6ae62ec502bbd13aef27409e3f71cec1845ef781803816c1fe49d37fe1bd1fa4

Sharing

Copy URL Twitter E-mail

General

Target

6ae62ec502bbd13aef27409e3f71cec1845ef781803816c1fe49d37fe1bd1fa4
Size

42KB
MD5

b8461d17c48577d9261981c1a3f8873e
SHA1

70c73967f4620f9f0b54aa4e1070999e559c11f3
SHA256

6ae62ec502bbd13aef27409e3f71cec1845ef781803816c1fe49d37fe1bd1fa4
SHA512

e729446fa15a0cda0b60dd57a087541cb43596443f4c2536f71b1ca62b6db3b9b6057b0bc737049d4f646b2edb0c253062bb6ba0b70b501f2596f7d2e5088f33
SSDEEP

768:k0h7Ziur3SvggggggLvggggggggUa3jXOQ69zbjlAAX5e9ziLr:iurS3TizbR9XwzI

Score

1^/10

Malware Config

Signatures

Files

6ae62ec502bbd13aef27409e3f71cec1845ef781803816c1fe49d37fe1bd1fa4
.exe windows:5 windows x86 arch:x86

24ae095bcd89ea8f038fa2dcb5699fc5

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:25

Not After

01/09/2022, 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:74:21:42:cb:20:95:6d:e1:fb:bc:92:0d:32:7d:1b:07:34:da:29:50:77:ea:2f:55:14:8e:11:33:27:f0:cd
Signer

Actual PE Digest

19:74:21:42:cb:20:95:6d:e1:fb:bc:92:0d:32:7d:1b:07:34:da:29:50:77:ea:2f:55:14:8e:11:33:27:f0:cd

Digest Algorithm

sha256

PE Digest Matches

false

19:74:21:42:cb:20:95:6d:e1:fb:bc:92:0d:32:7d:1b:07:34:da:29:50:77:ea:2f:55:14:8e:11:33:27:f0:cd
Signer

Actual PE Digest

19:74:21:42:cb:20:95:6d:e1:fb:bc:92:0d:32:7d:1b:07:34:da:29:50:77:ea:2f:55:14:8e:11:33:27:f0:cd

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExW
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA

kernel32

GetStartupInfoA
lstrcpyA
GetModuleHandleA
GetCommandLineA
CloseHandle
CreateMutexA
LoadLibraryExA
CreateEventW

comctl32

ord17

shfolder

SHGetFolderPathA

shell32

SHGetMalloc
FindExecutableA
SHFreeNameMappings
SHGetDataFromIDListA
SHGetDiskFreeSpaceA
ExtractIconA
DragQueryFileA
DragFinish
DragQueryPoint
SHGetFileInfoA
ShellAboutA

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24ae095bcd89ea8f038fa2dcb5699fc5

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

19:74:21:42:cb:20:95:6d:e1:fb:bc:92:0d:32:7d:1b:07:34:da:29:50:77:ea:2f:55:14:8e:11:33:27:f0:cdSigner

19:74:21:42:cb:20:95:6d:e1:fb:bc:92:0d:32:7d:1b:07:34:da:29:50:77:ea:2f:55:14:8e:11:33:27:f0:cdSigner

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

comctl32

shfolder

shell32

msvcrt

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 11KB - Virtual size: 11KB

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

19:74:21:42:cb:20:95:6d:e1:fb:bc:92:0d:32:7d:1b:07:34:da:29:50:77:ea:2f:55:14:8e:11:33:27:f0:cd
Signer

19:74:21:42:cb:20:95:6d:e1:fb:bc:92:0d:32:7d:1b:07:34:da:29:50:77:ea:2f:55:14:8e:11:33:27:f0:cd
Signer

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 11KB - Virtual size: 11KB