0f3ee766a17db274cf18d93749179a31362bc72e55baeb0656c66bca992bc668

Sharing

Copy URL Twitter E-mail

General

Target

0f3ee766a17db274cf18d93749179a31362bc72e55baeb0656c66bca992bc668
Size

6.7MB
MD5

21044af4726109e2b3bff65f4df6b482
SHA1

ea1d5d857b3659da41ccd614cdebffa57bafbad9
SHA256

0f3ee766a17db274cf18d93749179a31362bc72e55baeb0656c66bca992bc668
SHA512

4ba9116f4ad382939b22734f23243d96330bdd8f8635c8182e66351a9a9e8f480118e7aad6cdf60b082a7c9f27470be268412e5cb97facf84fcc8ab2881ac487
SSDEEP

98304:lMOXTcJui3MMtXufJk2vmwgOOSrftu6zeed6gQ0SLWHgRnfaCnYFXZv361BMtv:lXX6uuzPacvRfaCnMX136gB

Score

1^/10

Malware Config

Signatures

Files

0f3ee766a17db274cf18d93749179a31362bc72e55baeb0656c66bca992bc668
.exe windows:4 windows x86 arch:x86

5ac6c45d71a2d585a6a5dbbb76b48df8

Code Sign

5a:0b:ea:b1:73:15:e8:22:d0:45:0f:87:29:3e:3b:8f
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

01/09/2020, 00:00

Not After

01/10/2021, 23:59

Subject

CN=SEIKO EPSON CORPORATION,OU=Information Service & Support Department,O=SEIKO EPSON CORPORATION,L=Suwa-Shi,ST=Nagano,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:c2:2f:ec:0d:69:b9:46:ac:68:52:a0:39:c6:bd:93:4b:f4:b8:8c
Signer

Actual PE Digest

15:c2:2f:ec:0d:69:b9:46:ac:68:52:a0:39:c6:bd:93:4b:f4:b8:8c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
MoveFileExW
FindNextFileW
GetTickCount
WaitForSingleObject
GetLongPathNameW
GetTempPathW
FormatMessageW
CopyFileW
GetFileAttributesW
LoadLibraryExW
GetSystemDirectoryW
SetErrorMode
CreateFileA
ReadFile
SetFilePointer
LocalFree
CreateProcessW
GetSystemTime
WriteFile
GetVersionExW
GetVersion
GlobalMemoryStatus
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalHandle
GetCommandLineW
GlobalUnlock
GetProcAddress
FreeLibrary
InterlockedExchange
LoadLibraryA
RaiseException
VirtualAlloc
VirtualFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFullPathNameW
GetLocalTime
GetWindowsDirectoryW
GetEnvironmentVariableW
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
GetDriveTypeW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
Sleep
GetConsoleCP
GetConsoleMode
SetEndOfFile
GetCPInfo
GetACP
GetOEMCP
HeapSize
HeapReAlloc
LCMapStringA
LCMapStringW
InitializeCriticalSection
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
CreateFileW
CloseHandle
RemoveDirectoryW
SetFileAttributesW
DeleteFileW
CreateDirectoryW
GetVolumeInformationW
LocalAlloc
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetCurrentDirectoryW
FindFirstFileW
GetModuleHandleA
FindClose

gdi32

SetTextColor
SetTextAlign
GetBkColor
GetTextExtentPoint32W
ExtTextOutW
CreateDCW
GetDeviceCaps
CreateFontIndirectW
DeleteDC
SelectObject
DeleteObject
SetBkColor

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_winzip_
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ac6c45d71a2d585a6a5dbbb76b48df8

Code Sign

5a:0b:ea:b1:73:15:e8:22:d0:45:0f:87:29:3e:3b:8fCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

15:c2:2f:ec:0d:69:b9:46:ac:68:52:a0:39:c6:bd:93:4b:f4:b8:8cSigner

Headers

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 152KB - Virtual size: 149KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 8KB - Virtual size: 65KB

.rsrc Size: 44KB - Virtual size: 40KB

_winzip_ Size: 6.5MB - Virtual size: 6.5MB

5a:0b:ea:b1:73:15:e8:22:d0:45:0f:87:29:3e:3b:8f
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

15:c2:2f:ec:0d:69:b9:46:ac:68:52:a0:39:c6:bd:93:4b:f4:b8:8c
Signer

.text
Size: 152KB - Virtual size: 149KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 8KB - Virtual size: 65KB

.rsrc
Size: 44KB - Virtual size: 40KB

_winzip_
Size: 6.5MB - Virtual size: 6.5MB