2024-05-07_9ee4fff7aaa1140b539ca68cfa1d4d3b_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-07_9ee4fff7aaa1140b539ca68cfa1d4d3b_magniber
Size

8.4MB
MD5

9ee4fff7aaa1140b539ca68cfa1d4d3b
SHA1

193c03943779ec696bee7234d1a9c3a9d28c895e
SHA256

30878a6445cef9cee776d9f090e0f0f340066f5c8ef6eccff6da88752181d650
SHA512

484d9b3f6eacb47379c91bbb3b2c61732d0730612b732e8c611b1d7ab953197af423dca4819d725a27fb210ce6162fba34d593376a1a951aaab0492dba9cdea5
SSDEEP

196608:0H9Deks3kMMAbNsP1pIx+iZhxKbr16FLOyomFHKnPphh9:0dDEkMMAbNUIxM16FUt

Score

1^/10

Malware Config

Signatures

Files

2024-05-07_9ee4fff7aaa1140b539ca68cfa1d4d3b_magniber
.exe windows:6 windows x86 arch:x86

472662ea08813afb540e634bc653159c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:4b:f7:49:14:3f:99:5c:41:cf:25:a5:ea:8b:ac:37
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

22/09/2023, 00:00

Not After

24/09/2024, 23:59

Subject

SERIALNUMBER=HRB 10405,CN=Evident Technology Center Europe GmbH,O=Evident Technology Center Europe GmbH,L=Münster,ST=Nordrhein-Westfalen,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c084dc3bc6e73746572,1.3.6.1.4.1.311.60.2.1.2=#13134e6f7264726865696e2d5765737466616c656e,1.3.6.1.4.1.311.60.2.1.3=#13024445

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:c7:13:a7:49:0d:e2:9b:a5:bc:c6:90:9e:e6:11:c1:c7:79:fc:20:68:18:2c:99:9c:ab:72:79:ce:b9:d1:27
Signer

Actual PE Digest

9a:c7:13:a7:49:0d:e2:9b:a5:bc:c6:90:9e:e6:11:c1:c7:79:fc:20:68:18:2c:99:9c:ab:72:79:ce:b9:d1:27

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ws\Edinburgh-B-BuildConf\Platform\General\Tools\WelcomeScreen\ReleaseU\Setup.pdb

Imports

user32

GetWindowRect
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
PostMessageW
PostQuitMessage
UnhookWindowsHookEx
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
LoadCursorW
SendMessageW
EnableWindow
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetParent
GetWindowThreadProcessId
GetLastActivePopup
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetClientRect
CopyImage
SystemParametersInfoW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
ShowOwnedPopups
SetCursor
DeleteMenu
GetDlgCtrlID
SetWindowTextW
GetWindowTextW
ClientToScreen
PtInRect
GetDesktopWindow
GetClassNameW
GetWindow
RealChildWindowFromPoint
SetTimer
KillTimer
UpdateWindow
InvalidateRect
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ScreenToClient
FillRect
GetWindowTextLengthW
DestroyIcon
CharUpperW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
SetFocus
GetCapture
GetMenu
SetMenu
TrackPopupMenu
TrackPopupMenuEx
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
GetSystemMetrics
SetPropW
GetPropW
RemovePropW
AdjustWindowRectEx
MapWindowPoints
CopyRect
EqualRect
SetWindowLongW
GetClassLongW
GetTopWindow
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
GetMonitorInfoW
ShowWindow
MoveWindow
SetDlgItemTextW
CheckDlgButton
ScrollWindowEx
IsDialogMessageW
DestroyMenu
GetMenuItemInfoW
InflateRect
SendDlgItemMessageA
SetRectEmpty
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetAsyncKeyState
MapDialogRect
TrackMouseEvent
LoadImageW
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetClassLongW
SetWindowRgn
SetParent
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
IsIconic
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
SendNotifyMessageW
CreateMenu
GetWindowRgn
DestroyCursor
ExitWindowsEx
ChildWindowFromPoint
PrintWindow
GetClipboardData
GetCaretPos
GetWindowContextHelpId
LoadStringW
CharLowerBuffW
GetWindowPlacement
OffsetRect
IntersectRect
SystemParametersInfoA
CountClipboardFormats
CharNextW
InvalidateRgn
SetWindowContextHelpId
ShowScrollBar
DestroyAcceleratorTable

bcrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetNativeSystemInfo
GetTimeFormatW
GetDateFormatW
GetComputerNameW
lstrlenW
GetComputerNameExW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
CreateProcessW
GetExitCodeProcess
RemoveDirectoryW
FindNextFileW
CreateDirectoryW
ResetEvent
GetUserDefaultLCID
GetTempFileNameW
Sleep
SearchPathW
GetProfileIntW
GetTickCount
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
lstrcpyW
VirtualProtect
SystemTimeToTzSpecificLocalTime
SetFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GlobalFindAtomW
lstrcmpiW
LoadLibraryA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
GlobalGetAtomNameW
DeleteFileW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
IsProcessorFeaturePresent
ResumeThread
SuspendThread
SetThreadPriority
WaitForSingleObject
SetEvent
GetSystemDirectoryW
EncodePointer
GetCurrentProcessId
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
CompareStringW
InitializeSListHead
TerminateProcess
OutputDebugStringW
FormatMessageA
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetStringTypeW
EnterCriticalSection
SetErrorMode
CreateSemaphoreW
CreateEventW
CreateMutexW
ReleaseMutex
ReleaseSemaphore
WideCharToMultiByte
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryW
LoadLibraryExW
GetModuleHandleA
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
OutputDebugStringA
SetLastError
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetProcessHeap
DeleteCriticalSection
GetProcAddress
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetVersionExA
MultiByteToWideChar
HeapSize
InitializeCriticalSectionEx
HeapFree
SetCurrentDirectoryW
CloseHandle
CreateFileW
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemTime
GetTempPathW
GetCommandLineW
GetModuleHandleW
GetModuleFileNameW
GetLastError
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
GetPrivateProfileIntW
CreateSemaphoreA
OpenSemaphoreA
SearchPathA
GetLocalTime
GetEnvironmentVariableA
FindNextFileA
GetModuleFileNameA
GetVersion
FindFirstFileA
CreateFileA
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
GetConsoleOutputCP
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetDriveTypeW
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
CreateThread
GetCommandLineA
InterlockedPushEntrySList
RtlUnwind
OpenSemaphoreW
IsBadReadPtr
ExitThread
ProcessIdToSessionId
GetTimeZoneInformation
OpenEventW
ReadConsoleW
GetConsoleMode
GetStdHandle
IsWow64Process
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
GetEnvironmentVariableW
ExitProcess
GetLocaleInfoEx
QueryPerformanceFrequency
GetCPInfo
CompareStringEx
LCMapStringEx
GetFileInformationByHandleEx
DeviceIoControl
AreFileApisANSI
SetFilePointerEx
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
FindFirstFileExW

gdi32

GetDIBColorTable
GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32W
CreateFontIndirectW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
GetObjectW
SetTextAlign
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
GetClipBox
GetDCOrgEx
CopyMetaFileW
CreateDCW
GetDeviceCaps
DeleteDC
CreateBitmap
DeleteObject
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
Escape
ExcludeClipRect
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
Polygon

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

InitializeSecurityDescriptor
RegCloseKey
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
SetSecurityDescriptorDacl
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegDeleteValueW
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegFlushKey
GetUserNameW
CloseServiceHandle
QueryServiceConfigW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
QueryServiceStatusEx
RegQueryInfoKeyW
StartServiceW
QueryServiceStatus
OpenServiceW
OpenSCManagerW

shell32

SHFileOperationW
SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteExW
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragAcceptFiles
SHGetKnownFolderPath
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW

comctl32

ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_Add
ImageList_AddMasked
ImageList_Remove

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathAppendW
PathFileExistsW
PathIsDirectoryW
PathStripPathW
PathIsDirectoryEmptyW
PathFindExtensionW

uxtheme

GetThemeSysColor
GetThemePartSize
IsAppThemed
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
IsThemeBackgroundPartiallyTransparent

ole32

CoTaskMemFree
ReadClassStg
WriteClassStg
CoTreatAsClass
CreateBindCtx
WriteFmtUserTypeStg
ReadFmtUserTypeStg
OleDuplicateData
ReleaseStgMedium
OleRegGetUserType
SetConvertStg
CoUninitialize
CoCreateGuid
CoDisconnectObject
CoCreateInstance
CoInitialize
CLSIDFromString
CoInitializeEx
CreateStreamOnHGlobal
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoTaskMemAlloc
OleSetMenuDescriptor
OleLockRunning
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
StgCreateDocfileOnILockBytes
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleDraw
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
OleUninitialize
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
CoFreeUnusedLibraries
OleInitialize
StringFromCLSID

oleaut32

SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
VariantCopy
VariantChangeType
VarBstrFromDate
VariantInit
SafeArrayGetElemsize
VarUdateFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
LoadTypeLi
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocString
SafeArrayGetDim
SafeArrayDestroy
OleCreateFontIndirect
SafeArrayGetUBound
VarBstrCmp

oledlg

OleUIPasteSpecialW
OleUIInsertObjectW
OleUIBusyW
OleUIObjectPropertiesW

ws2_32

accept
closesocket
connect
ioctlsocket
getsockopt
gethostname
WSACleanup
select
send
inet_ntop
htons
__WSAFDIsSet
recv
setsockopt
shutdown
socket
WSAGetLastError
getpeername
WSAStartup
getaddrinfo
freeaddrinfo
getnameinfo
inet_ntoa

gdiplus

GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipGetImageGraphicsContext
GdipCloneImage
GdipDisposeImage
GdipBitmapLockBits

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

winhttp

WinHttpOpen
WinHttpGetProxyForUrl
WinHttpCloseHandle
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser

wintrust

WinVerifyTrust

wininet

HttpOpenRequestW
InternetConnectW
InternetQueryOptionW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetSetOptionExW
InternetSetOptionW
InternetCloseHandle
InternetOpenW

crypt32

CertFindCertificateInStore
CryptMsgClose
CertGetNameStringW
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertFreeCertificateContext

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CONST
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 947KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 292KB - Virtual size: 752KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

472662ea08813afb540e634bc653159c

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:4b:f7:49:14:3f:99:5c:41:cf:25:a5:ea:8b:ac:37Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

9a:c7:13:a7:49:0d:e2:9b:a5:bc:c6:90:9e:e6:11:c1:c7:79:fc:20:68:18:2c:99:9c:ab:72:79:ce:b9:d1:27Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

bcrypt

kernel32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

ws2_32

gdiplus

oleacc

imm32

winmm

version

winhttp

wintrust

wininet

crypt32

Sections

.text Size: 5.4MB - Virtual size: 5.4MB

CONST Size: 512B - Virtual size: 48B

.rdata Size: 947KB - Virtual size: 947KB

.data Size: 292KB - Virtual size: 752KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 403KB - Virtual size: 403KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:4b:f7:49:14:3f:99:5c:41:cf:25:a5:ea:8b:ac:37
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

9a:c7:13:a7:49:0d:e2:9b:a5:bc:c6:90:9e:e6:11:c1:c7:79:fc:20:68:18:2c:99:9c:ab:72:79:ce:b9:d1:27
Signer

.text
Size: 5.4MB - Virtual size: 5.4MB

CONST
Size: 512B - Virtual size: 48B

.rdata
Size: 947KB - Virtual size: 947KB

.data
Size: 292KB - Virtual size: 752KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 403KB - Virtual size: 403KB