676a126ed20279ce7c5e5cedc0556660N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

676a126ed20279ce7c5e5cedc0556660N.exe
Size

670KB
MD5

676a126ed20279ce7c5e5cedc0556660
SHA1

51ffb952dabb0ea43b3bc28252a7937a7885f6b9
SHA256

4880f9ffceb2ad93e970ac9739ad3b5542f272eb391fb47c6e491a183fa94088
SHA512

de5deb9db105ccb97e712dc1b492414af57e12904bd92446fe91648572f5eda8ddbcc0573fff44a03dff9dece7153481f1ff908d1bbe3887b1d0060224d8fac8
SSDEEP

12288:JoYwnr/bCHGeXLKs2rETD80zTSJBjvrEH7Psh:6YwnrbEiEc0z6rEH7Psh

Score

1^/10

Malware Config

Signatures

Files

676a126ed20279ce7c5e5cedc0556660N.exe
.dll windows:5 windows x86 arch:x86

9ca926ff99e9393b3b9f22535d8b0a02

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:e9:ba:3c:0d:a3:f0:3f:c1:38:b8:60:3d:03:60:31
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

25/08/2022, 00:00

Not After

19/07/2023, 23:59

Subject

SERIALNUMBER=314-81-19071,CN=INITECH Co.\, Ltd.,O=INITECH Co.\, Ltd.,L=Guro-gu,ST=Seoul,C=KR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b52

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:a3:f0:a6:13:ae:28:ea:68:e4:9e:21:ca:cc:34:dc:16:f2:a0:22:86:d6:ff:33:64:40:b3:e4:71:96:1d:72
Signer

Actual PE Digest

9b:a3:f0:a6:13:ae:28:ea:68:e4:9e:21:ca:cc:34:dc:16:f2:a0:22:86:d6:ff:33:64:40:b3:e4:71:96:1d:72

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Jenkins_Workspace\workspace\libPKI_v5.4_for_Windows\bin\inipki_v5.4.3.pdb

Imports

inicrypto_v5.4.1

ISC_New_ECURVE
ISC_Set_ECURVE_Params
ISC_Init_KCDSA_Ex
ISC_Get_DIGEST_Alg_ID_By_Name
ISC_BIGINT_To_DEC
ISC_Clean_ECDSA
ISC_Clean_RSA
ISC_Free_KCDSA
ISC_HEX_To_BIGINT
ISC_Dup_RSA
ISC_Set_ECDSA_Params
ISC_Clean_KCDSA
ISC_Print_BIGINT
ISC_Free_ECC_Key
ISC_Free_ECPOINT
ISC_New_ECC_Key
ISC_New_ECPOINT
ISC_Get_ECC_Byte_Length
ISC_New_ECDSA
ISC_Set_KCDSA_Params
ISC_Update_KCDSA
ISC_New_KCDSA
ISC_Final_ECDSA
ISC_Update_ECDSA
ISC_Final_KCDSA
ISC_Value_One_BIGINT
ISC_Init_RSAES
ISC_Init_ECDSA
ISC_Verify_KCDSA
ISC_Verify_RSASSA
ISC_Get_RSA_Length
ISC_Get_KCDSA_Length
ISC_Decrypt_RSAES
ISC_Init_KCDSA
ISC_Encrypt_RSAES
ISC_Get_Block_Length
ISC_Get_Key_Length
ISC_BLOCK_CIPHER
ISC_Add_BIGINT_Word
ISC_New_DIGEST_Unit
ISC_Get_IV_Length
ISC_Add_BIGINT
ISC_Init_HMAC
ISC_Free_RC4_Unit
ISC_Update_HMAC
ISC_Get_DIGEST_Length
ISC_Free_HMAC_Unit
ISC_Free_DIGEST_Unit
ISC_New_RC4_Unit
ISC_New_HMAC_Unit
ISC_Copy_BIGINT
ISC_Final_HMAC
ISC_Do_RC4
ISC_BIGINT_To_Binary_Unsigned
ISC_Get_BIGINT_Word
ISC_Init_RC4
ISC_Free_RSA
ISC_Set_BIGINT_Word
ISC_Init_BLOCK_CIPHER
ISC_New_BLOCK_CIPHER_Unit
ISC_Update_DIGEST
ISC_Final_DIGEST
ISC_Final_BLOCK_CIPHER
ISC_Free_BLOCK_CIPHER_Unit
ISC_Update_BLOCK_CIPHER
ISC_New_RSA
ISC_Init_DIGEST
ISC_Rand_Bytes
ISC_Free_ECDSA
ISC_Set_RSA_Params
ISC_Set_RSA_Public_Params
ISC_Dup_BIGINT
ISC_Update_RSASSA
ISC_Final_RSASSA
ISC_Init_RSASSA
ISC_Cmp_BIGINT
ISC_Free_BIGINT
ISC_Binary_To_BIGINT
ISC_Realloc
ISC_Get_BIGINT_Bits_Length
ISC_New_BIGINT
ISC_BIGINT_To_Binary
ISC_DIGEST
ISC_Free
ISC_Malloc
ISC_Calloc

kernel32

FreeLibrary
CompareStringW
CompareStringA
HeapSize
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetModuleHandleA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
CreateFileA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
ReadFile
LCMapStringW
MultiByteToWideChar
LCMapStringA
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetModuleFileNameA
ExitProcess
Sleep
GetModuleHandleW
HeapReAlloc
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
CloseHandle
GetConsoleMode
GetConsoleCP
WriteFile
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
GetTimeZoneInformation
WideCharToMultiByte
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetCurrentThreadId
HeapAlloc
HeapFree
GetLastError
GetSystemTimeAsFileTime
LoadLibraryA
GetProcAddress
SetEnvironmentVariableA

Exports

Exports

ACCESS_DESCRIPTION_to_Seq
ASN1_STRING_to_Seq
ASN1_STRING_to_binary
ASN1_to_FILE
ASN1_to_binary
ASYMMETRIC_KEY_to_ECDSA_UNIT
ASYMMETRIC_KEY_to_KCDSA_UNIT
ASYMMETRIC_KEY_to_RSA_UNIT
AUTHORITY_INFO_ACCESS_to_Seq
AUTHORITY_KEYID_to_Seq
BASIC_CONSTRAINTS_to_Seq
BASIC_OCSP_RESPONSE_to_Seq
BITSTRING_to_ECC_KEY
BITSTRING_to_ECDSA_KEY
BITSTRING_to_EC_KEY
BITSTRING_to_KCDSA_KEY
BITSTRING_to_RSA_KEY
CERTIFICATE_POLICIES_to_Seq
CERT_TRUST_LIST_to_Seq
CMS_AUTHENTICATED_DATA_to_Seq
CMS_CONTENT_INFO_to_Seq
CMS_DIGESTED_DATA_to_Seq
CMS_ENCRYPTED_DATA_to_Seq
CMS_ENVELOPED_DATA_to_Seq
CMS_ORIGINATOR_INFO_to_Seq
CMS_RECIPIENT_INFOS_to_Seq
CMS_RECIPIENT_INFO_to_Seq
CMS_SIGNED_DATA_to_Seq
CMS_SIGNER_INFOS_to_Seq
CMS_SIGNER_INFO_to_Seq
CRL_DIST_POINTS_to_Seq
CertBag_to_X509_CERT
DIST_POINT_to_Seq
ECC_KEY_to_BITSTRING
ECDSA_KEY_to_BITSTRING
ECDSA_UNIT_to_ASYMMETRIC_KEY
EC_KEY_to_BITSTRING
EC_PRIVATE_KEY_to_Seq
EC_PUBLIC_KEY_to_Seq
EDIPARTYNAME_to_Seq
ENCAPSULATED_CONTENT_INFO_to_Seq
File_to_binary
GENERAL_NAMES_to_Seq
GENERAL_NAME_to_Seq
GENERAL_SUBTREES_to_Seq
GENERAL_SUBTREE_to_Seq
IPL_print_hex
IPL_print_hex_nl
IPL_print_hex_no_nl
ISSUER_AND_SERIAL_NUMBER_to_Seq
KCDSA_KEY_to_BITSTRING
KCDSA_KEY_to_Seq
KCDSA_UNIT_to_ASYMMETRIC_KEY
KISA_IDENTIFY_DATA_to_Seq
NAME_CONSTRAINTS_to_Seq
NOTICE_NUMBERS_to_Seq
NOTICE_REFERENCE_to_Seq
OCSP_REQUEST_to_Seq
OCSP_RESPONSE_BYTES_to_Seq
OCSP_RESPONSE_DATA_to_Seq
OCSP_RESPONSE_to_Seq
OCSP_REVOKED_INFO_to_Seq
OCSP_SINGLE_REQUEST_to_Seq
OCSP_SINGLE_RESPONSE_to_Seq
OCSP_TBS_REQUEST_to_Seq
OID_LIST
OTHERNAME_to_Seq
P12_AUTH_SAFE_to_PKCS12
P12_AUTH_SAFE_to_Seq
P12_BAGS_to_Seq
P12_PFX_to_Seq
P12_SAFEBAGS_to_Seq
P12_SAFEBAG_to_Seq
P5_PBE_PARAM_to_Seq
P7_CONTENT_INFO_to_Seq
P7_CONTENT_INFO_to_Seq_Scraping
P7_DIGESTED_DATA_to_Seq
P7_DIGEST_INFO_to_Seq
P7_ENCRYPTED_CONTENT_INFO_to_Seq
P7_ENCRYPTED_DATA_to_Seq
P7_ENVELOPED_DATA_to_Seq
P7_ENVELOPED_DATA_to_Seq_Scraping
P7_ISSUER_AND_SERIAL_NUMBER_to_Seq
P7_RECIPIENT_INFOS_to_Seq
P7_RECIPIENT_INFO_to_Seq
P7_SIGNED_AND_ENVELOPED_DATA_to_Seq
P7_SIGNED_DATA_to_Seq
P7_SIGNER_INFOS_to_Seq
P7_SIGNER_INFO_to_Seq
P8_ENCRYPTED_KEY_to_Seq
P8_PRIV_KEY_INFO_to_Seq
PBKDF
PBKDF1
PBKDF2
PKCS12_add_safe
PKCS12_add_safes
PKCS12_to_P12_AUTH_SAFE
PKCS1_RSA_PRIVATE_KEY_to_Seq
PKCS1_RSA_PUBLIC_KEY_to_Seq
POLICY_CONSTRAINTS_to_Seq
POLICY_INFO_to_Seq
POLICY_MAPPINGS_to_Seq
POLICY_MAPPING_to_Seq
POLICY_QUALIFIERS_to_Seq
POLICY_QUALIFIER_INFO_to_Seq
RSAES_OAEP_PARAM_to_Seq
RSASSA_PSS_PARAM_to_Seq
RSA_KEY_to_BITSTRING
RSA_KEY_to_Seq
RSA_UNIT_to_ASYMMETRIC_KEY
Seq_to_ACCESS_DESCRIPTION
Seq_to_AUTHORITY_INFO_ACCESS
Seq_to_AUTHORITY_KEYID
Seq_to_BASIC_CONSTRAINTS
Seq_to_CERTIFICATE_POLICIES
Seq_to_CERT_TRUST_LIST
Seq_to_CMS_AUTHENTICATED_DATA
Seq_to_CMS_CONTENT_INFO
Seq_to_CMS_DIGESTED_DATA
Seq_to_CMS_ENCRYPTED_CONTENT_INFO
Seq_to_CMS_ENCRYPTED_DATA
Seq_to_CMS_ENVELOPED_DATA
Seq_to_CMS_ORIGINATOR_INFO
Seq_to_CMS_RECIPIENT_INFO
Seq_to_CMS_RECIPIENT_INFOS
Seq_to_CMS_SIGNED_DATA
Seq_to_CMS_SIGNER_INFO
Seq_to_CMS_SIGNER_INFOS
Seq_to_CRL_DIST_POINTS
Seq_to_DIST_POINT
Seq_to_EC_PRIVATE_KEY
Seq_to_EC_PUBLIC_KEY
Seq_to_EDIPARTYNAME
Seq_to_ENCAPSULATED_CONTENT_INFO
Seq_to_GENERAL_NAME
Seq_to_GENERAL_NAMES
Seq_to_GENERAL_SUBTREE
Seq_to_GENERAL_SUBTREES
Seq_to_ISSUER_AND_SERIAL_NUMBER
Seq_to_KCDSA_KEY
Seq_to_KISA_HSM_SIGNATURE_VALUE
Seq_to_KISA_IDENTIFY_DATA
Seq_to_NAME_CONSTRAINTS
Seq_to_NOTICE_NUMBERS
Seq_to_NOTICE_REFERENCE
Seq_to_OCSP_CERT_ID
Seq_to_OCSP_REQUEST
Seq_to_OCSP_RESPONSE
Seq_to_OCSP_RESPONSE_BYTES
Seq_to_OCSP_RESPONSE_DATA
Seq_to_OCSP_REVOKED_INFO
Seq_to_OCSP_SINGLE_REQUEST
Seq_to_OCSP_SINGLE_RESPONSE
Seq_to_OCSP_TBS_REQUEST
Seq_to_OTHERNAME
Seq_to_P12_AUTH_SAFE
Seq_to_P12_BAGS
Seq_to_P12_PFX
Seq_to_P12_SAFEBAG
Seq_to_P12_SAFEBAGS
Seq_to_P5_PBE_PARAM
Seq_to_P7_CONTENT_INFO
Seq_to_P7_DIGESTED_DATA
Seq_to_P7_DIGEST_INFO
Seq_to_P7_ENCRYPTED_CONTENT_INFO
Seq_to_P7_ENCRYPTED_DATA
Seq_to_P7_ENVELOPED_DATA
Seq_to_P7_ISSUER_AND_SERIAL_NUMBER
Seq_to_P7_RECIPIENT_INFO
Seq_to_P7_RECIPIENT_INFOS
Seq_to_P7_SIGNED_AND_ENVELOPED_DATA
Seq_to_P7_SIGNED_DATA
Seq_to_P7_SIGNER_INFO
Seq_to_P7_SIGNER_INFOS
Seq_to_P8_ENCRYPTED_KEY
Seq_to_P8_PRIV_KEY_INFO
Seq_to_PKCS1_RSA_PRIVATE_KEY
Seq_to_PKCS1_RSA_PUBLIC_KEY
Seq_to_POLICY_CONSTRAINTS
Seq_to_POLICY_INFO
Seq_to_POLICY_MAPPING
Seq_to_POLICY_MAPPINGS
Seq_to_POLICY_QUALIFIERS
Seq_to_POLICY_QUALIFIER_INFO
Seq_to_RSAES_OAEP_PARAM
Seq_to_RSASSA_PSS_PARAM
Seq_to_RSA_KEY
Seq_to_TRUSTED_CERTIFICATE
Seq_to_TRUSTED_SUBJECTS
Seq_to_USER_NOTICE
Seq_to_VID
Seq_to_X509_ALGO_IDENTIFIER
Seq_to_X509_ALGO_IDENTIFIERS
Seq_to_X509_ATTRIBUTE
Seq_to_X509_ATTRIBUTES
Seq_to_X509_CERT
Seq_to_X509_CERTIFICATES
Seq_to_X509_CERT_PAIR
Seq_to_X509_CRL
Seq_to_X509_CRLS
Seq_to_X509_CRL_INFO
Seq_to_X509_EXTENSIONS
Seq_to_X509_NAME
Seq_to_X509_PUBKEY
Seq_to_X509_REVOKED
Seq_to_X509_SIGN
Seq_to_X509_TBS_CERT
Seq_to_issuing_DIST_POINT
Seq_to_issuing_DIST_POINTS
TRUSTED_CERTIFICATE_to_Seq
TRUSTED_SUBJECTS_to_Seq
USER_NOTICE_to_Seq
VID_to_Seq
X509_ALGO_IDENTIFIERS_to_Seq
X509_ALGO_IDENTIFIER_to_Seq
X509_ATTRIBUTES_to_Seq
X509_ATTRIBUTE_to_Seq
X509_CERTIFICATES_to_Seq
X509_CERT_PAIR_to_Seq
X509_CERT_digest
X509_CERT_to_CertBag
X509_CERT_to_Seq
X509_CRLS_to_Seq
X509_CRL_INFO_to_Seq
X509_CRL_to_Seq
X509_EXTENSIONS_to_Seq
X509_NAME_to_Seq
X509_PUBKEY_to_Seq
X509_REVOKED_to_Seq
X509_SIGN_to_Seq
X509_TBS_CERT_to_Seq
_assign_function_list
_load_pkcs11_module
_unload_pkcs11_module
addPadToBERBitString
addToBERSequence
addToBERSequenceOf
addToBERSequence_CS
addToBERSet
addToBERSetOf
addToBERStringSequence
addToDERSequence
addToDERSequenceOf
addToDERSequence_CS
addToDERSet
addToDERSetOf
add_CMS_Authenticated_Attribute
add_CMS_CRL
add_CMS_Certificate
add_CMS_Originator_CRL
add_CMS_Originator_Certificate
add_CMS_RECIPIENT_INFO
add_CMS_Recipient
add_CMS_Signature
add_CMS_Signed_Attribute
add_CMS_Unauthenticated_Attribute
add_CMS_Unprotected_Attribute
add_CMS_Unsigned_Attribute
add_GENERALIZED_TIME
add_OBJECT_IDENTIFIERS
add_PKCS12_LKID
add_PKCS12_bag
add_PKCS12_cert
add_PKCS12_friendlyname_ASC
add_PKCS12_friendlyname_UNI
add_PKCS12_keyinfo
add_PKCS7_Certificate
add_PKCS7_Crl
add_PKCS7_P7_RECIPIENT_INFO
add_PKCS7_Recipient
add_PKCS7_Recipient_withEncryptedAlgorithm
add_PKCS7_Signature
add_PKCS7_Signature_withEncryptedAlgorithm
add_PKCS7_Signed_Attribute
add_PKCS7_Signer
add_PKCS7_Unauthenticated_Attribute
add_UTC_TIME
add_X509_ATTRIBUTES_OID_INDEX
add_X509_ATTRIBUTES_child
add_X509_ATTRIBUTES_child_OID
add_X509_ATTRIBUTE_data
add_X509_ATTRIBUTE_set
add_X509_CERTIFICATES
add_X509_CRL_ext
add_X509_CRL_revoked
add_X509_EXTENSION
add_X509_NAME_child
add_X509_NAME_child_OID
add_X509_NAME_child_OID_index
add_X509_REVOKED_child
add_X509_REVOKED_ext
add_single_OCSP_RESPONSE
ascTouni
asn1TimeToGENERALIZED_TIME
asn1TimeToUTC_TIME
base64ToPEM
binaryToBIT_STRING
binary_to_File
bmpToCP949
charToASN1_TIME
checkDER
check_ASN1_TIME
check_VID
check_X509_ECDSA_keypair
check_X509_KCDSA_keypair
check_X509_RSA_keypair
check_X509_keypair
clean_ASN1_STRING
clean_ASN1_TIME
clean_ASN1_UNIT
clean_BASIC_OCSP_RESPONSE
clean_BIT_STRING
clean_BMP_STRING
clean_CERT_TRUST_LIST
clean_EC_PRIVATE_KEY
clean_EC_PUBLIC_KEY
clean_GENERALIZED_TIME
clean_IA5_STRING
clean_KISA_HSM_DRIVER_INFO
clean_KISA_HSM_SIGNATURE_TOKEN
clean_KISA_HSM_SIGNATURE_VALUE
clean_KISA_HSM_TOKEN_DISTRIBUTION_URL
clean_OBJECT_IDENTIFIER
clean_OCSP_CERT_ID
clean_OCSP_CERT_STATUS
clean_OCSP_REQUEST
clean_OCSP_RESPONDER_ID
clean_OCSP_RESPONSE
clean_OCSP_RESPONSE_BYTES
clean_OCSP_RESPONSE_DATA
clean_OCSP_REVOKED_INFO
clean_OCSP_SIGNATURE
clean_OCSP_SINGLE_REQUEST
clean_OCSP_SINGLE_RESPONSE
clean_OCSP_TBS_REQUEST
clean_OCTET_STRING
clean_P5_PBE_PARAM
clean_P8_PRIV_KEY_INFO
clean_PKCS1_RSA_PRIVATE_KEY
clean_PKCS1_RSA_PUBLIC_KEY
clean_PKCS8
clean_PRINTABLE_STRING
clean_RSAES_OAEP_PARAM
clean_RSASSA_PSS_PARAM
clean_T61_STRING
clean_UTC_TIME
clean_UTF8_STRING
clean_X509_CERT
clean_X509_CRL
cmp_ASN1_STRING
cmp_ASN1_TIME
cmp_ASYMMETRIC_KEY
cmp_GENERALIZED_TIME
cmp_ISSUER_AND_SERIAL_NUMBER
cmp_OBJECT_IDENTIFIER
cmp_P7_ISSUER_AND_SERIAL_NUMBER
cmp_UTC_TIME
cmp_X509_DN
cmp_X509_NAME
cmp_X509_PUBKEY
copy_GENERALIZED_TIME
copy_UTC_TIME
copy_X509_TIME
cp949ToBMP
cp949ToUTF8
cp949ToUnicode
create_X509_ATTRIBUTE_OID
create_X509_ATTRIBUTE_index
create_X509_EXTENSION_by_OID
create_X509_EXTENSION_by_OID_index
decodeToBERASN1String
decodeToBERBMPString
decodeToBERBitString
decodeToBERBoolean
decodeToBEREnumerated
decodeToBERGENERALIZEDTime
decodeToBERIA5String
decodeToBERInteger
decodeToBERNull
decodeToBERObjectIdentifier
decodeToBEROctetString
decodeToBERPrintableString
decodeToBERSequence
decodeToBERT61String
decodeToBERUTCTime
decodeToBERUTF8String
decodeToDERASN1String
decodeToDERBMPString
decodeToDERBitString
decodeToDERBoolean
decodeToDEREnumerated
decodeToDERGENERALIZEDTime
decodeToDERIA5String
decodeToDERInteger
decodeToDERNull
decodeToDERObjectIdentifier
decodeToDEROctetString
decodeToDERPrintableString
decodeToDERSequence
decodeToDERUTCTime
decodeToDERUTF8String
decode_Base64
decode_ECDSASignatureValue
decode_KCDSASignatrueValue
decode_KCDSASignatureValue
decode_PEM
decrypt_CMS
decrypt_PBES1
decrypt_PBES1_GPKI
decrypt_PBES1_KISA
decrypt_PBES2
decrypt_PKCS5
decrypt_PKCS7
decrypt_PKCS7_enveloped_CEK
decrypt_content_encryption_key
digest_CMS
digest_PKCS7
dump_ASN1STRING
dump_PCHAR
dump_hex
dup_ACCESS_DESCRIPTION
dup_ASN1_STRING
dup_ASN1_TIME
dup_ASN1_UNIT
dup_ASYMMETRIC_KEY
dup_AUTHORITY_KEYID
dup_BASIC_CONSTRAINTS
dup_CERTIFICATE_POLICIES
dup_CRL_DIST_POINTS
dup_DIST_POINT
dup_DIST_POINT_NAME
dup_EDIPARTYNAME
dup_GENERAL_NAME
dup_GENERAL_NAMES
dup_GENERAL_SUBTREE
dup_GENERAL_SUBTREES
dup_ISSUING_DIST_POINTS
dup_NAME_CONSTRAINTS
dup_NOTICE_REFERENCE
dup_OBJECT_IDENTIFIER
dup_OCSP_CERT_ID
dup_OCSP_REVOKED_INFO
dup_OTHERNAME
dup_P8_ENCRYPTED_KEY
dup_P8_PRIV_KEY_INFO
dup_POLICY_CONSTRAINTS
dup_POLICY_INFO
dup_POLICY_MAPPING
dup_POLICY_MAPPINGS
dup_POLICY_QUALIFIERS
dup_POLICY_QUALIFIER_INFO
dup_RSAES_OAEP_PARAM
dup_RSASSA_PSS_PARAM
dup_STACK
dup_USER_NOTICE
dup_X509_ALGO_IDENTIFIER
dup_X509_ALGO_IDENTIFIERS
dup_X509_ATTRIBUTE
dup_X509_ATTRIBUTES
dup_X509_ATTRIBUTE_DATA
dup_X509_AUX
dup_X509_CERT
dup_X509_EXTENSION
dup_X509_EXTENSIONS
dup_X509_NAME
dup_X509_NAME_CHILD
dup_X509_PUBKEY
dup_X509_REVOKED
encodeToBER
encodeToBERASN1String
encodeToBERBitString
encodeToBERBoolean
encodeToBERGENERALIZEDTime
encodeToBERInteger
encodeToBERNull
encodeToBERObjectIdentifier
encodeToBERUTCTime
encodeToBER_CS
encodeToBER_CS_Scraping
encodeToDER
encodeToDER_CS
encodeToDER_CS_Scraping
encode_Base64
encode_Base64_Line
encode_ECDSASignatureValue
encode_KCDSASignatrueValue
encode_KCDSASignatureValue
encode_PEM
encrypt_CMS
encrypt_CMS_RecipientInfo
encrypt_CMS_userKEY
encrypt_PBES1
encrypt_PBES1_GPKI
encrypt_PBES1_KISA
encrypt_PBES2
encrypt_PKCS5
encrypt_PKCS5_Apply_PBES2
encrypt_PKCS5_ex
encrypt_PKCS7
encrypt_PKCS7_userKEY

Sections

.text
Size: 415KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ca926ff99e9393b3b9f22535d8b0a02

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

08:e9:ba:3c:0d:a3:f0:3f:c1:38:b8:60:3d:03:60:31Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

9b:a3:f0:a6:13:ae:28:ea:68:e4:9e:21:ca:cc:34:dc:16:f2:a0:22:86:d6:ff:33:64:40:b3:e4:71:96:1d:72Signer

Headers

File Characteristics

PDB Paths

Imports

inicrypto_v5.4.1

kernel32

Exports

Exports

Sections

.text Size: 415KB - Virtual size: 414KB

.rdata Size: 46KB - Virtual size: 45KB

.data Size: 105KB - Virtual size: 112KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 15KB - Virtual size: 14KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

08:e9:ba:3c:0d:a3:f0:3f:c1:38:b8:60:3d:03:60:31
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

9b:a3:f0:a6:13:ae:28:ea:68:e4:9e:21:ca:cc:34:dc:16:f2:a0:22:86:d6:ff:33:64:40:b3:e4:71:96:1d:72
Signer

.text
Size: 415KB - Virtual size: 414KB

.rdata
Size: 46KB - Virtual size: 45KB

.data
Size: 105KB - Virtual size: 112KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 15KB - Virtual size: 14KB