7d128a8d7a1e3fff0fc9d50c6d92ee00N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

7d128a8d7a1e3fff0fc9d50c6d92ee00N.exe
Size

7.4MB
MD5

7d128a8d7a1e3fff0fc9d50c6d92ee00
SHA1

bc3ca81382bf32066528038fa88ee7d9abaff3c4
SHA256

0becb4b6de774d924fdaf704ed6de13527b323fb334d789bd1d676719a6da514
SHA512

947e3b93fb7bbce7f95f4b155deab0c798cb4182e3e89da65c31d48df31ea640ce439b9ac243d1b5622fb3f9a5f5b95fdad342059f677ea4357ca2019cb6e37e
SSDEEP

49152:jPmqJDiwnWjh7neWz2sR1EAbSbOZrAIsDnSiGM/2ZyNELDeDEcZ5l1QTJGjt+jet:dpSU3WDXTJGr8m/qs+tM+rhLqmkG5Gd

Score

1^/10

Malware Config

Signatures

Files

7d128a8d7a1e3fff0fc9d50c6d92ee00N.exe
.exe windows:5 windows x64 arch:x64

1b975b3bcdb637cf320875458a6727e0

Code Sign

6c:2e:36:ad:af:9e:e4:14
Certificate

Issuer

CN=Starfield Services Root Certificate Authority,OU=http://certificates.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

16/03/2015, 07:00

Not After

16/03/2020, 07:00

Subject

CN=Starfield Services Timestamp Authority - G1,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1c:e9:0d:ae:30:dc:10:82:b4:15:60:d7:e8:63:4f:d6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/12/2014, 00:00

Not After

05/12/2019, 23:59

Subject

CN=RiseFly Software,O=RiseFly Software,POSTALCODE=5530002,STREET=Sagisu 3-6-10-1806\, Fukushima-Ku\,,L=Osaka,ST=Osaka,C=JP,2.5.4.18=#130735353330303032

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:0b:25:5c:b6:46:3d:39:c9:bb:75:0b:67:c3:ec:bc:58:94:d1:cd
Signer

Actual PE Digest

0a:0b:25:5c:b6:46:3d:39:c9:bb:75:0b:67:c3:ec:bc:58:94:d1:cd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

cryptui

CryptUIDlgViewCertificateW

crypt32

CryptMsgOpenToDecode
CryptDecryptMessage
CryptEncodeObject
CryptMsgUpdate
CryptMsgClose
CryptMsgGetParam
CertGetSubjectCertificateFromStore
CryptEncryptMessage
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertSetCertificateContextProperty
CertNameToStrW
CryptDecodeObject
CryptMsgControl
CertVerifyTimeValidity
CertGetCertificateChain
CertVerifyCertificateChainPolicy
CertGetCertificateContextProperty
CertVerifyRevocation
CertFreeCertificateChain
CertAddCertificateContextToStore
CertFindChainInStore
CertOpenStore
CertCloseStore
CertOpenSystemStoreW
CertFindCertificateInStore
CertCreateCertificateContext
CertFreeCertificateContext

winmm

timeSetEvent
timeKillEvent
timeEndPeriod
timeGetDevCaps
timeBeginPeriod

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestExW
InternetWriteFile
HttpEndRequestW
InternetReadFile
InternetCloseHandle
HttpQueryInfoW
InternetGetConnectedState

urlmon

URLDownloadToFileW

msimg32

GradientFill
TransparentBlt

shlwapi

PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathStripToRootW
StrRetToStrW
StrStrIA
UrlUnescapeA
UrlUnescapeW

imm32

ImmSetCompositionStringW
ImmReleaseContext
ImmSetCandidateWindow
ImmGetContext
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmAssociateContext
ImmCreateContext
ImmDestroyContext
ImmGetCompositionStringW

ws2_32

WSAStartup
WSAGetLastError
inet_ntoa
gethostname
gethostbyname
inet_addr
ntohl
WSACleanup
__WSAFDIsSet
connect
accept
listen
bind
socket
getsockopt
setsockopt
ioctlsocket
getsockname
getpeername
recv
select
send
shutdown
closesocket
WSASetLastError
ntohs
getservbyport
gethostbyaddr
htons
getservbyname
htonl

mpr

WNetGetConnectionW
WNetAddConnection2W

bestsyncmail

?Email_SendEx@@YAHPEAUSMTP_SEND@@@Z
?EMail_SetAccount@@YAHPEBUEMAIL_ACCOUNT@@@Z
?NameToIPAddress@@YAKPEBD@Z

kernel32

SetFileAttributesA
GetFileAttributesA
CreateFileA
GetVersionExA
QueryPerformanceCounter
QueryPerformanceFrequency
SetVolumeLabelW
GetShortPathNameW
ExpandEnvironmentStringsA
MulDiv
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
lstrcmpA
GetStringTypeExW
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
GetFileSizeEx
GetDiskFreeSpaceW
GlobalGetAtomNameW
GlobalFlags
CompareStringA
ConvertDefaultLocale
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
TlsGetValue
TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
TlsFree
FindResourceExW
SetErrorMode
GetStartupInfoW
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
ExitThread
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
VirtualAlloc
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
GetCPInfo
IsValidCodePage
LCMapStringW
LCMapStringA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
IsBadStringPtrW
GetCurrentDirectoryW
PulseEvent
lstrlenA
GetSystemDirectoryA
LoadLibraryA
GetModuleHandleA
VirtualQuery
VirtualProtect
CreateProcessW
DuplicateHandle
CreateRemoteThread
GetTimeZoneInformation
GetDriveTypeW
lstrcpyW
lstrcatW
GetUserDefaultLCID
GetFileTime
OpenMutexW
TerminateProcess
GetVersion
GetCurrentProcessId
LoadLibraryExW
GetSystemInfo
lstrcmpiW
OpenProcess
GetCurrentThread
GetVolumeInformationW
OutputDebugStringW
TerminateThread
WaitForMultipleObjectsEx
ReadDirectoryChangesW
GetTempFileNameW
GetExitCodeProcess
MoveFileW
GetDiskFreeSpaceExW
GetProcessHeap
CopyFileW
CreateDirectoryW
GetFileAttributesExW
GetFileAttributesW
GetCurrentThreadId
FlushInstructionCache
RaiseException
GetDateFormatA
GetTimeFormatA
LocalFileTimeToFileTime
GetLogicalDrives
GetExitCodeThread
SuspendThread
SetThreadPriority
CreateThread
WaitNamedPipeW
SetNamedPipeHandleState
PeekNamedPipe
DisconnectNamedPipe
SetFilePointerEx
LocalAlloc
GetLongPathNameW
EnumResourceLanguagesW
GetUserDefaultUILanguage
FindFirstFileW
FindNextFileW
FindClose
GetVolumeNameForVolumeMountPointW
QueryDosDeviceW
SetFileTime
MoveFileExW
GetCurrentProcess
lstrcmpW
LocalFree
SetFilePointer
SetEndOfFile
GetVersionExW
GetLocalTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetFileAttributesW
WriteFile
ExpandEnvironmentStringsW
FreeLibrary
GetFileInformationByHandle
CompareFileTime
CreateFileW
ReadFile
ResumeThread
GetSystemTime
GetTickCount
Sleep
lstrcpynW
ReleaseMutex
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
GetTimeFormatW
GetProcAddress
GetModuleHandleW
LoadLibraryW
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
GetUserDefaultLangID
FormatMessageW
GetLocaleInfoW
GetFileSize
CreateFileMappingW
GetLastError
UnmapViewOfFile
MapViewOfFile
HeapDestroy
HeapReAlloc
HeapAlloc
HeapFree
HeapCreate
SystemTimeToFileTime
DeleteFileW
RemoveDirectoryW
CreateEventW
WaitForSingleObject
GetTempPathW
SetEvent
CloseHandle
MultiByteToWideChar
GetACP
GetModuleFileNameW
DeleteFileA
GetCurrentDirectoryA
GetFullPathNameA
GetFullPathNameW
GetModuleFileNameA
FormatMessageA
GetSystemDirectoryW
GetOEMCP
CreateMutexW
lstrlenW
InterlockedPushEntrySList
VirtualFree
InterlockedPopEntrySList
GetComputerNameW

user32

EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
RegisterClassW
EqualRect
DeferWindowPos
GetScrollInfo
SetWindowPlacement
SystemParametersInfoA
GetMenuState
GetMenuStringW
InsertMenuW
CharNextW
MonitorFromRect
GetMonitorInfoW
WindowFromPoint
IsChild
GetWindowDC
GetDoubleClickTime
GetClassLongPtrW
DrawIconEx
GetWindowPlacement
WaitForInputIdle
EnumWindows
EnumThreadWindows
wsprintfW
IsWindowEnabled
RemoveMenu
RealChildWindowFromPoint
SetLayeredWindowAttributes
GetMenuItemID
GetKeyboardLayout
ActivateKeyboardLayout
SetCaretPos
CreateCaret
IntersectRect
TrackPopupMenuEx
DestroyCaret
HideCaret
ShowCaret
SetClassLongPtrW
GetActiveWindow
IsRectEmpty
GetSystemMenu
ModifyMenuW
IsZoomed
GetMenu
DestroyMenu
TrackPopupMenu
EnableMenuItem
FindWindowW
FlashWindow
MsgWaitForMultipleObjects
PostQuitMessage
MoveWindow
RegisterClipboardFormatW
LockWindowUpdate
PostThreadMessageW
ExitWindowsEx
GetMenuItemCount
GetMenuItemInfoW
RemovePropW
EnumChildWindows
MessageBoxW
EndDialog
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
DestroyIcon
CreateWindowExW
RegisterClassExW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
SetWindowRgn
GetClassInfoExW
ShowScrollBar
SetScrollInfo
MessageBeep
SetScrollPos
ScrollWindowEx
SystemParametersInfoW
AdjustWindowRectEx
SetCursorPos
ClientToScreen
GetMessageW
BeginPaint
EndPaint
CallWindowProcW
SetWindowTextW
GetLastActivePopup
DialogBoxIndirectParamW
DialogBoxParamW
CreateMenu
AppendMenuW
SetMenuItemInfoW
SendMessageTimeoutW
GetWindow
KillTimer
SetTimer
DestroyWindow
BeginDeferWindowPos
DrawFrameControl
PeekMessageW
TranslateMessage
DispatchMessageW
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
GetWindowLongPtrW
PtInRect
GetDlgItemTextA
SetDlgItemTextA
PostMessageW
SetCursor
GetClassInfoW
DefWindowProcW
LoadCursorW
GetClassLongW
SetClassLongW
LoadIconW
SetWindowLongW
GetCursorPos
GetKeyState
GetDlgCtrlID
MapDialogRect
LoadAcceleratorsW
GetScrollPos
GetSystemMetrics
OffsetRect
FrameRect
GetFocus
TranslateAcceleratorW
SetParent
RedrawWindow
UpdateWindow
ScreenToClient
GetClientRect
BringWindowToTop
IsIconic
LoadMenuW
GetSubMenu
DeleteMenu
DrawIcon
CopyRect
IsWindow
CheckRadioButton
CheckDlgButton
SendDlgItemMessageW
GetDlgItemInt
SetDlgItemInt
IsDlgButtonChecked
GetDlgItemTextW
SetDlgItemTextW
SetFocus
ShowWindow
SetRect
InflateRect
GetDlgItem
GetComboBoxInfo
FillRect
GetSysColor
DrawFocusRect
GetPropW
GetClassNameW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
GetDC
DrawTextW
ReleaseCapture
SetWindowPos
SetPropW
SetCapture
InvalidateRect
SendMessageW
GetWindowRect
MapWindowPoints
GetDCEx
ReleaseDC
EnableWindow
GetParent
LoadBitmapW
LoadStringW
RegisterWindowMessageW
GetCapture
WinHelpW
SendDlgItemMessageA
CheckMenuItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
UnregisterClassW
GetSysColorBrush
SetWindowContextHelpId
ShowOwnedPopups
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
CharUpperW
LoadStringA
SetActiveWindow
ValidateRect
CreateDialogIndirectParamW
GetNextDlgTabItem
GetAsyncKeyState
GrayStringW
DrawTextExW
TabbedTextOutW
SetWindowLongPtrW
IsDialogMessageW
UnregisterClassA
GetDesktopWindow

gdi32

CreateEllipticRgn
LPtoDP
Ellipse
EnumFontFamiliesExW
GetRgnBox
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
ExcludeClipRect
RectVisible
GetStockObject
SaveDC
SetBkMode
GetBkColor
CreateSolidBrush
SetTextColor
TextOutW
RestoreDC
GetClipBox
GetTextMetricsW
GetTextExtentPoint32W
CreatePen
MoveToEx
LineTo
DeleteObject
CreatePatternBrush
ScaleWindowExtEx
Polygon
SetWindowExtEx
GetTextExtentPointW
SetTextAlign
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
Escape
ExtTextOutW
StretchDIBits
GetWindowExtEx
GetViewportExtEx
DPtoLP
GetMapMode
SetMapMode
SelectClipRgn
SetViewportOrgEx
GetTextExtentExPointW
CreateFontW
CreateFontA
GetTextColor
RoundRect
CreateBitmap
CreateRoundRectRgn
CreatePolygonRgn
CombineRgn
FrameRgn
SetBkColor
BitBlt
Polyline
PatBlt
CreateCompatibleBitmap
GetCurrentObject
GetObjectW
CreateFontIndirectW
GetDeviceCaps
CreateDIBSection
SetStretchBltMode
CreateRectRgn
StretchBlt
CreateCompatibleDC
SelectObject
GetPixel
PtVisible
DeleteDC

comdlg32

ChooseColorW
CommDlgExtendedError
GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

SetSecurityDescriptorOwner
RegSetKeySecurity
RegDeleteKeyW
RegGetKeySecurity
SetEntriesInAclW
CryptExportKey
CryptGetProvParam
CryptEnumProvidersA
CryptGenRandom
CryptAcquireContextA
RegOpenKeyExA
GetUserNameA
ChangeServiceConfigW
StartServiceW
DeleteService
CreateServiceW
QueryServiceStatus
QueryServiceConfigW
LockServiceDatabase
QueryServiceLockStatusW
ChangeServiceConfig2W
UnlockServiceDatabase
EnumDependentServicesW
ControlService
QueryServiceStatusEx
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegSetValueExA
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExA
GetTokenInformation
LookupAccountNameW
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
FreeSid
GetUserNameW
CryptDecrypt
CryptAcquireContextW
CryptGetUserKey
CryptGenKey
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDeriveKey
CryptDestroyHash
CryptSetKeyParam
CryptGetKeyParam
RegEnumKeyW
RegOpenKeyW
RegSetValueW
RegEnumValueW
CryptEncrypt
CryptDestroyKey
CryptReleaseContext
CryptEnumProvidersW
GetFileSecurityW
MakeAbsoluteSD
SetFileSecurityW
OpenProcessToken
RevertToSelf
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
RegQueryValueW
IsTextUnicode
RegCreateKeyW
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
MakeSelfRelativeSD

shell32

ExtractIconExW
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
DragQueryFileW
ExtractIconW
SHFileOperationW
SHGetFileInfoW
Shell_NotifyIconW
SHChangeNotify
DragQueryPoint
DragFinish
DragAcceptFiles
SHGetDesktopFolder
ShellExecuteA
ord4
SHGetSpecialFolderLocation
ord2

comctl32

ImageList_SetBkColor
_TrackMouseEvent
ImageList_DrawEx
ImageList_Destroy
ImageList_LoadImageW
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Draw
ImageList_Create
ImageList_ReplaceIcon

oledlg

OleUIBusyW

ole32

CoUninitialize
GetRunningObjectTable
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoSetProxyBlanket
CreateStreamOnHGlobal
WriteClassStg
StringFromGUID2
CoGetObject
CoInitializeSecurity
StgCreateDocfile
StgOpenStorage
OleInitialize
CoGetClassObject
StgCreateStorageEx
StgOpenStorageEx
OleDuplicateData
RegisterDragDrop
RevokeDragDrop
CoTaskMemFree
CoCreateInstance
CoCreateGuid
ReleaseStgMedium
DoDragDrop
CoTaskMemAlloc
CoTaskMemRealloc
CreateClassMoniker
CoInitializeEx

oleaut32

SysFreeString
SystemTimeToVariantTime
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
SysAllocStringLen
VariantChangeType
OleCreateFontIndirect
VariantTimeToSystemTime
VariantCopy
SafeArrayDestroy
VariantClear
VariantInit
SysAllocString

gdiplus

GdipCreateBitmapFromStream
GdiplusShutdown
GdipSetImageAttributesColorKeys
GdiplusStartup
GdipCloneImage
GdipDrawImageRectRectI
GdipGetImageGraphicsContext
GdipCreateFromHWND
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipFlush
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipSetImageAttributesColorMatrix

winhttp

WinHttpQueryOption
WinHttpSetOption
WinHttpCloseHandle
WinHttpQueryDataAvailable
WinHttpAddRequestHeaders
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpen
WinHttpSetStatusCallback
WinHttpWriteData
WinHttpReadData
WinHttpSendRequest
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpGetProxyForUrl
WinHttpTimeToSystemTime
WinHttpGetIEProxyConfigForCurrentUser
WinHttpTimeFromSystemTime
WinHttpSetTimeouts
WinHttpSetCredentials
WinHttpQueryAuthSchemes

secur32

GetUserNameExW

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b975b3bcdb637cf320875458a6727e0

Code Sign

6c:2e:36:ad:af:9e:e4:14Certificate

Extended Key Usages

Key Usages

1c:e9:0d:ae:30:dc:10:82:b4:15:60:d7:e8:63:4f:d6Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

0a:0b:25:5c:b6:46:3d:39:c9:bb:75:0b:67:c3:ec:bc:58:94:d1:cdSigner

Headers

DLL Characteristics

File Characteristics

Imports

version

cryptui

crypt32

winmm

wininet

urlmon

msimg32

shlwapi

imm32

ws2_32

mpr

bestsyncmail

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

gdiplus

winhttp

secur32

iphlpapi

Sections

.text Size: 4.4MB - Virtual size: 4.4MB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 135KB - Virtual size: 306KB

.pdata Size: 272KB - Virtual size: 271KB

text Size: 2KB - Virtual size: 2KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

6c:2e:36:ad:af:9e:e4:14
Certificate

1c:e9:0d:ae:30:dc:10:82:b4:15:60:d7:e8:63:4f:d6
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

0a:0b:25:5c:b6:46:3d:39:c9:bb:75:0b:67:c3:ec:bc:58:94:d1:cd
Signer

.text
Size: 4.4MB - Virtual size: 4.4MB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 135KB - Virtual size: 306KB

.pdata
Size: 272KB - Virtual size: 271KB

text
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB