e0a292383d53deb5e2e68199359e988a916119c9eb118e29717c2ecc1a0dc043

Sharing

Copy URL Twitter E-mail

General

Target

e0a292383d53deb5e2e68199359e988a916119c9eb118e29717c2ecc1a0dc043
Size

37KB
MD5

bf15c46216dbd5bc2668c8f17aa31dda
SHA1

39663212ac48f26f0d78a6f009b3128c379d78d4
SHA256

e0a292383d53deb5e2e68199359e988a916119c9eb118e29717c2ecc1a0dc043
SHA512

7275f9147de7d0b428fd8836a87c7282b04ba3bb092bd52d5e9373bbd585e3108b3cd99b9a07c0d27f7843b869e0d6024c7a162c4b017477c4c318ae3d829aa6
SSDEEP

768:UePG5H8sV/gs1lxhXOQ69zbjlAAX5e9z2z:UePG5H8CgsDizbR9Xwz2z

Score

1^/10

Malware Config

Signatures

Files

e0a292383d53deb5e2e68199359e988a916119c9eb118e29717c2ecc1a0dc043
.exe windows:5 windows x86 arch:x86

c626dccf7fb6f72d572fabe34daf0ccc

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:51:fc:96:2d:ee:43:1a:be:84:a6:c5:b2:7a:d6:33:a2:1e:3e:d0:0d:13:c1:89:ad:4d:96:3d:a8:02:8f:9b
Signer

Actual PE Digest

bc:51:fc:96:2d:ee:43:1a:be:84:a6:c5:b2:7a:d6:33:a2:1e:3e:d0:0d:13:c1:89:ad:4d:96:3d:a8:02:8f:9b

Digest Algorithm

sha256

PE Digest Matches

false

bc:51:fc:96:2d:ee:43:1a:be:84:a6:c5:b2:7a:d6:33:a2:1e:3e:d0:0d:13:c1:89:ad:4d:96:3d:a8:02:8f:9b
Signer

Actual PE Digest

bc:51:fc:96:2d:ee:43:1a:be:84:a6:c5:b2:7a:d6:33:a2:1e:3e:d0:0d:13:c1:89:ad:4d:96:3d:a8:02:8f:9b

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ModifyMenuA
RemoveMenu
EndDialog
SetWindowTextA
SetScrollInfo
CheckMenuItem
ReleaseDC
GetDC
MoveWindow
GetClientRect
EnableMenuItem
GetMenuItemID
DeferWindowPos
EndDeferWindowPos
TranslateAcceleratorA
SetMenuItemInfoA
LoadStringA
InsertMenuItemA
GetPropA
RemovePropA
SetPropA
ScrollWindow
CreateCursor
DestroyCursor
GetSubMenu
BeginDeferWindowPos
DestroyAcceleratorTable
ShowCursor
RegisterWindowMessageA
AppendMenuA
DragDetect
GetCapture
CreateDialogIndirectParamA
ReleaseCapture
FindWindowA
CreateAcceleratorTableA
CharUpperA
DrawTextExA
DialogBoxParamA
DrawEdge

kernel32

GetStartupInfoA
MultiByteToWideChar
lstrlen
MapViewOfFile
UnmapViewOfFile
lstrlenA
CloseHandle
GetModuleHandleA
GetProcAddress
CreateDirectoryA

ole32

CoInitialize
CoUninitialize
CoCreateInstanceEx

oleaut32

SysAllocStringLen
SysFreeString

msvcrt

_exit
_controlfp
_XcptFilter
exit
__p__acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c626dccf7fb6f72d572fabe34daf0ccc

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

bc:51:fc:96:2d:ee:43:1a:be:84:a6:c5:b2:7a:d6:33:a2:1e:3e:d0:0d:13:c1:89:ad:4d:96:3d:a8:02:8f:9bSigner

bc:51:fc:96:2d:ee:43:1a:be:84:a6:c5:b2:7a:d6:33:a2:1e:3e:d0:0d:13:c1:89:ad:4d:96:3d:a8:02:8f:9bSigner

Headers

File Characteristics

Imports

user32

kernel32

ole32

oleaut32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 10KB - Virtual size: 9KB

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

bc:51:fc:96:2d:ee:43:1a:be:84:a6:c5:b2:7a:d6:33:a2:1e:3e:d0:0d:13:c1:89:ad:4d:96:3d:a8:02:8f:9b
Signer

bc:51:fc:96:2d:ee:43:1a:be:84:a6:c5:b2:7a:d6:33:a2:1e:3e:d0:0d:13:c1:89:ad:4d:96:3d:a8:02:8f:9b
Signer

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 10KB - Virtual size: 9KB