2024-06-17_f4d8064c2c2c20a3a2fc44cb1d52306f_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-17_f4d8064c2c2c20a3a2fc44cb1d52306f_mafia
Size

5.6MB
MD5

f4d8064c2c2c20a3a2fc44cb1d52306f
SHA1

79dfbed206f8e5b3731e95828210726c70a33ae0
SHA256

1004f3268b82a5ea90c6e4480f7d0afccf34c8523b866419996360e75a2cbbe9
SHA512

c82e5f04264886caf8a79dc4d52f49d34fa299b96880decc354cf32acdc36039f62876224850890224ef3f73ab9590ce1391bf2e544c83649e321fd3879a9bf0
SSDEEP

98304:heSBqckSQ19vAhRcjvFBSQ1r1p29kmAKOGnm264LuTDvXdLMDDrhV2VSlim4AX2G:4SMS2rjDmAKp63vCrhVmm4AX2lcrbK4P

Score

1^/10

Malware Config

Signatures

Files

2024-06-17_f4d8064c2c2c20a3a2fc44cb1d52306f_mafia
.exe windows:5 windows x86 arch:x86

7affdf399f93c69435c318b68ca66f13

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:5e:0a:a4:34:d3:f3:03:68:d9:15:8f:3d:fb:66:b8
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

05/09/2023, 00:00

Not After

04/09/2024, 23:59

Subject

CN=CodeForte Systems (Pty) Ltd,O=CodeForte Systems (Pty) Ltd,L=Cape Town,ST=WESTERN CAPE,C=ZA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ac:c4:70:15:22:b8:ed:47:81:73:d8:8c:aa:1c:7a:d3:a3:ff:fd:c1:ec:3a:e4:21:5f:0c:33:70:49:04:94:09
Signer

Actual PE Digest

ac:c4:70:15:22:b8:ed:47:81:73:d8:8c:aa:1c:7a:d3:a3:ff:fd:c1:ec:3a:e4:21:5f:0c:33:70:49:04:94:09

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\Casa\CasaACTS\Clients\bin\JetBingo.pdb

Imports

gdi32

CreateSolidBrush
GetDeviceCaps
DeleteDC
SelectObject
GetStockObject
CreateRectRgn
DeleteObject
GetSystemPaletteUse
SetSystemPaletteUse
UnrealizeObject
SelectPalette
RealizePalette
GetPaletteEntries
CreatePalette
GetTextColor
CreateFontA
BitBlt
SetPixel
CreateCompatibleDC
CreateCompatibleBitmap
Pie
GetTextExtentPoint32A
GetObjectA
SetDIBitsToDevice
GetTextFaceA
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
RoundRect
EnumFontFamiliesExA
OffsetRgn
Rectangle
StretchBlt
SetDIBColorTable
Polygon
Polyline
CreatePolygonRgn
CreateRoundRectRgn
GetSystemPaletteEntries
GetNearestPaletteIndex
GetRgnBox
StretchDIBits
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetTextMetricsA
GetMapMode
CombineRgn
SetRectRgn
CreateFontIndirectA
GetBkColor
CreateDIBSection
Ellipse
LPtoDP
DPtoLP
CreateEllipticRgn
PatBlt
CreateRectRgnIndirect
CreateHatchBrush
CreatePen
GetObjectType
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
SetBkColor
SetTextColor

shell32

DragFinish
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteW
ShellExecuteA
DragQueryFileA

winmm

PlaySoundA

kernel32

InterlockedPushEntrySList
InterlockedPopEntrySList
SetEnvironmentVariableA
GetProcessHeap
GetDriveTypeW
IsValidLocale
EnumSystemLocalesA
WriteConsoleW
CompareStringW
GetCurrentDirectoryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetHandleCount
GetStringTypeW
IsValidCodePage
GetLocaleInfoW
HeapCreate
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
LCMapStringW
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
SetStdHandle
HeapSize
HeapQueryInformation
GetFileInformationByHandle
FindFirstFileExA
GetDriveTypeA
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitThread
GetDateFormatA
GetTimeFormatA
ExitProcess
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
DecodePointer
EncodePointer
QueryPerformanceFrequency
VirtualFree
VirtualAlloc
VirtualLock
RemoveDirectoryA
FindNextFileA
IsBadReadPtr
VirtualQuery
CreateDirectoryA
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
SetErrorMode
GetFileSizeEx
SetFileAttributesA
GetFileAttributesExA
FileTimeToLocalFileTime
GetNumberFormatA
GetWindowsDirectoryA
GetCurrentDirectoryA
Sleep
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
AreFileApisANSI
GetLastError
UnlockFile
LockFile
LockFileEx
UnlockFileEx
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
LocalFree
FormatMessageA
FormatMessageW
SetFilePointer
CloseHandle
ReadFile
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
GetTempPathA
GetTempPathW
DeleteFileA
GetFileAttributesA
DeleteFileW
GetFileAttributesW
GetFileAttributesExW
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
UnmapViewOfFile
CreateFileA
CreateFileW
GetSystemInfo
MapViewOfFile
CreateFileMappingA
SizeofResource
LockResource
LoadResource
FindResourceW
FreeResource
FindResourceA
DosDateTimeToFileTime
lstrcpyA
lstrlenA
lstrlenW
WaitForMultipleObjects
MulDiv
OutputDebugStringA
CreateThread
GetCurrentThreadId
lstrcpynA
GetModuleHandleA
OpenFileMappingA
GetModuleFileNameA
RaiseException
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
InterlockedDecrement
lstrcmpiA
IsDBCSLeadByte
FlushInstructionCache
GetCurrentProcess
lstrcmpA
GlobalUnlock
GlobalLock
GlobalAlloc
SetLastError
LoadLibraryExA
GlobalMemoryStatus
SetUnhandledExceptionFilter
WaitForSingleObject
CreateProcessA
SleepEx
PeekNamedPipe
GetFileType
GetStdHandle
ExpandEnvironmentStringsA
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
GlobalFree
lstrcmpW
DeactivateActCtx
ActivateActCtx
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GlobalSize
CopyFileA
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
GetThreadLocale
FileTimeToSystemTime
CreateMutexA
ReleaseMutex
SetThreadPriority
ResumeThread
InterlockedExchange
GetModuleHandleW
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetACP
GetCPInfo
GetOEMCP
GetSystemDirectoryW
GetUserDefaultLCID
GetFileTime
GetTempFileNameA
DuplicateHandle
FindClose
FindFirstFileA
GetVolumeInformationA

user32

CreatePopupMenu
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
InsertMenuItemA
LoadAcceleratorsA
GetIconInfo
SendMessageA
IntersectRect
GetMenu
CopyRect
PtInRect
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowTextLengthA
GetWindowTextA
CreateAcceleratorTableA
CreateWindowExA
RegisterClassExA
TranslateAcceleratorA
GetWindow
DestroyAcceleratorTable
CallWindowProcA
FillRect
ReleaseCapture
IsChild
SetCapture
InvalidateRgn
ScreenToClient
ClientToScreen
MoveWindow
DefWindowProcA
CharNextA
MsgWaitForMultipleObjects
LoadCursorA
ValidateRect
GetScrollInfo
DeferWindowPos
EqualRect
RegisterClassA
GetClassInfoA
GetMenuItemCount
GetMenuItemID
GetSubMenu
UpdateWindow
ShowScrollBar
GetScrollPos
SetScrollPos
SetSysColors
GetDC
ReleaseDC
PeekMessageA
GetLastActivePopup
GetScrollRange
SetScrollRange
SetMenu
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
EndDeferWindowPos
BeginDeferWindowPos
GetForegroundWindow
RemovePropA
MapVirtualKeyA
GetPropA
SetPropA
GetClassLongA
WinHelpA
SendDlgItemMessageA
RemoveMenu
InsertMenuA
AppendMenuA
GetMenuStringA
GetMenuState
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
CheckDlgButton
IsDialogMessageA
CheckMenuItem
ModifyMenuA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetKeyNameTextA
SetCursor
DestroyIcon
LoadImageA
DestroyMenu
LoadMenuA
ReuseDDElParam
UnpackDDElParam
IsRectEmpty
SystemParametersInfoA
DrawIcon
SetWindowRgn
LoadCursorW
GetCursorPos
InflateRect
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
RegisterClipboardFormatA
RealChildWindowFromPoint
GetMenuItemInfoA
CopyImage
GetSysColorBrush
EnumDisplayMonitors
SetLayeredWindowAttributes
UnregisterClassA
IsClipboardFormatAvailable
DeleteMenu
UnionRect
CopyAcceleratorTableA
CharUpperA
GetNextDlgGroupItem
PostThreadMessageA
GetMenuDefaultItem
GetAsyncKeyState
InvertRect
DrawFocusRect
GetFocus
MapVirtualKeyExA
MapDialogRect
EnableWindow
LoadIconW
HideCaret
EnableScrollBar
NotifyWinEvent
DrawIconEx
IsZoomed
SetClassLongA
LoadMenuW
DrawStateA
DrawEdge
DrawFrameControl
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
SetCursorPos
LockWindowUpdate
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
ChangeDisplaySettingsA
GetClipboardData
GetWindowRgn
DestroyCursor
SubtractRect
GetDoubleClickTime
CharUpperBuffA
CopyIcon
GetUpdateRect
FrameRect
SetMenuDefaultItem
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
WaitMessage
IsMenu
MonitorFromPoint
UpdateLayeredWindow
GetClassInfoExA
LoadIconA
GetSystemMetrics
CreateDialogIndirectParamA
GetWindowPlacement
GetAncestor
GetMessageA
TranslateMessage
DispatchMessageA
SetFocus
DestroyWindow
LoadStringA
EndPaint
BeginPaint
GetLastInputInfo
MonitorFromWindow
GetMonitorInfoA
OpenIcon
KillTimer
SetTimer
OffsetRect
MessageBeep
MessageBoxW
SetRect
WindowFromPoint
GetCapture
GetWindowThreadProcessId
CallNextHookEx
AdjustWindowRect
EnumWindows
CloseWindow
SetParent
GetTopWindow
SetActiveWindow
SetRectEmpty
SetWindowsHookExA
UnhookWindowsHookEx
GetSystemMenu
EnableMenuItem
FindWindowExA
EnumChildWindows
MessageBoxA
BringWindowToTop
GetDlgItem
RedrawWindow
InvalidateRect
IsIconic
wvsprintfA
wsprintfA
SetWindowLongA
GetClassNameA
GetWindowInfo
ShowWindow
wsprintfW
GetKeyState
GetActiveWindow
RegisterWindowMessageA
IsWindow
SetForegroundWindow
IsWindowVisible
SetWindowTextA
GetWindowLongA
AdjustWindowRectEx
GetDesktopWindow
GetClientRect
GetWindowRect
SetWindowPos
OemToCharBuffA
GetParent
PostMessageA
GetSysColor

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

CryptDestroyHash
RegQueryValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyW
RegEnumKeyExA
CryptDestroyKey
CryptEncrypt
CryptReleaseContext
CryptImportKey
CryptAcquireContextA
RegEnumKeyA
CryptGetHashParam
CryptHashData
CryptCreateHash
RegEnumValueA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathMatchSpecA

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoUninitialize
CoInitialize
CoFreeUnusedLibraries
CoCreateGuid
OleDraw
OleDuplicateData
ReleaseStgMedium
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
DoDragDrop
OleGetClipboard

oleaut32

SafeArrayLock
SafeArrayUnlock
SysFreeString
VariantClear
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreate
SafeArrayDestroy
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysAllocString
SysStringLen
VarUI4FromStr
VariantInit
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayGetDim
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate

oledlg

ord8

htmlayout

HTMLayout_UseElement
HTMLayout_UnuseElement
HTMLayoutSetAttributeByName
HTMLayoutGetRootElement
HTMLayoutSelectElements
HTMLayoutUpdateElement
HTMLayoutGetElementType
HTMLayoutSetElementInnerText16
HTMLayoutGetElementState
HTMLayoutSetElementState
HTMLayoutCallBehaviorMethod
ValueClear
ValueCopy
ValueStringDataSet
ValueInit
HTMLayoutWindowAttachEventHandler
HTMLayoutGetParentElement
HTMLayoutGetAttributeByName
HTMLayoutProcND
HTMLayoutGetMinHeight
HTMLayoutGetMinWidth
HTMLayoutSetCallback
HTMLayoutGetElementInnerTextCB
HTMLayoutIsElementEnabled
HTMLayoutIsElementVisible
HTMLayoutLoadHtml
HTMLayoutDataReady
HTMLayoutGetChildrenCount
HTMLayoutGetNthChild
HTMLayoutGetElementIndex
HTMLayoutScrollToView
HTMLayoutGetScrollInfo
HTMLayoutGetElementHwnd
HTMLayoutCreateElement
HTMLayoutInsertElement
HTMLayoutDetachElement
HTMLayoutControlGetValue
HTMLayoutControlSetValue
HTMLayoutUpdateWindow
ValueStringData
HTMLayoutSetElementHtml
ValueToString
HTMLayoutCommitUpdates
HTMLayoutSendEvent
HTMLayoutGetStyleAttribute
HTMLayoutSetStyleAttribute
HTMLayoutGetElementLocation
HTMLayoutPostEvent
ValueIntData
ValueElementsCount
ValueNthElementValue
ValueGetValueOfKey
HTMLayoutSelectElementsW
HTMLayoutDeleteElement
HTMLayoutSelectParent
HTMLayoutSortElements
HTMLayoutVisitElements
ValueIntDataSet
ValueFromString
ValueNthElementValueSet
ValueSetValueToKey
HTMLayoutRequestElementData
HTMLayoutSetOption
HTMLayoutGetElementHtmlCB
HTMLayoutHidePopup
HTMLayoutWindowDetachEventHandler
HTMLayoutLoadHtmlEx
HTMLayoutLoadFile

irrklang

?createIrrKlangDevice@irrklang@@YAPAVISoundEngine@1@W4E_SOUND_OUTPUT_DRIVER@1@HPBD1@Z

ws2_32

WSAAsyncGetHostByName
inet_addr
WSASetLastError
__WSAFDIsSet
select
WSAIoctl
setsockopt
ntohs
getsockopt
accept
freeaddrinfo
getaddrinfo
sendto
recvfrom
gethostname
gethostbyname
shutdown
ntohl
socket
send
ioctlsocket
getpeername
recv
WSAStartup
WSACleanup
closesocket
WSACancelAsyncRequest
WSAGetLastError
bind
htons
listen
WSAAsyncSelect
connect
getsockname

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipAlloc
GdiplusShutdown
GdipDisposeImage
GdipFree
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDeleteGraphics

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

wininet

InternetCrackUrlA

libeay32

ord84
ord469
ord467
ord89
ord109
ord652
ord648
ord544
ord364
ord363
ord1178
ord3050
ord1654
ord1653
ord657
ord579
ord578
ord566
ord2442
ord181
ord2254
ord680
ord641
ord222
ord485
ord484
ord82
ord395
ord66
ord202
ord2206
ord254
ord1016
ord1022
ord248
ord227
ord2291
ord223

ssleay32

ord83
ord42
ord75
ord157
ord166
ord43
ord90
ord61
ord111
ord12
ord141
ord142
ord73
ord16
ord222
ord235
ord17
ord24
ord78
ord8
ord6
ord21
ord225
ord31
ord242
ord96
ord48
ord58
ord183
ord74
ord76
ord108

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 792KB - Virtual size: 791KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7affdf399f93c69435c318b68ca66f13

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:5e:0a:a4:34:d3:f3:03:68:d9:15:8f:3d:fb:66:b8Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

ac:c4:70:15:22:b8:ed:47:81:73:d8:8c:aa:1c:7a:d3:a3:ff:fd:c1:ec:3a:e4:21:5f:0c:33:70:49:04:94:09Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdi32

shell32

winmm

kernel32

user32

msimg32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

oledlg

htmlayout

irrklang

ws2_32

oleacc

gdiplus

imm32

wininet

libeay32

ssleay32

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.rdata Size: 792KB - Virtual size: 791KB

.data Size: 139KB - Virtual size: 203KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 417KB - Virtual size: 417KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:5e:0a:a4:34:d3:f3:03:68:d9:15:8f:3d:fb:66:b8
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

ac:c4:70:15:22:b8:ed:47:81:73:d8:8c:aa:1c:7a:d3:a3:ff:fd:c1:ec:3a:e4:21:5f:0c:33:70:49:04:94:09
Signer

.text
Size: 4.1MB - Virtual size: 4.1MB

.rdata
Size: 792KB - Virtual size: 791KB

.data
Size: 139KB - Virtual size: 203KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 417KB - Virtual size: 417KB