783304ea3fd54f79aaf85f6b5596d90a6193437df88c1ddf1a04d8df0a5fd7b1N

Sharing

Copy URL

Twitter E-mail

General

Target

783304ea3fd54f79aaf85f6b5596d90a6193437df88c1ddf1a04d8df0a5fd7b1N
Size

319KB
MD5

3f00f5d183096888d2dd25aeac55ff60
SHA1

50008d70d83f9e0d409af76f06a9a716cb550251
SHA256

783304ea3fd54f79aaf85f6b5596d90a6193437df88c1ddf1a04d8df0a5fd7b1
SHA512

8318d8842fa3200acc01b14156bba9477c790da6c0ad686a5c04dd8047dd5a9c38044d91d0c538479ed09da5f9df70f289721da82f9105a1010279a3880a72ff
SSDEEP

6144:wT47tpm/WlOx/wjtNm4ged6YMRCwtNA2DQYNPOuo+JFaK/nP:wTq/m/WLq4ge6CtaGuo+JsK/P

Score

1^/10

Malware Config

Signatures

Files

783304ea3fd54f79aaf85f6b5596d90a6193437df88c1ddf1a04d8df0a5fd7b1N
.dll windows:4 windows x86 arch:x86

b81801530be1fbf243bb95bdaf44f3c5

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

75:37:ea:45:49:d3:32:02:3e:91:85:21:a2:c1:e5:a2
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

17-03-2023 06:04

Not After

16-03-2026 06:04

Subject

CN=Vitzo LLC,O=VITZO LLC,L=Cheyenne,ST=Wyoming,C=US,1.2.840.113549.1.9.1=#0c1465786563757469766573407669747a6f2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02-11-2023 08:32

Not After

30-10-2034 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

81:3b:50:b9:44:7f:85:19:1c:b1:a9:4f:ea:a3:5b:e6:36:5a:c6:d8:73:df:df:55:b4:42:6d:59:9b:3e:7d:08
Signer

Actual PE Digest

81:3b:50:b9:44:7f:85:19:1c:b1:a9:4f:ea:a3:5b:e6:36:5a:c6:d8:73:df:df:55:b4:42:6d:59:9b:3e:7d:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__setusermatherr
_amsg_exit
_errno
_initterm
_iob
_lock
_unlock
abort
asin
atoi
calloc
div
fprintf
fputc
free
fwrite
getenv
log10
malloc
memcpy
memmove
memset
realloc
strlen
strncmp
time
vfprintf

avutil-56

av_calloc
av_channel_layout_extract_channel
av_frame_get_buffer
av_free
av_freep
av_get_bytes_per_sample
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_get_channel_name
av_get_cpu_flags
av_get_default_channel_layout
av_get_packed_sample_fmt
av_get_planar_sample_fmt
av_get_sample_fmt_name
av_log
av_malloc_array
av_mallocz
av_mallocz_array
av_opt_set_defaults
av_opt_set_int
av_reduce
av_rescale
av_rescale_rnd
av_sample_fmt_is_planar

Exports

Exports

swr_alloc
swr_alloc_set_opts
swr_build_matrix
swr_close
swr_config_frame
swr_convert
swr_convert_frame
swr_drop_output
swr_ffversion
swr_free
swr_get_class
swr_get_delay
swr_get_out_samples
swr_init
swr_inject_silence
swr_is_initialized
swr_next_pts
swr_set_channel_mapping
swr_set_compensation
swr_set_matrix
swresample_configuration
swresample_license
swresample_version

Sections

.text
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b81801530be1fbf243bb95bdaf44f3c5

Code Sign

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

75:37:ea:45:49:d3:32:02:3e:91:85:21:a2:c1:e5:a2Certificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

81:3b:50:b9:44:7f:85:19:1c:b1:a9:4f:ea:a3:5b:e6:36:5a:c6:d8:73:df:df:55:b4:42:6d:59:9b:3e:7d:08Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

avutil-56

Exports

Exports

Sections

.text Size: 269KB - Virtual size: 268KB

.data Size: 1024B - Virtual size: 680B

.rdata Size: 27KB - Virtual size: 26KB

.bss Size: - Virtual size: 212KB

.edata Size: 1024B - Virtual size: 660B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 6KB - Virtual size: 5KB

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

75:37:ea:45:49:d3:32:02:3e:91:85:21:a2:c1:e5:a2
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

81:3b:50:b9:44:7f:85:19:1c:b1:a9:4f:ea:a3:5b:e6:36:5a:c6:d8:73:df:df:55:b4:42:6d:59:9b:3e:7d:08
Signer

.text
Size: 269KB - Virtual size: 268KB

.data
Size: 1024B - Virtual size: 680B

.rdata
Size: 27KB - Virtual size: 26KB

.bss
Size: - Virtual size: 212KB

.edata
Size: 1024B - Virtual size: 660B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 6KB - Virtual size: 5KB