3fe9b8efe3f8b353200333f93cd899619ce2bb9e5b4eb294169c9eac0d5ffd0f

Sharing

Copy URL

Twitter E-mail

General

Target

3fe9b8efe3f8b353200333f93cd899619ce2bb9e5b4eb294169c9eac0d5ffd0f
Size

1.0MB
MD5

26abc6e128b98f5bce1b21bb4295098a
SHA1

1952c5a87c9bd869764f21cf13bf02034a5af42c
SHA256

3fe9b8efe3f8b353200333f93cd899619ce2bb9e5b4eb294169c9eac0d5ffd0f
SHA512

38655b2bf5b8c5aad9f895980d18b6f49cbe1b4fd9c69ffe70dece910149e86954fce0002175ec0da82457ed38e9cdd104aa3d221a4197337ff727a9b54bdf44
SSDEEP

12288:xqflDDoYek20NNHCWGiOns2KjX6EQ2Xbhygs:x00F0NNHC3+Nb0gs

Score

1^/10

Malware Config

Signatures

Files

3fe9b8efe3f8b353200333f93cd899619ce2bb9e5b4eb294169c9eac0d5ffd0f
.exe windows:1 windows x86 arch:x86

0b930ffea389af4ac6848f03c944c3f6

Code Sign

27:de:d5:f9:47:72:05:65:b7:27:63:c1:e0:9a:e4:7a
Certificate

Issuer

CN=HFMJJPSMAGVRRMHCHE

Not Before

07-11-2020 10:27

Not After

31-12-2039 23:59

Subject

CN=HFMJJPSMAGVRRMHCHE

Extended Key Usages

ExtKeyUsageCodeSigning

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

94:d7:02:83:90:c4:4f:2c:59:26:41:f2:33:23:aa:f3:23:53:fe:51:1e:09:b0:99:b2:d7:e1:3b:71:47:4c:0d
Signer

Actual PE Digest

94:d7:02:83:90:c4:4f:2c:59:26:41:f2:33:23:aa:f3:23:53:fe:51:1e:09:b0:99:b2:d7:e1:3b:71:47:4c:0d

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrlenA
GetLastError
VirtualAllocEx
GetModuleFileNameA
GetCurrentThreadId
GetCurrentProcessId
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileAttributesExA
SetFileAttributesA
CloseHandle
GetStartupInfoA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetDriveTypeA
GetTickCount
QueryPerformanceCounter
CreateFileA
Sleep
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CancelTimerQueueTimer
GetFileInformationByHandle
GlobalLock
GetNumberOfConsoleInputEvents
LocalCompact
EnumCalendarInfoExW
ReadFile
WriteProcessMemory
GetTempPathA
GetEnvironmentStringsA
GetSystemDirectoryA
GetProcessHeaps
SetConsoleCP
DeleteVolumeMountPointA
DeleteAtom
SetConsoleCursorPosition
WriteProfileStringA
GetConsoleAliasesLengthW
SetVolumeMountPointW
CopyFileA
PulseEvent
EnumDateFormatsExA
WritePrivateProfileSectionA
PurgeComm
GetTimeZoneInformation
EndUpdateResourceA
EnumDateFormatsA
GetSystemWindowsDirectoryA
GetProcessWorkingSetSize
GetCurrencyFormatA
EnumDateFormatsW
FindFirstVolumeMountPointW
ReadProcessMemory
GetThreadContext
SetConsoleCursor
GetThreadSelectorEntry
FreeEnvironmentStringsA
SetCommState
ReleaseSemaphore
FormatMessageW
FindFirstVolumeMountPointA
SetLastError
ReadConsoleA
SwitchToThread
MultiByteToWideChar
DisconnectNamedPipe
WriteFile
ConnectNamedPipe
CreateNamedPipeW
lstrlenW
OpenEventW
lstrcatW
SetConsoleCtrlHandler
ExitProcess
CreateFileW
GetStartupInfoW
CallNamedPipeW
lstrcmpA
lstrcatA
SuspendThread
ResumeThread
WaitForSingleObject
SetEvent
SetCommTimeouts
GetCommProperties
GetCommState
SetupComm
lstrcpyW
ResetEvent
GetOverlappedResult
WaitForMultipleObjects
ClearCommError
ExitThread
CreateEventW
CreateThread
WideCharToMultiByte
GetVolumeInformationW
SetErrorMode
LocalFree
LoadLibraryW
ExpandEnvironmentStringsW
GetDateFormatW
GetTimeFormatW
DeviceIoControl
ReleaseMutex
GetFileSize
GetVolumeNameForVolumeMountPointW
OpenProcess
DuplicateHandle
FreeLibrary
GetDriveTypeW
DeleteFileW
GetTempFileNameW
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalSize
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
lstrcpynW
SetThreadUILanguage
GetConsoleOutputCP
WriteConsoleW
GetConsoleMode
GetFileType
GetStdHandle
CreateSemaphoreW

user32

BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
DefWindowProcA
LoadIconA
DispatchMessageA
PeekMessageA
SendDlgItemMessageA
EnableMenuItem
GetSystemMenu
CreateDialogParamA
CharNextExA
DestroyWindow
LoadAcceleratorsA
GetMenuDefaultItem
GetClipboardFormatNameW
PostThreadMessageA
MonitorFromWindow
PtInRect
FlashWindow
GetClassLongA
DrawStateA
WINNLSGetIMEHotkey
GetClassNameA
ChangeDisplaySettingsA
CreateMenu
CreateIconFromResource
GetAsyncKeyState
wsprintfW
GetMessageExtraInfo
SendInput
MapVirtualKeyW
keybd_event
OpenInputDesktop
OpenDesktopW
FindWindowW
SendMessageW
MessageBeep
GetCursorPos
SystemParametersInfoW
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationW
SetProcessWindowStation
SetThreadDesktop
CloseDesktop
CloseWindowStation
GetSystemMetrics
CharLowerA

gdi32

CreateSolidBrush
AddFontResourceA
GetEnhMetaFileA
GetEnhMetaFileBits
GetStockObject
GetPolyFillMode
SetBrushOrgEx
GdiAddFontResourceW
CreateCompatibleBitmap
GetViewportExtEx
GdiConvertRegion
EngStrokeAndFillPath
CreateICW
EnumFontFamiliesExA
CheckColorsInGamut
CreateDIBPatternBrushPt
EngCreateDeviceSurface
GdiValidateHandle
EnumFontFamiliesW
SetICMProfileW
MirrorRgn
PaintRgn
GdiPrinterThunk
FillRgn
GetDeviceCaps
STROBJ_bEnumPositionsOnly
EngReleaseSemaphore
EngGradientFill
Escape
GetStretchBltMode
GetTextAlign
EngDeletePath
GdiEntry9
GdiPlayScript
GetTextExtentPointA
EnumFontFamiliesExW
SetMagicColors
SelectClipRgn
EngDeleteSurface
PATHOBJ_bEnumClipLines
BRUSHOBJ_pvGetRbrush
GetOutlineTextMetricsW
GetBrushOrgEx
EngMarkBandingSurface
FloodFill

advapi32

RegOpenKeyW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
RegisterEventSourceW
ReportEventW
DeregisterEventSource
ChangeServiceConfigW
RegOpenKeyExW
OpenServiceW
CloseServiceHandle
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid

shell32

SHChangeNotify
SHGetFileInfoW
SHGetFolderPathA
ExtractAssociatedIconW
ExtractIconW
Shell_NotifyIcon
ShellExecuteExA
SHQueryRecycleBinA
SHGetDiskFreeSpaceA
SHGetDesktopFolder
SHGetIconOverlayIndexA
SHBindToParent
SHGetSpecialFolderLocation
SHLoadInProc
ShellExecuteA
DragAcceptFiles
DragQueryFileW
ExtractAssociatedIconExW
ExtractAssociatedIconExA
SHPathPrepareForWriteA
DragQueryFile
ExtractAssociatedIconA
Shell_NotifyIconW
FindExecutableA
SHAppBarMessage
SHGetPathFromIDListW
SHIsFileAvailableOffline
ShellExecuteW
ExtractIconExA
SHGetSpecialFolderPathW

shlwapi

StrStrIA
StrChrIA
StrStrW
StrChrW
StrRChrIW
StrChrA
StrCmpNIA
StrRChrW
StrRStrIW
StrRChrIA

winmm

PlaySoundA

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_controlfp

Sections

.text
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 617KB - Virtual size: 617KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0b930ffea389af4ac6848f03c944c3f6

Code Sign

27:de:d5:f9:47:72:05:65:b7:27:63:c1:e0:9a:e4:7aCertificate

Extended Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

94:d7:02:83:90:c4:4f:2c:59:26:41:f2:33:23:aa:f3:23:53:fe:51:1e:09:b0:99:b2:d7:e1:3b:71:47:4c:0dSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

winmm

msvcrt

Sections

.text Size: 346KB - Virtual size: 346KB

.rdata Size: 99KB - Virtual size: 98KB

.data Size: 617KB - Virtual size: 617KB

27:de:d5:f9:47:72:05:65:b7:27:63:c1:e0:9a:e4:7a
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

94:d7:02:83:90:c4:4f:2c:59:26:41:f2:33:23:aa:f3:23:53:fe:51:1e:09:b0:99:b2:d7:e1:3b:71:47:4c:0d
Signer

.text
Size: 346KB - Virtual size: 346KB

.rdata
Size: 99KB - Virtual size: 98KB

.data
Size: 617KB - Virtual size: 617KB