0a5b65e294547106c86c379de9db8a4e7389476e0074f3aa1134b329b50ba8de

Sharing

Copy URL Twitter E-mail

General

Target

0a5b65e294547106c86c379de9db8a4e7389476e0074f3aa1134b329b50ba8de
Size

427KB
MD5

0d4e56dfbdfd92f15a5477611b0957be
SHA1

08c75fbb57ec60fcaacab55dc140cd71963826e9
SHA256

0a5b65e294547106c86c379de9db8a4e7389476e0074f3aa1134b329b50ba8de
SHA512

68180e4c0ed7cedce0b4c742cee599df07131d1876f436f8504d61831a8825f23bd47195db752ae514ccef573b8bcdc0ebb04d6e1eecf79bcac9fdbc6ce07268
SSDEEP

6144:doceFKqAPo3QjYB4xaYHGVxmtLzgOC0nNHKLI18pIoI9geRLGVQGpF7ukEZJ0cC9:6ce3QNayGTmd84RLGPpokEZJsfJaqvSq

Score

1^/10

Malware Config

Signatures

Files

0a5b65e294547106c86c379de9db8a4e7389476e0074f3aa1134b329b50ba8de
.exe windows:6 windows x86 arch:x86

46ec0d88eef0ee2fde5dd61c16676790

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:8b:f8:df:b3:11:81:7c:34:10:93:5d:b5:a7:3c:2a:91:87:99:65:10:ee:45:3d:4b:0b:55:b8:b0:f5:a5:3c
Signer

Actual PE Digest

50:8b:f8:df:b3:11:81:7c:34:10:93:5d:b5:a7:3c:2a:91:87:99:65:10:ee:45:3d:4b:0b:55:b8:b0:f5:a5:3c

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

minisoft.pdb

Imports

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
malloc

api-ms-win-crt-private-l1-1-0

memchr

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_errno
_exit
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
_fileno
_get_osfhandle
_isatty
_setmode
_wfopen
clearerr
fclose
ferror
fflush
fgetc
fgets
fputc
fread
fseek
ftell
fwrite
setvbuf
ungetc

api-ms-win-crt-string-l1-1-0

strlen
strncmp
wcslen

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-convert-l1-1-0

mbrtowc
wcrtomb

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eh_fram
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46ec0d88eef0ee2fde5dd61c16676790

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:afCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

50:8b:f8:df:b3:11:81:7c:34:10:93:5d:b5:a7:3c:2a:91:87:99:65:10:ee:45:3d:4b:0b:55:b8:b0:f5:a5:3cSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-convert-l1-1-0

Sections

.text Size: 296KB - Virtual size: 296KB

.rdata Size: 26KB - Virtual size: 26KB

.buildid Size: 512B - Virtual size: 65B

.data Size: 1024B - Virtual size: 8KB

.eh_fram Size: 50KB - Virtual size: 49KB

.tls Size: 5KB - Virtual size: 5KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 9KB - Virtual size: 9KB

/4 Size: 3KB - Virtual size: 2KB

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

50:8b:f8:df:b3:11:81:7c:34:10:93:5d:b5:a7:3c:2a:91:87:99:65:10:ee:45:3d:4b:0b:55:b8:b0:f5:a5:3c
Signer

.text
Size: 296KB - Virtual size: 296KB

.rdata
Size: 26KB - Virtual size: 26KB

.buildid
Size: 512B - Virtual size: 65B

.data
Size: 1024B - Virtual size: 8KB

.eh_fram
Size: 50KB - Virtual size: 49KB

.tls
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 9KB - Virtual size: 9KB

/4
Size: 3KB - Virtual size: 2KB