e372bf3c1a3574a7f3feaa4bcdc1e0b2bcb7f0ea8051b001379fd8cbef19b4b1

Sharing

Copy URL

Twitter E-mail

General

Target

e372bf3c1a3574a7f3feaa4bcdc1e0b2bcb7f0ea8051b001379fd8cbef19b4b1
Size

2.9MB
MD5

0806d43a6fcee98734d24543b53c7ff8
SHA1

56d5c86cbc291a52a1506cc4284884f15b451514
SHA256

e372bf3c1a3574a7f3feaa4bcdc1e0b2bcb7f0ea8051b001379fd8cbef19b4b1
SHA512

dd8160532245374793c221f9a58c724bc7f18b466f0d47c7724846e623351787616b02ce1ffafac8d31edf9be8ba6187da0520577df45a231678ab574f2745b0
SSDEEP

49152:BlhLKc+4Szu7aFpVZEJsnezWuorVCIC+4Vtcuobj6IbfINwc:BrRShFVQzRord4ouW9jI7

Score

1^/10

Malware Config

Signatures

Files

e372bf3c1a3574a7f3feaa4bcdc1e0b2bcb7f0ea8051b001379fd8cbef19b4b1
.dll windows:6 windows x64 arch:x64

7fe4b615afeb0d6b180dddab6bfafab6

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:23:ac:43:d5:02:a9:02:3c:49:e0:59:45:f1:e3:27
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

25/02/2022, 00:00

Not After

24/02/2025, 23:59

Subject

CN=Thomas Baier,O=Thomas Baier,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:0d:e9:99:f5:50:eb:9c:cf:2b:9a:55:d1:64:ed:2c:35:5f:96:cb
Signer

Actual PE Digest

38:0d:e9:99:f5:50:eb:9c:cf:2b:9a:55:d1:64:ed:2c:35:5f:96:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\source\vst1\iPlug2_work\MyWork\ISOL8\build-win\pdbs\ISOL8-vst3_x64.pdb

Imports

wininet

InternetGetConnectedState

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsA

kernel32

SetThreadPriority
GetSystemDirectoryW
UnmapViewOfFile
Sleep
CreateFileA
GetCurrentThread
LoadLibraryA
GlobalAlloc
CreateThread
GlobalLock
CreateFileMappingA
GetFileSize
VerSetConditionMask
GetCurrentProcessId
VerifyVersionInfoW
MapViewOfFile
GetTickCount
GlobalUnlock
SizeofResource
EnumResourceNamesA
FindResourceA
LockResource
LoadResource
CreateDirectoryW
FindFirstFileExW
GetFullPathNameW
FindNextFileW
HeapSize
FlushFileBuffers
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
GetCurrentDirectoryW
GetFileSizeEx
GetConsoleOutputCP
WriteFile
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetStdHandle
HeapAlloc
HeapFree
HeapReAlloc
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
ReadFile
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
GetLastError
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
ResetEvent
CloseHandle
SetEvent
WaitForSingleObject
GetTickCount64
WideCharToMultiByte
RtlUnwind
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
FindClose
SetEndOfFile
WriteConsoleW
GetLocaleInfoW
DecodePointer
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
QueryPerformanceFrequency
InitializeCriticalSectionEx
EncodePointer

user32

VkKeyScanExA
GetKeyboardLayout
GetKeyState
GetMessageExtraInfo
GetUpdateRgn
CloseTouchInputHandle
GetTouchInputInfo
GetWindowRect
LoadCursorA
DestroyWindow
GetDC
SetWindowPos
PostMessageA
CreateWindowExW
ScreenToClient
SendMessageW
GetSystemMetrics
CreatePopupMenu
TrackPopupMenu
GetKeyboardState
OpenClipboard
RegisterWindowMessageA
GetCapture
RegisterTouchWindow
ClientToScreen
CloseClipboard
CallWindowProcA
EmptyClipboard
GetWindowLongA
ValidateRect
GetDoubleClickTime
TrackMouseEvent
SetWindowTextA
MessageBoxA
RegisterClassA
GetMessageTime
DefWindowProcA
DestroyMenu
CreateWindowExA
SetFocus
GetClipboardData
SendMessageA
SetCapture
SetClipboardData
SetCursor
AppendMenuA
PeekMessageA
IsClipboardFormatAvailable
GetWindowLongPtrA
UnregisterClassA
GetParent
SetWindowLongPtrA
UpdateWindow
ReleaseCapture
ShowCursor
InvalidateRect
GetAncestor
SetCursorPos
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
ToAscii
SetTimer
KillTimer

gdi32

AddFontMemResourceEx
SelectObject
CreateCompatibleDC
GetStockObject
EnumFontFamiliesExA
CreateRectRgn
DeleteDC
SetTextColor
GetFontData
ChoosePixelFormat
GetRegionData
SetBkMode
SetDCBrushColor
CreateFontIndirectA
SetBkColor
DeleteObject
RemoveFontMemResourceEx
SwapBuffers
GetRgnBox
GetObjectA
SetPixelFormat
GetTextFaceA

comdlg32

GetOpenFileNameW
ChooseColorA
GetSaveFileNameW

shell32

DragAcceptFiles
ShellExecuteW
DragQueryPoint
DragQueryFileA
SHBrowseForFolderA
SHGetFolderPathW
SHGetPathFromIDListA

ole32

OleInitialize
CoTaskMemFree
OleUninitialize
CoCreateGuid

opengl32

wglMakeCurrent
wglDeleteContext
wglCreateContext
wglGetCurrentDC
wglGetCurrentContext

Exports

Exports

ExitDll
GetPluginFactory
InitDll

Sections

.text
Size: 957KB - Virtual size: 957KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 367KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fe4b615afeb0d6b180dddab6bfafab6

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

48:23:ac:43:d5:02:a9:02:3c:49:e0:59:45:f1:e3:27Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

38:0d:e9:99:f5:50:eb:9c:cf:2b:9a:55:d1:64:ed:2c:35:5f:96:cbSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

comctl32

shlwapi

kernel32

user32

gdi32

comdlg32

shell32

ole32

opengl32

Exports

Exports

Sections

.text Size: 957KB - Virtual size: 957KB

.rdata Size: 226KB - Virtual size: 225KB

.data Size: 367KB - Virtual size: 380KB

.pdata Size: 38KB - Virtual size: 38KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 11KB - Virtual size: 10KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

48:23:ac:43:d5:02:a9:02:3c:49:e0:59:45:f1:e3:27
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

38:0d:e9:99:f5:50:eb:9c:cf:2b:9a:55:d1:64:ed:2c:35:5f:96:cb
Signer

.text
Size: 957KB - Virtual size: 957KB

.rdata
Size: 226KB - Virtual size: 225KB

.data
Size: 367KB - Virtual size: 380KB

.pdata
Size: 38KB - Virtual size: 38KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 11KB - Virtual size: 10KB