2faf45822d0d5382f4fc7cc9717b8b3a76917567525fdbeb39a79fd9b0996ead

Sharing

Copy URL Twitter E-mail

General

Target

2faf45822d0d5382f4fc7cc9717b8b3a76917567525fdbeb39a79fd9b0996ead
Size

40KB
MD5

07afc1e638b31314347c92fc6e0066d8
SHA1

b31ba0758f088f6fe63de8c696307ad7e2d8dc1c
SHA256

2faf45822d0d5382f4fc7cc9717b8b3a76917567525fdbeb39a79fd9b0996ead
SHA512

5bf4286be61510ad30dbee4528646d2aa78a4c427a1d8ac483b8d265d4efbcf5bf798a84c81a3a595e7fe2063c94a8e147ff36fd37a1c6c373c6e09bd2b2b489
SSDEEP

768:OnpnIYh43Dc3GbWXLFaun5jfkcha1MbdXOQ69zbjlAAX5e9zB:+Sq5jMca1MRizbR9XwzB

Score

1^/10

Malware Config

Signatures

Files

2faf45822d0d5382f4fc7cc9717b8b3a76917567525fdbeb39a79fd9b0996ead
.exe windows:5 windows x86 arch:x86

2882965f02737a1b501e426c9c6b57a3

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:b7:01:de:37:55:31:b7:86:4a:99:7c:09:72:13:32:6c:23:42:7e:c9:fa:c5:f5:26:6b:c4:d8:cd:9c:db:77
Signer

Actual PE Digest

fe:b7:01:de:37:55:31:b7:86:4a:99:7c:09:72:13:32:6c:23:42:7e:c9:fa:c5:f5:26:6b:c4:d8:cd:9c:db:77

Digest Algorithm

sha256

PE Digest Matches

false

fe:b7:01:de:37:55:31:b7:86:4a:99:7c:09:72:13:32:6c:23:42:7e:c9:fa:c5:f5:26:6b:c4:d8:cd:9c:db:77
Signer

Actual PE Digest

fe:b7:01:de:37:55:31:b7:86:4a:99:7c:09:72:13:32:6c:23:42:7e:c9:fa:c5:f5:26:6b:c4:d8:cd:9c:db:77

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DefWindowProcA
PostQuitMessage
GetForegroundWindow
SetForegroundWindow
GetDoubleClickTime
GetQueueStatus
LoadIconA
RegisterClassA

gdi32

IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
RealizePalette

msacm32

acmStreamOpen
acmDriverPriority

advapi32

RegQueryValueExA
RegOpenKeyA
GetUserNameA
CopySid
GetLengthSid

imm32

ImmGetCompositionStringW
ImmSetCompositionFontA
ImmGetContext
ImmSetCompositionWindow

kernel32

GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 217B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data4
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2882965f02737a1b501e426c9c6b57a3

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

fe:b7:01:de:37:55:31:b7:86:4a:99:7c:09:72:13:32:6c:23:42:7e:c9:fa:c5:f5:26:6b:c4:d8:cd:9c:db:77Signer

fe:b7:01:de:37:55:31:b7:86:4a:99:7c:09:72:13:32:6c:23:42:7e:c9:fa:c5:f5:26:6b:c4:d8:cd:9c:db:77Signer

Headers

File Characteristics

Imports

user32

gdi32

msacm32

advapi32

imm32

kernel32

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 217B

.data4 Size: 7KB - Virtual size: 7KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 7KB

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

fe:b7:01:de:37:55:31:b7:86:4a:99:7c:09:72:13:32:6c:23:42:7e:c9:fa:c5:f5:26:6b:c4:d8:cd:9c:db:77
Signer

fe:b7:01:de:37:55:31:b7:86:4a:99:7c:09:72:13:32:6c:23:42:7e:c9:fa:c5:f5:26:6b:c4:d8:cd:9c:db:77
Signer

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 217B

.data4
Size: 7KB - Virtual size: 7KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 7KB