:01:03:c6:10:18:66:6a:c4:3b:7d:70:22:c1:1b:10:e8:90:a3:fb:61:29:1cSigner

Headers

DLL Characteristics

File Characteristics

Imports

winscard

version

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 362KB - Virtual size: 361KB

.data Size: 26KB - Virtual size: 650KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 128KB - Virtual size: 127KB

03:3f:53:43:9e:7a:47:e7:7b:cd:7a:5c:6a:98:93:2c
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

7a:98:ab:0c:e0:02:50:74:e3:85:01:03:c6:10:18:66:6a:c4:3b:7d:70:22:c1:1b:10:e8:90:a3:fb:61:29:1c
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 362KB - Virtual size: 361KB

.data
Size: 26KB - Virtual size: 650KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 128KB - Virtual size: 127KB