5cec1f91dd96d73e6a8ec2505382adff80f774c2595ea502c97f0ce5b880ec6b

Sharing

Copy URL Twitter E-mail

General

Target

5cec1f91dd96d73e6a8ec2505382adff80f774c2595ea502c97f0ce5b880ec6b
Size

216KB
MD5

b1300add37497cf0687c5c7c86230b98
SHA1

34cd85af3f5a35ee31f86c1a489de38fa26b5f72
SHA256

5cec1f91dd96d73e6a8ec2505382adff80f774c2595ea502c97f0ce5b880ec6b
SHA512

1c8607da8ac7e70b2240cad9a6b367ed03f305056db42e65e0521ac5923b44dc7ed3ec8bf4cb2bd91ff45e255f3a1c286c8ba7f30b6f9bf64e87526946a4ac57
SSDEEP

3072:/fdKIbfbar4kthVIlTb3kBluAf/tzOf8iSbRmicagWJ/tzOf8iSbRmicagWtGVex:/fYT2qwbQtt

Score

1^/10

Malware Config

Signatures

Files

5cec1f91dd96d73e6a8ec2505382adff80f774c2595ea502c97f0ce5b880ec6b
.exe windows:6 windows x86 arch:x86

a3ea41c23f986517a2ec7402921ce462

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:e4:dd:c8:e1:b6:14:ad:44:a2:42:13:bd:5d:06:a9
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

08/09/2021, 13:45

Not After

08/09/2023, 13:45

Subject

CN=The Document Foundation,OU=LibreOffice Build Team,O=The Document Foundation,L=Berlin,ST=Berlin,C=DE,1.2.840.113549.1.9.1=#0c1b696e666f40646f63756d656e74666f756e646174696f6e2e6f7267

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

28/07/2022, 08:56

Not After

27/07/2033, 08:56

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

30:10:57:a2:da:fe:ea:e2:2c:ee:71:2a:06:80:bc:72:87:b0:f0:e3:5d:4f:c4:e6:46:d9:1b:8c:b6:bc:12:48
Signer

Actual PE Digest

30:10:57:a2:da:fe:ea:e2:2c:ee:71:2a:06:80:bc:72:87:b0:f0:e3:5d:4f:c4:e6:46:d9:1b:8c:b6:bc:12:48

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\r\workdir\LinkTarget\Executable\quickstart.pdb

Imports

user32

SendMessageW
FindWindowW
FindWindowExW
RegisterWindowMessageW

kernel32

GetCurrentThreadId
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleFileNameW
CreateProcessW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetModuleHandleW

vcruntime140

wcsrchr
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
terminate
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
__p___argc
__p___wargv
_controlfp_s
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_seh_filter_exe

api-ms-win-crt-string-l1-1-0

wcsncpy

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__stdio_common_vswprintf
__p__commode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3ea41c23f986517a2ec7402921ce462

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

4d:e4:dd:c8:e1:b6:14:ad:44:a2:42:13:bd:5d:06:a9Certificate

Extended Key Usages

Key Usages

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

30:10:57:a2:da:fe:ea:e2:2c:ee:71:2a:06:80:bc:72:87:b0:f0:e3:5d:4f:c4:e6:46:d9:1b:8c:b6:bc:12:48Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 904B

.rsrc Size: 194KB - Virtual size: 194KB

.reloc Size: 1024B - Virtual size: 632B

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

4d:e4:dd:c8:e1:b6:14:ad:44:a2:42:13:bd:5d:06:a9
Certificate

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

30:10:57:a2:da:fe:ea:e2:2c:ee:71:2a:06:80:bc:72:87:b0:f0:e3:5d:4f:c4:e6:46:d9:1b:8c:b6:bc:12:48
Signer

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 904B

.rsrc
Size: 194KB - Virtual size: 194KB

.reloc
Size: 1024B - Virtual size: 632B