184f7bfc7550659ecf72301dbef01d60N

Sharing

Copy URL

Twitter E-mail

General

Target

184f7bfc7550659ecf72301dbef01d60N
Size

1.0MB
MD5

184f7bfc7550659ecf72301dbef01d60
SHA1

0fff9e1df6189e5fa77c40639d0a7f1cc14ee33b
SHA256

b7ed90eb0542f19931b97cb54b86a9e7a5008360ed12efe7e4fce5e7c956a005
SHA512

ae0e08c22aa8b6c327f19241921f08432cd6a25eec1a3791c9986a9400032dc3d7b8ad790f77ee2bdcc09a58f29d7db629420857f23f03e247764df45c5f40f3
SSDEEP

12288:VqflDDoYeF20NNHCA53Nj5rfmJUpDi3Ix1m9EX6EQ2Xbhv+q:V00E0NNHCAZNj5reJUp7hNbR+q

Score

1^/10

Malware Config

Signatures

Files

184f7bfc7550659ecf72301dbef01d60N
.exe windows:1 windows x86 arch:x86

b8c436887f0ff05ef82a9442bb6ba7ca

Code Sign

27:de:d5:f9:47:72:05:65:b7:27:63:c1:e0:9a:e4:7a
Certificate

Issuer

CN=HFMJJPSMAGVRRMHCHE

Not Before

07-11-2020 10:27

Not After

31-12-2039 23:59

Subject

CN=HFMJJPSMAGVRRMHCHE

Extended Key Usages

ExtKeyUsageCodeSigning

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:f3:bb:40:dd:1c:5f:9c:63:e6:e1:13:83:ad:4c:d5:c6:88:45:3a:45:fd:5e:8e:9c:6b:84:68:70:b1:6f:62
Signer

Actual PE Digest

77:f3:bb:40:dd:1c:5f:9c:63:e6:e1:13:83:ad:4c:d5:c6:88:45:3a:45:fd:5e:8e:9c:6b:84:68:70:b1:6f:62

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrlenA
GetLastError
VirtualAllocEx
GetModuleFileNameA
GetCurrentThreadId
GetCurrentProcessId
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileAttributesExA
SetFileAttributesA
CloseHandle
GetStartupInfoA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetDriveTypeA
GetTickCount
QueryPerformanceCounter
CreateFileA
Sleep
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CancelTimerQueueTimer
GetFileInformationByHandle
GlobalLock
GetNumberOfConsoleInputEvents
LocalCompact
EnumCalendarInfoExW
ReadFile
WriteProcessMemory
GetTempPathA
GetEnvironmentStringsA
GetSystemDirectoryA
GetProcessHeaps
SetConsoleCP
DeleteVolumeMountPointA
DeleteAtom
SetConsoleCursorPosition
WriteProfileStringA
GetConsoleAliasesLengthW
SetVolumeMountPointW
CopyFileA
PulseEvent
EnumDateFormatsExA
WritePrivateProfileSectionA
PurgeComm
GetTimeZoneInformation
EndUpdateResourceA
EnumDateFormatsA
GetSystemWindowsDirectoryA
GetProcessWorkingSetSize
GetCurrencyFormatA
EnumDateFormatsW
FindFirstVolumeMountPointW
ReadProcessMemory
GetThreadContext
SetConsoleCursor
GetThreadSelectorEntry
FreeEnvironmentStringsA
SetCommState
ReleaseSemaphore
FormatMessageW
FindFirstVolumeMountPointA
SetLastError
ReadConsoleA
SwitchToThread
MultiByteToWideChar
DisconnectNamedPipe
WriteFile
ConnectNamedPipe
CreateNamedPipeW
lstrlenW
OpenEventW
lstrcatW
SetConsoleCtrlHandler
ExitProcess
CreateFileW
GetStartupInfoW
CallNamedPipeW
lstrcmpA
lstrcatA
SuspendThread
ResumeThread
WaitForSingleObject
SetEvent
SetCommTimeouts
GetCommProperties
GetCommState
SetupComm
lstrcpyW
ResetEvent
GetOverlappedResult
WaitForMultipleObjects
ClearCommError
ExitThread
CreateEventW
CreateThread
WideCharToMultiByte

user32

BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
DefWindowProcA
LoadIconA
DispatchMessageA
PeekMessageA
SendDlgItemMessageA
EnableMenuItem
GetSystemMenu
CreateDialogParamA
CharNextExA
DestroyWindow
LoadAcceleratorsA
GetMenuDefaultItem
GetClipboardFormatNameW
PostThreadMessageA
MonitorFromWindow
PtInRect
FlashWindow
GetClassLongA
DrawStateA
WINNLSGetIMEHotkey
GetClassNameA
ChangeDisplaySettingsA
CreateMenu
CreateIconFromResource
GetAsyncKeyState
wsprintfW
GetMessageExtraInfo
SendInput
MapVirtualKeyW
keybd_event
OpenInputDesktop
OpenDesktopW
FindWindowW
SendMessageW
MessageBeep
GetCursorPos
SystemParametersInfoW
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationW
SetProcessWindowStation
SetThreadDesktop
CloseDesktop
CloseWindowStation
GetSystemMetrics
CharLowerA

gdi32

CreateSolidBrush
AddFontResourceA
GetEnhMetaFileA
GetEnhMetaFileBits
GetStockObject
GetPolyFillMode
SetBrushOrgEx
GdiAddFontResourceW
CreateCompatibleBitmap
GetViewportExtEx
GdiConvertRegion
EngStrokeAndFillPath
CreateICW
EnumFontFamiliesExA
CheckColorsInGamut
CreateDIBPatternBrushPt
EngCreateDeviceSurface
GdiValidateHandle
EnumFontFamiliesW
SetICMProfileW
MirrorRgn
PaintRgn
GdiPrinterThunk
FillRgn
GetDeviceCaps
STROBJ_bEnumPositionsOnly
EngReleaseSemaphore
EngGradientFill
Escape
GetStretchBltMode
GetTextAlign
EngDeletePath
GdiEntry9
GdiPlayScript
GetTextExtentPointA
EnumFontFamiliesExW
SetMagicColors
SelectClipRgn
EngDeleteSurface
PATHOBJ_bEnumClipLines
BRUSHOBJ_pvGetRbrush
GetOutlineTextMetricsW
GetBrushOrgEx
EngMarkBandingSurface
FloodFill

advapi32

RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
RegisterEventSourceW
ReportEventW
DeregisterEventSource
ChangeServiceConfigW
RegOpenKeyExW
OpenServiceW
CloseServiceHandle
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid

shell32

SHChangeNotify
SHGetFileInfoW
SHGetFolderPathA
ExtractAssociatedIconW
ExtractIconW
Shell_NotifyIcon
ShellExecuteExA
SHQueryRecycleBinA
SHGetDiskFreeSpaceA
SHGetDesktopFolder
SHGetIconOverlayIndexA
SHBindToParent
SHGetSpecialFolderLocation
SHLoadInProc
ShellExecuteA
DragAcceptFiles
DragQueryFileW
ExtractAssociatedIconExW
ExtractAssociatedIconExA
SHPathPrepareForWriteA
DragQueryFile
ExtractAssociatedIconA
Shell_NotifyIconW
FindExecutableA
SHAppBarMessage
SHGetPathFromIDListW
SHIsFileAvailableOffline
ShellExecuteW
ExtractIconExA
SHGetSpecialFolderPathW

shlwapi

StrStrIA
StrChrIA
StrStrW
StrChrW
StrRChrIW
StrChrA
StrCmpNIA
StrRChrW
StrRStrIW
StrRChrIA

winmm

PlaySoundA

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_controlfp

Sections

.text
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 617KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b8c436887f0ff05ef82a9442bb6ba7ca

Code Sign

27:de:d5:f9:47:72:05:65:b7:27:63:c1:e0:9a:e4:7aCertificate

Extended Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

77:f3:bb:40:dd:1c:5f:9c:63:e6:e1:13:83:ad:4c:d5:c6:88:45:3a:45:fd:5e:8e:9c:6b:84:68:70:b1:6f:62Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

winmm

msvcrt

Sections

.text Size: 346KB - Virtual size: 345KB

.rdata Size: 99KB - Virtual size: 98KB

.data Size: 617KB - Virtual size: 616KB

27:de:d5:f9:47:72:05:65:b7:27:63:c1:e0:9a:e4:7a
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

77:f3:bb:40:dd:1c:5f:9c:63:e6:e1:13:83:ad:4c:d5:c6:88:45:3a:45:fd:5e:8e:9c:6b:84:68:70:b1:6f:62
Signer

.text
Size: 346KB - Virtual size: 345KB

.rdata
Size: 99KB - Virtual size: 98KB

.data
Size: 617KB - Virtual size: 616KB