dab6782b37529d610aefdcdb351292b9e72781ece640401c89cfa9a50969a386

Sharing

Copy URL

Twitter E-mail

General

Target

dab6782b37529d610aefdcdb351292b9e72781ece640401c89cfa9a50969a386
Size

37KB
MD5

cf63f812de49a2ef7342b9e50ad2840f
SHA1

9015ad34aca45b431404b14274a5ee72ca002298
SHA256

dab6782b37529d610aefdcdb351292b9e72781ece640401c89cfa9a50969a386
SHA512

da612ae72aa4798eb91d98c20fb726c6f901c31380803f1dca97e845df2b6c8b2c30c7fb7e80e1d79e5c2f56b0c22e82482cd3965c3a0b05b8cfe853f299c7fd
SSDEEP

768:nTLsVB6/5uk9yWWvlXyHVorXu+1VsEAMxkE7y:nTyB67yztieruoXxK

Score

1^/10

Malware Config

Signatures

Files

dab6782b37529d610aefdcdb351292b9e72781ece640401c89cfa9a50969a386
.dll windows:6 windows x64 arch:x64

fb92ac7ff13131375d63a32fee6b91e9

Code Sign

0f:b5:f5:e0:22:b8:59:12:7a:2f:aa:4f:5d:a6:2e:9f
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07-08-2023 00:00

Not After

02-07-2025 23:59

Subject

SERIALNUMBER=HE 340361,CN=Movavi Software Limited,O=Movavi Software Limited,L=Agios Athanasios,C=CY,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024359

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:01:f5:5c:b1:1a:26:c3:cb:8c:ce:6f:57:dc:b5:28:ed:61:66:62:5d:73:4e:de:de:72:96:af:56:46:f0:e5
Signer

Actual PE Digest

f1:01:f5:5c:b1:1a:26:c3:cb:8c:ce:6f:57:dc:b5:28:ed:61:66:62:5d:73:4e:de:de:72:96:af:56:46:f0:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

boost_chrono-mt-x64

?now@steady_clock@chrono@boost@@SA?AV?$time_point@Vsteady_clock@chrono@boost@@V?$duration@_JV?$ratio@$00$0DLJKMKAA@@boost@@@23@@23@XZ

msvcp140

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?exceptions@ios_base@std@@QEAAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

kernel32

InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentProcess
GetProcessTimes

vcruntime140

__std_type_info_destroy_list
strchr
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
memcpy
memmove
__C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

Exports

Exports

??0auto_cpu_timer@timer@boost@@QEAA@AEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
??0auto_cpu_timer@timer@boost@@QEAA@AEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@F@Z
??0auto_cpu_timer@timer@boost@@QEAA@AEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@FAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
??0auto_cpu_timer@timer@boost@@QEAA@AEBV012@@Z
??0auto_cpu_timer@timer@boost@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0auto_cpu_timer@timer@boost@@QEAA@F@Z
??0auto_cpu_timer@timer@boost@@QEAA@FAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0cpu_timer@timer@boost@@QEAA@XZ
??1auto_cpu_timer@timer@boost@@QEAA@XZ
??4auto_cpu_timer@timer@boost@@QEAAAEAV012@AEBV012@@Z
??4cpu_timer@timer@boost@@QEAAAEAV012@$$QEAV012@@Z
??4cpu_timer@timer@boost@@QEAAAEAV012@AEBV012@@Z
??_Fauto_cpu_timer@timer@boost@@QEAAXXZ
?elapsed@cpu_timer@timer@boost@@QEBA?AUcpu_times@23@XZ
?format@cpu_timer@timer@boost@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@F@Z
?format@cpu_timer@timer@boost@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@FAEBV45@@Z
?format@timer@boost@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBUcpu_times@12@F@Z
?format@timer@boost@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBUcpu_times@12@FAEBV34@@Z
?format_string@auto_cpu_timer@timer@boost@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?is_stopped@cpu_timer@timer@boost@@QEBA_NXZ
?ostream@auto_cpu_timer@timer@boost@@QEBAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?places@auto_cpu_timer@timer@boost@@QEBAFXZ
?report@auto_cpu_timer@timer@boost@@QEAAXXZ
?resume@cpu_timer@timer@boost@@QEAAXXZ
?start@cpu_timer@timer@boost@@QEAAXXZ
?stop@cpu_timer@timer@boost@@QEAAXXZ

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb92ac7ff13131375d63a32fee6b91e9

Code Sign

0f:b5:f5:e0:22:b8:59:12:7a:2f:aa:4f:5d:a6:2e:9fCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

f1:01:f5:5c:b1:1a:26:c3:cb:8c:ce:6f:57:dc:b5:28:ed:61:66:62:5d:73:4e:de:de:72:96:af:56:46:f0:e5Signer

Headers

DLL Characteristics

File Characteristics

Imports

boost_chrono-mt-x64

msvcp140

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 140B

0f:b5:f5:e0:22:b8:59:12:7a:2f:aa:4f:5d:a6:2e:9f
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

f1:01:f5:5c:b1:1a:26:c3:cb:8c:ce:6f:57:dc:b5:28:ed:61:66:62:5d:73:4e:de:de:72:96:af:56:46:f0:e5
Signer

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 140B