d5e99f6a4f858f8e611f930636b5fce0N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

d5e99f6a4f858f8e611f930636b5fce0N.exe
Size

437KB
MD5

d5e99f6a4f858f8e611f930636b5fce0
SHA1

798a2d5be12c4fd60d8aae473b1e5ffd7b3b6cd5
SHA256

ac5a623db5ab359ab5f68bc7b5335a510c54fd1a4afcd90d046fbadb5fc4f3e8
SHA512

d2382a80ccc73b2b0ef2b8b689fc40a9f811ca4a36ab385a9a12d4dc315d6ea227f045716b17e7947ae65330ea7209883f65799be64e81544dafa190ab4cb90f
SSDEEP

6144:8shEwx9AZ1erVdkPHkEFSheyFVhDz88w/fZmGxVEJJcgnT7f44S4AO+VPaklSr:1VQjeBdBEwJFw/Rmyi06jrX8Ra9r

Score

1^/10

Malware Config

Signatures

Files

d5e99f6a4f858f8e611f930636b5fce0N.exe
.dll windows:6 windows x86 arch:x86

4f62803e29219a753b5207e306f1b8a1

Code Sign

9a:20:8c:0c:30:d7:23:f7:5a:00:1c:bb:d0:b3:23:e6
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

18-01-2021 00:00

Not After

18-01-2024 23:59

Subject

CN=Dusan Rodina,O=Dusan Rodina,STREET=Sancova 6865 3/A,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

79:b3:34:b5:66:4b:84:87:ff:36:f5:2d:17:11:32:6b:87:26:e6:3f
Signer

Actual PE Digest

79:b3:34:b5:66:4b:84:87:ff:36:f5:2d:17:11:32:6b:87:26:e6:3f

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
GetModuleFileNameW
SetFilePointer
CreateFileW
DisableThreadLibraryCalls
CloseHandle
LoadLibraryW
CreateThread
SetCurrentDirectoryW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
WaitForSingleObjectEx
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerA
ReleaseMutex
CreateMutexA
GetLastError
GetProcAddress
LoadLibraryA
FormatMessageA
SleepConditionVariableCS
TryEnterCriticalSection
TlsSetValue
EnterCriticalSection
WakeAllConditionVariable
LeaveCriticalSection
InitializeCriticalSection
InitializeConditionVariable
TlsAlloc
DeleteCriticalSection
TlsGetValue
TlsFree
GetCurrentThreadId
SleepEx
CreateWaitableTimerW
WaitForMultipleObjects
CancelWaitableTimer
CreateEventW
SetEvent
ResetEvent
GetSystemTimeAsFileTime
VerifyVersionInfoA
GetCurrentProcess
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetSystemDirectoryA
GetVersionExA
QueryPerformanceFrequency
CancelIoEx
GetOverlappedResult
VerSetConditionMask
QueryPerformanceCounter
CreateIoCompletionPort
IsWow64Process
WriteFile
DeviceIoControl
CreateFileA
FreeLibrary
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetConsoleOutputCP
GetConsoleMode
ExitProcess
GetModuleHandleExW
ExitThread
FreeLibraryAndExitThread
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetTimeZoneInformation
MultiByteToWideChar
WideCharToMultiByte
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
SetStdHandle
SetFilePointerEx
HeapReAlloc
DecodePointer
HeapSize
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetStringTypeW
GetFileSizeEx
WriteConsoleW
FlushFileBuffers
CreateEventA
OpenEventA
SleepConditionVariableSRW

user32

EnumWindows

ws2_32

htonl
ntohl

Exports

Exports

NotificationPacketsVideo
caerBiasCoarseFine1024FromCurrent
caerBiasCoarseFine1024Generate
caerBiasCoarseFine1024Parse
caerBiasCoarseFine1024ToCurrent
caerBiasCoarseFineFromCurrent
caerBiasCoarseFineGenerate
caerBiasCoarseFineParse
caerBiasCoarseFineToCurrent
caerBiasDynapseGenerate
caerBiasDynapseParse
caerBiasShiftedSourceGenerate
caerBiasShiftedSourceParse
caerBiasVDACGenerate
caerBiasVDACParse
caerDVS128InfoGet
caerDVS132SInfoGet
caerDVXplorerInfoGet
caerDavisInfoGet
caerDavisROIConfigure
caerDeviceClose
caerDeviceConfigGet
caerDeviceConfigGet64
caerDeviceConfigSet
caerDeviceDataGet
caerDeviceDataStart
caerDeviceDataStop
caerDeviceOpen
caerDeviceOpenSerial
caerDeviceSendDefaultConfig
caerDynapseCoreAddrToNeuronId
caerDynapseCoreXYToNeuronId
caerDynapseGenerateCamBits
caerDynapseGenerateSramBits
caerDynapseInfoGet
caerDynapseSendDataToUSB
caerDynapseSpikeEventFromXY
caerDynapseSpikeEventGetX
caerDynapseSpikeEventGetY
caerDynapseWriteCam
caerDynapseWritePoissonSpikeRate
caerDynapseWriteSram
caerDynapseWriteSramN
caerDynapseWriteSramWords
caerEDVSInfoGet
caerFilterDVSNoiseApply
caerFilterDVSNoiseConfigGet
caerFilterDVSNoiseConfigSet
caerFilterDVSNoiseDestroy
caerFilterDVSNoiseGetHotPixels
caerFilterDVSNoiseInitialize
caerFilterDVSNoiseStatsApply
caerFrameUtilsContrast
caerFrameUtilsDemosaic
caerLog
caerLogCallbackGet
caerLogCallbackSet
caerLogDisable
caerLogDisabled
caerLogFileDescriptorsGetFirst
caerLogFileDescriptorsGetSecond
caerLogFileDescriptorsSet
caerLogLevelGet
caerLogLevelSet
caerLogVA
caerLogVAFull
caerSamsungEVKInfoGet

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f62803e29219a753b5207e306f1b8a1

Code Sign

9a:20:8c:0c:30:d7:23:f7:5a:00:1c:bb:d0:b3:23:e6Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

79:b3:34:b5:66:4b:84:87:ff:36:f5:2d:17:11:32:6b:87:26:e6:3fSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ws2_32

Exports

Exports

Sections

.text Size: 312KB - Virtual size: 312KB

.rdata Size: 93KB - Virtual size: 93KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 15KB

9a:20:8c:0c:30:d7:23:f7:5a:00:1c:bb:d0:b3:23:e6
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

79:b3:34:b5:66:4b:84:87:ff:36:f5:2d:17:11:32:6b:87:26:e6:3f
Signer

.text
Size: 312KB - Virtual size: 312KB

.rdata
Size: 93KB - Virtual size: 93KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 15KB