ebe7e5a31202fb672dcfa4ade7a59c500efbda0afb7ec762c399dd52270d1306N

Sharing

Copy URL

Twitter E-mail

General

Target

ebe7e5a31202fb672dcfa4ade7a59c500efbda0afb7ec762c399dd52270d1306N
Size

264KB
MD5

f77b3f94dd3f904bfa0889a061e2d2c0
SHA1

ae35f085cf6699e472af1b1f2efdc9938ad8bf2f
SHA256

ebe7e5a31202fb672dcfa4ade7a59c500efbda0afb7ec762c399dd52270d1306
SHA512

d6d238a1f9a4189d69dc0a7d2982ae3b8cda94ebe0af05c23e9ae576379b1db5124995f92ddcde95c424efff849d029ede3157ccd55f15cf0f06c4851ba51d6f
SSDEEP

3072:DlkWGpIVyeViDeuG+s9Ueo9MUm2X7H190DfVtff1hGU3TxB3hIZ454umoa41YscO:LQsfuGLkVqUis44JfOMBfc8PitCi1

Score

1^/10

Malware Config

Signatures

Files

ebe7e5a31202fb672dcfa4ade7a59c500efbda0afb7ec762c399dd52270d1306N
.dll windows:4 windows x86 arch:x86

342b540372ce4baa93f5e771852fe043

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19-09-2018 00:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28-07-2020 00:00

Not After

18-03-2029 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28-07-2020 00:00

Not After

28-07-2030 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6e:4f:f3:f5:27:0e:02:20:fb:86:3e:f6
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

23-10-2023 15:20

Not After

23-12-2026 14:31

Subject

CN=3Planesoft (Panichev Igor Valentinovich IP),O=3Planesoft (Panichev Igor Valentinovich IP),L=Vologda,ST=Vologda Oblast,C=RU,1.2.840.113549.1.9.1=#0c13696e666f4033706c616e65736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

07-11-2023 17:13

Not After

09-12-2034 17:13

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f6:53:42:fb:31:6d:bf:12:51:8a:30:10:85:7d:e5:f2:26:90:fc:77:65:04:12:37:82:6b:9b:14:f2:b1:30:c1
Signer

Actual PE Digest

f6:53:42:fb:31:6d:bf:12:51:8a:30:10:85:7d:e5:f2:26:90:fc:77:65:04:12:37:82:6b:9b:14:f2:b1:30:c1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

bass

BASS_GetConfig
BASS_GetVersion
BASS_GetConfigPtr

kernel32

GetVersion
DisableThreadLibraryCalls

user32

MessageBoxA

msvcrt

memset
memcpy
realloc
sscanf
memmove
strncmp
free
calloc
_CIpow
malloc
qsort
_initterm
_adjust_fdiv

Exports

Exports

BASS_AAC_StreamCreateFile
BASS_AAC_StreamCreateFileUser
BASS_AAC_StreamCreateURL
BASS_MP4_StreamCreateFile
BASS_MP4_StreamCreateFileUser
BASSplugin

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

342b540372ce4baa93f5e771852fe043

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

6e:4f:f3:f5:27:0e:02:20:fb:86:3e:f6Certificate

Extended Key Usages

Key Usages

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

f6:53:42:fb:31:6d:bf:12:51:8a:30:10:85:7d:e5:f2:26:90:fc:77:65:04:12:37:82:6b:9b:14:f2:b1:30:c1Signer

Headers

DLL Characteristics

File Characteristics

Imports

bass

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 135KB

.rdata Size: 101KB - Virtual size: 100KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 680B

.reloc Size: 3KB - Virtual size: 3KB

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

6e:4f:f3:f5:27:0e:02:20:fb:86:3e:f6
Certificate

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

f6:53:42:fb:31:6d:bf:12:51:8a:30:10:85:7d:e5:f2:26:90:fc:77:65:04:12:37:82:6b:9b:14:f2:b1:30:c1
Signer

.text
Size: 136KB - Virtual size: 135KB

.rdata
Size: 101KB - Virtual size: 100KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 680B

.reloc
Size: 3KB - Virtual size: 3KB