e31cd99d829af27c0df18d1aa4b2ffa0506e44ddc0dec83a4089dcb0f1bc046c

Sharing

Copy URL Twitter E-mail

General

Target

e31cd99d829af27c0df18d1aa4b2ffa0506e44ddc0dec83a4089dcb0f1bc046c
Size

314KB
MD5

c82e47673aa68856f2367428c049d7dd
SHA1

33e522e8ec6099a58dafc602e64b9d41fce52445
SHA256

e31cd99d829af27c0df18d1aa4b2ffa0506e44ddc0dec83a4089dcb0f1bc046c
SHA512

a8666f86915d6f95db710b3e34930f5e1f9a0e5d5a511adc6046021f4888f0c5098be4acd02405a6649e2a1b446b702249ab4974113563685b6a120dabf9fc28
SSDEEP

6144:/pEz1dNISIyvyXEk/RUP94BV+UdvrEFp7hKu:R/SIyvyXEuRBjvrEH7p

Score

1^/10

Malware Config

Signatures

Files

e31cd99d829af27c0df18d1aa4b2ffa0506e44ddc0dec83a4089dcb0f1bc046c
.dll windows:4 windows x86 arch:x86

bcc326d21695159f15e57392f55799ac

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

60:ea:da:f3:d9:32:5a:d3:31:69:8d:71
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

29/03/2023, 13:20

Not After

29/03/2026, 13:20

Subject

CN=KERISH PRODUCTS LLP,O=KERISH PRODUCTS LLP,L=Astana,ST=Astana,C=KZ,1.2.840.113549.1.9.1=#0c1061646d696e406b65726973682e6f7267

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

82:36:fd:2b:a2:08:8c:64:f6:d4:28:d6:e8:06:bc:cf:37:71:b8:e7
Signer

Actual PE Digest

82:36:fd:2b:a2:08:8c:64:f6:d4:28:d6:e8:06:bc:cf:37:71:b8:e7

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SafeArrayDestroy
SafeArrayAllocDescriptorEx

kernel32

GetVersionExA
GetEnvironmentVariableA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
HeapValidate
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
SetEnvironmentVariableA
GetACP
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
SetConsoleCtrlHandler
MultiByteToWideChar
InitializeCriticalSection
FatalAppExitA
UnhandledExceptionFilter
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
IsValidLocale
GetOEMCP
SetStdHandle
Sleep
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW

Exports

Exports

c__snprintf
c__snwprintf
create_safearray
create_safearray_bit_large
large_integer_add
large_integer_add_long
large_integer_div
large_integer_div_long
large_integer_mul
large_integer_mul_long
large_integer_sub

Sections

.text
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcc326d21695159f15e57392f55799ac

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

60:ea:da:f3:d9:32:5a:d3:31:69:8d:71Certificate

Extended Key Usages

Key Usages

82:36:fd:2b:a2:08:8c:64:f6:d4:28:d6:e8:06:bc:cf:37:71:b8:e7Signer

Headers

File Characteristics

Imports

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 180KB - Virtual size: 176KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 20KB - Virtual size: 25KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 6KB

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

60:ea:da:f3:d9:32:5a:d3:31:69:8d:71
Certificate

82:36:fd:2b:a2:08:8c:64:f6:d4:28:d6:e8:06:bc:cf:37:71:b8:e7
Signer

.text
Size: 180KB - Virtual size: 176KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 20KB - Virtual size: 25KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 6KB