566e0b0edab14ea572e16648097520be93a69770d2f97eb8ffe76e357886b6f8

Sharing

Copy URL Twitter E-mail

General

Target

566e0b0edab14ea572e16648097520be93a69770d2f97eb8ffe76e357886b6f8
Size

39KB
MD5

5cb909adb031d982b5c79ec6beb00ba4
SHA1

315fc9d71d1a6b85e11616727f124834b88b76e3
SHA256

566e0b0edab14ea572e16648097520be93a69770d2f97eb8ffe76e357886b6f8
SHA512

3322cc81b81707cc70dae5fcc03e13a55a91f635340deb94dd8e2b44d40c501d9e82be578494d0b9d27e897cd53d4ed0e7ec14277244d925aed944f0f2b39fde
SSDEEP

768:lyMinyAE0ZYWGoUFdss0uOP5aUFRYi6e1PxWEudi:ZSNEUKdss0uOBfR7NPxh

Score

1^/10

Malware Config

Signatures

Files

566e0b0edab14ea572e16648097520be93a69770d2f97eb8ffe76e357886b6f8
.dll windows:5 windows x64 arch:x64

99da27dd86538db4c8a3e6fbb132bbf9

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:80:00:c7:9f:ea:a8:f6:94:f2:5f:04:f7:ce:85:83
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

23/06/2022, 00:00

Not After

06/06/2023, 23:59

Subject

SERIALNUMBER=091408,CN=QUICK HEAL TECHNOLOGIES LIMITED,OU=Cisco Systems,O=QUICK HEAL TECHNOLOGIES LIMITED,L=Pune,ST=Maharashtra,C=IN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5d:05:cf:74:d8:24:19:e0:2a:3d:59:4a:38:e7:d4:fc:d0:ea:07:b3:b6:d0:ec:53:6f:56:ad:15:c2:80:54:96
Signer

Actual PE Digest

5d:05:cf:74:d8:24:19:e0:2a:3d:59:4a:38:e7:d4:fc:d0:ea:07:b3:b6:d0:ec:53:6f:56:ad:15:c2:80:54:96

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\SEQRITE\7.6_GA\Projects\eps\sqeps7.6\trunk\main\source\umscdl\x64\mbcs_release\umscdl.pdb

Imports

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

verinfo

ord1

umsched

ord1
ord2

msvcr90

_vsnwprintf
_vsnprintf
_encode_pointer
_malloc_crt
_initterm
_initterm_e
_beginthreadex
_decode_pointer
_amsg_exit
__C_specific_handler
__CppXcptFilter
__crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_errno
_time64
_localtime64
_write
_wrename
_itow
_wunlink
_waccess
wcsftime
wcsrchr
_vswprintf_c_l
_wmkdir
_wchmod
malloc
_swprintf
free
_wtoi
_wopen
mbstowcs
sprintf
_filelength
_close
_encoded_null
memset

kernel32

GetTickCount
QueryPerformanceCounter
RtlCaptureContext
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
GetShortPathNameW
OpenEventA
ReadFile
WriteFile
WaitNamedPipeA
CreateFileA
CloseHandle
ResetEvent
CreateEventA
WaitForMultipleObjectsEx
SetEvent
WaitForSingleObject
GetCurrentThreadId
GetProcAddress
GetLastError
GetModuleFileNameW
GetFileAttributesW
GetPrivateProfileStringW
LoadLibraryExW
FreeLibrary
GetCurrentProcessId

Exports

Exports

StartScheduler
StopScheduler

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99da27dd86538db4c8a3e6fbb132bbf9

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

02:80:00:c7:9f:ea:a8:f6:94:f2:5f:04:f7:ce:85:83Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

5d:05:cf:74:d8:24:19:e0:2a:3d:59:4a:38:e7:d4:fc:d0:ea:07:b3:b6:d0:ec:53:6f:56:ad:15:c2:80:54:96Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

verinfo

umsched

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 900B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 60B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

02:80:00:c7:9f:ea:a8:f6:94:f2:5f:04:f7:ce:85:83
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

5d:05:cf:74:d8:24:19:e0:2a:3d:59:4a:38:e7:d4:fc:d0:ea:07:b3:b6:d0:ec:53:6f:56:ad:15:c2:80:54:96
Signer

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 900B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 60B