8e50de42d402d674297b2d735a4b244dd7893ad0c5b97aa23d9f0808d61e673e

Sharing

Copy URL Twitter E-mail

General

Target

8e50de42d402d674297b2d735a4b244dd7893ad0c5b97aa23d9f0808d61e673e
Size

4.6MB
MD5

9448fdd23273290ace868a3f30bf1ce4
SHA1

23bb88283deb4b2fe8515de5ebe788e3485c550a
SHA256

8e50de42d402d674297b2d735a4b244dd7893ad0c5b97aa23d9f0808d61e673e
SHA512

0d9504ba4b97677d9f5a8a4ed1ff4433bb49d78430ebcbec5e21723037208d71bbff171f8251d58bb708a10a3c4289bc46c118f8cc72ad9365263871da7cab16
SSDEEP

98304:m8xndu0C1WV3kQYkkFgYgZ5ajKhuKEMel1cV/To:Jndu0baQPkOKjd71U/To

Score

1^/10

Malware Config

Signatures

Files

8e50de42d402d674297b2d735a4b244dd7893ad0c5b97aa23d9f0808d61e673e
.dll windows:4 windows x86 arch:x86

cff73ab5413bbd42300a18991d90870f

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02/11/2023, 08:32

Not After

30/10/2034, 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:65:ee:66:81:d8:ce:b5:da:71:c5:ec
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2023, 09:06

Not After

23/05/2026, 07:42

Subject

CN=Potok LLC,O=Potok LLC,L=Korolyov,ST=Moscow Oblast,C=RU,1.2.840.113549.1.9.1=#0c0e706f746f6b40706f746f6b2e7275

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:65:ee:66:81:d8:ce:b5:da:71:c5:ec
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2023, 09:06

Not After

23/05/2026, 07:42

Subject

CN=Potok LLC,O=Potok LLC,L=Korolyov,ST=Moscow Oblast,C=RU,1.2.840.113549.1.9.1=#0c0e706f746f6b40706f746f6b2e7275

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02/11/2023, 08:32

Not After

30/10/2034, 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:91:e5:42:03:cc:e1:34:ab:5d:c9:8c:13:58:13:f5:94:6b:17:c4:58:b2:f0:f7:3b:8c:96:c0:7d:3e:21:dd
Signer

Actual PE Digest

5f:91:e5:42:03:cc:e1:34:ab:5d:c9:8c:13:58:13:f5:94:6b:17:c4:58:b2:f0:f7:3b:8c:96:c0:7d:3e:21:dd

Digest Algorithm

sha256

PE Digest Matches

true

85:98:aa:3a:79:c2:ca:88:e1:47:ad:8c:73:bf:2e:e7:67:78:7f:0d
Signer

Actual PE Digest

85:98:aa:3a:79:c2:ca:88:e1:47:ad:8c:73:bf:2e:e7:67:78:7f:0d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
SetThreadPriority
FindFirstFileA
TlsAlloc
InterlockedDecrement
GetExitCodeThread
Sleep
UnmapViewOfFile
LoadLibraryExA
DuplicateHandle
WideCharToMultiByte
GetProcessTimes
WaitForSingleObject
ConvertThreadToFiber
GetCurrentProcess
EnterCriticalSection
SwitchToFiber
GetTickCount
ResumeThread
ReadFile
GetProcAddress
LocalAlloc
GetVersion
GetSystemInfo
GetEnvironmentVariableA
CreateDirectoryW
QueryPerformanceCounter
CreateFileW
TerminateThread
FindFirstFileW
DefineDosDeviceA
TlsSetValue
HeapAlloc
GetLastError
QueryDosDeviceA
InterlockedIncrement
FindNextFileW
GetDriveTypeA
InterlockedExchangeAdd
TerminateProcess
OpenMutexA
FlushFileBuffers
GetProcessHeap
SetErrorMode
SetLastError
GetCurrentThreadId
WriteFile
GetLogicalDrives
GetModuleHandleA
SetFileAttributesW
CreateThread
GetVolumeInformationA
SwitchToThread
GetModuleFileNameW
GetSystemDirectoryA
MapViewOfFile
InterlockedCompareExchange
LeaveCriticalSection
MultiByteToWideChar
CreateFileMappingA
HeapReAlloc
FreeLibrary
CreateEventA
OpenProcess
ReleaseMutex
ReleaseSemaphore
SetEndOfFile
OutputDebugStringA
SystemTimeToFileTime
LocalFree
MoveFileExW
GetFileSize
HeapFree
CreateFileA
GetWindowsDirectoryA
GetComputerNameW
GetModuleFileNameA
GetCurrentProcessId
GetSystemTime
SearchPathA
GetEnvironmentVariableW
GetFileInformationByHandle
InitializeCriticalSection
DeviceIoControl
OpenSemaphoreA
CloseHandle
CreateMutexA
CreateProcessW
DeleteCriticalSection
SetFilePointerEx
GetVersionExA
QueryPerformanceFrequency
RemoveDirectoryW
GetTimeZoneInformation
DeleteFileW
GetLocalTime
FindNextFileA
TlsGetValue
GetComputerNameExW
DeleteFiber
CreateSemaphoreA
GetCommandLineA
ExitProcess
TlsFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetSystemTimeAsFileTime
VirtualProtect

Exports

Exports

API_HL_CSTACK
HLM_CHECKALLSLOTS
HLM_CHECKCOUNTER
HLM_CHECKEXPDATE
HLM_CHECKSLOT
HLM_FREESLOT
HLM_GETRUSINFO
HLM_ISRUSHL
HLM_LOGIN
HLM_LOGOUT
HLM_OCCUPYSLOT
HLM_WRITELICENSE
HL_ABORT
HL_ACCINF
HL_AVAIL
HL_CALC
HL_CODE
HL_ERRMSG
HL_ERRMSGB
HL_HLSVERS
HL_LMLOGIN
HL_LOGIN
HL_LOGOUT
HL_MAXUSER
HL_MEMINF
HL_OFF
HL_ON
HL_PORTINF
HL_RD
HL_READ
HL_READBL
HL_READID
HL_SELECT
HL_SERVERADDR
HL_SERVERLICENSES
HL_USERINF
HL_VERSION
HL_WR
HL_WRITE
HL_WRITEBL
INT_OFF
INT_ON
K_EYE
hasp_cleanup
hasp_datetime_to_hasptime
hasp_decrypt
hasp_detach
hasp_enable_trace
hasp_encrypt
hasp_free
hasp_get_info
hasp_get_rtc
hasp_get_sessioninfo
hasp_get_size
hasp_get_trace
hasp_get_version
hasp_hasptime_to_datetime
hasp_legacy_decrypt
hasp_legacy_encrypt
hasp_legacy_set_idletime
hasp_legacy_set_rtc
hasp_login
hasp_login_ex
hasp_login_port
hasp_login_scope
hasp_logout
hasp_read
hasp_transfer
hasp_update
hasp_vm_dyn_execute
hasp_write
sntl_admin_context_delete
sntl_admin_context_new
sntl_admin_context_new_scope
sntl_admin_free
sntl_admin_get
sntl_admin_set

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 590KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.llvm_ad
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cff73ab5413bbd42300a18991d90870f

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

0f:65:ee:66:81:d8:ce:b5:da:71:c5:ecCertificate

Extended Key Usages

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

0f:65:ee:66:81:d8:ce:b5:da:71:c5:ecCertificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

5f:91:e5:42:03:cc:e1:34:ab:5d:c9:8c:13:58:13:f5:94:6b:17:c4:58:b2:f0:f7:3b:8c:96:c0:7d:3e:21:ddSigner

85:98:aa:3a:79:c2:ca:88:e1:47:ad:8c:73:bf:2e:e7:67:78:7f:0dSigner

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 176KB - Virtual size: 590KB

.llvm_ad Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 164KB - Virtual size: 160KB

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

0f:65:ee:66:81:d8:ce:b5:da:71:c5:ec
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

0f:65:ee:66:81:d8:ce:b5:da:71:c5:ec
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

5f:91:e5:42:03:cc:e1:34:ab:5d:c9:8c:13:58:13:f5:94:6b:17:c4:58:b2:f0:f7:3b:8c:96:c0:7d:3e:21:dd
Signer

85:98:aa:3a:79:c2:ca:88:e1:47:ad:8c:73:bf:2e:e7:67:78:7f:0d
Signer

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 176KB - Virtual size: 590KB

.llvm_ad
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 164KB - Virtual size: 160KB