6ce15ef3e8e0b9ec3adb1f52a76b920ca83fc241bef1480c1d925d12497cdfc3N

Sharing

Copy URL Twitter E-mail

General

Target

6ce15ef3e8e0b9ec3adb1f52a76b920ca83fc241bef1480c1d925d12497cdfc3N
Size

447KB
MD5

6aeb31d7732237ee28aef61a45a7d400
SHA1

d6b0b32efae5f56eccb185a94a6a5e8cfd01d3df
SHA256

6ce15ef3e8e0b9ec3adb1f52a76b920ca83fc241bef1480c1d925d12497cdfc3
SHA512

a6bdcfb78a9dac4d97e2fd9d7a2a6b5e4838f57ca5ba48c1c593406be99e2e14f80bc6d528e61e9d91d2c3b8d9fe61b3f78c47dedd4655c33f0f267aef4daac0
SSDEEP

12288:X1Ei20a+2XQ/fvTYPGJL0tFrWLPPnVZdgaTbYckDRv:X1XmuCrWVZdgaTbYckD1

Score

1^/10

Malware Config

Signatures

Files

6ce15ef3e8e0b9ec3adb1f52a76b920ca83fc241bef1480c1d925d12497cdfc3N
.dll windows:6 windows x64 arch:x64

41bdd03f5fbefa7e4e0a8ac43138d04d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:a6:8f:ee:73:f7:05:c5:89:6a:66:69:e2:6d:70:29
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

01/05/2023, 00:00

Not After

31/07/2026, 23:59

Subject

CN=K Desktop Environment e. V.,O=K Desktop Environment e. V.,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ec:12:62:1e:d4:ac:83:f5:47:af:96:c2:91:f8:30:b7:78:28:98:59:89:87:b3:79:30:42:f9:6f:1e:bb:d9:c4
Signer

Actual PE Digest

ec:12:62:1e:d4:ac:83:f5:47:af:96:c2:91:f8:30:b7:78:28:98:59:89:87:b3:79:30:42:f9:6f:1e:bb:d9:c4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

api-ms-win-crt-convert-l1-1-0

atoi
mbrtowc
strtol
wcrtomb

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr
atan
log10
tan

api-ms-win-crt-private-l1-1-0

memcpy
memmove
strchr

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_assert
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
exit
strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fflush
fputc
fread
fseek
ftell
fwrite

api-ms-win-crt-string-l1-1-0

memset
strlen
strncmp
strncpy
tolower
toupper
wcslen

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

api-ms-win-crt-locale-l1-1-0

localeconv

Exports

Exports

get_lame_os_bitness
get_lame_short_version
get_lame_url
get_lame_version
get_lame_version_numerical
get_lame_very_short_version
get_psy_version
hip_decode
hip_decode1
hip_decode1_headers
hip_decode1_headersB
hip_decode_exit
hip_decode_headers
hip_decode_init
hip_set_debugf
hip_set_errorf
hip_set_msgf
id3tag_add_v2
id3tag_genre_list
id3tag_init
id3tag_pad_v2
id3tag_set_album
id3tag_set_albumart
id3tag_set_artist
id3tag_set_comment
id3tag_set_comment_ucs2
id3tag_set_comment_utf16
id3tag_set_fieldvalue
id3tag_set_fieldvalue_ucs2
id3tag_set_fieldvalue_utf16
id3tag_set_genre
id3tag_set_pad
id3tag_set_textinfo_ucs2
id3tag_set_textinfo_utf16
id3tag_set_title
id3tag_set_track
id3tag_set_year
id3tag_space_v1
id3tag_v1_only
id3tag_v2_only
lame_bitrate_block_type_hist
lame_bitrate_hist
lame_bitrate_kbps
lame_bitrate_stereo_mode_hist
lame_block_type_hist
lame_close
lame_decode
lame_decode1
lame_decode1_headers
lame_decode1_headersB
lame_decode_exit
lame_decode_headers
lame_decode_init
lame_encode_buffer
lame_encode_buffer_float
lame_encode_buffer_ieee_double
lame_encode_buffer_ieee_float
lame_encode_buffer_int
lame_encode_buffer_interleaved
lame_encode_buffer_interleaved_ieee_double
lame_encode_buffer_interleaved_ieee_float
lame_encode_buffer_interleaved_int
lame_encode_buffer_long
lame_encode_buffer_long2
lame_encode_flush
lame_encode_flush_nogap
lame_get_ATHlower
lame_get_ATHonly
lame_get_ATHshort
lame_get_ATHtype
lame_get_AudiophileGain
lame_get_PeakSample
lame_get_RadioGain
lame_get_VBR
lame_get_VBR_hard_min
lame_get_VBR_max_bitrate_kbps
lame_get_VBR_mean_bitrate_kbps
lame_get_VBR_min_bitrate_kbps
lame_get_VBR_q
lame_get_VBR_quality
lame_get_allow_diff_short
lame_get_analysis
lame_get_athaa_loudapprox
lame_get_athaa_sensitivity
lame_get_athaa_type
lame_get_bWriteVbrTag
lame_get_bitrate
lame_get_brate
lame_get_compression_ratio
lame_get_copyright
lame_get_cwlimit
lame_get_decode_on_the_fly
lame_get_decode_only
lame_get_disable_reservoir
lame_get_emphasis
lame_get_encoder_delay
lame_get_encoder_padding
lame_get_error_protection
lame_get_exp_nspsytune
lame_get_experimentalX
lame_get_experimentalY
lame_get_experimentalZ
lame_get_extension
lame_get_findReplayGain
lame_get_force_ms
lame_get_force_short_blocks
lame_get_frameNum
lame_get_framesize
lame_get_free_format
lame_get_highpassfreq
lame_get_highpasswidth
lame_get_id3v1_tag
lame_get_id3v2_tag
lame_get_in_samplerate
lame_get_interChRatio
lame_get_lametag_frame
lame_get_lowpassfreq
lame_get_lowpasswidth
lame_get_maximum_number_of_samples
lame_get_mf_samples_to_encode
lame_get_mode
lame_get_msfix
lame_get_noATH
lame_get_no_short_blocks
lame_get_noclipGainChange
lame_get_noclipScale
lame_get_nogap_currentindex
lame_get_nogap_total
lame_get_num_channels
lame_get_num_samples
lame_get_original
lame_get_out_samplerate
lame_get_padding_type
lame_get_quality
lame_get_quant_comp
lame_get_quant_comp_short
lame_get_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_get_size_mp3buffer
lame_get_strict_ISO
lame_get_totalframes
lame_get_useTemporal
lame_get_version
lame_get_write_id3tag_automatic
lame_init
lame_init_bitstream
lame_init_params
lame_mp3_tags_fid
lame_print_config
lame_print_internals
lame_set_ATHlower
lame_set_ATHonly
lame_set_ATHshort
lame_set_ATHtype
lame_set_VBR
lame_set_VBR_hard_min
lame_set_VBR_max_bitrate_kbps
lame_set_VBR_mean_bitrate_kbps
lame_set_VBR_min_bitrate_kbps
lame_set_VBR_q
lame_set_VBR_quality
lame_set_allow_diff_short
lame_set_analysis
lame_set_asm_optimizations
lame_set_athaa_loudapprox
lame_set_athaa_sensitivity
lame_set_athaa_type
lame_set_bWriteVbrTag
lame_set_brate
lame_set_compression_ratio
lame_set_copyright
lame_set_cwlimit
lame_set_debugf
lame_set_decode_on_the_fly
lame_set_decode_only
lame_set_disable_reservoir
lame_set_emphasis
lame_set_error_protection
lame_set_errorf
lame_set_exp_nspsytune
lame_set_experimentalX
lame_set_experimentalY
lame_set_experimentalZ
lame_set_extension
lame_set_findReplayGain
lame_set_force_ms
lame_set_force_short_blocks
lame_set_free_format
lame_set_highpassfreq
lame_set_highpasswidth
lame_set_in_samplerate
lame_set_interChRatio
lame_set_lowpassfreq
lame_set_lowpasswidth
lame_set_mode
lame_set_msfix
lame_set_msgf
lame_set_noATH
lame_set_no_short_blocks
lame_set_nogap_currentindex
lame_set_nogap_total
lame_set_num_channels
lame_set_num_samples
lame_set_original
lame_set_out_samplerate
lame_set_padding_type
lame_set_preset
lame_set_preset_expopts
lame_set_quality
lame_set_quant_comp
lame_set_quant_comp_short
lame_set_scale
lame_set_scale_left
lame_set_scale_right
lame_set_strict_ISO
lame_set_useTemporal
lame_set_write_id3tag_automatic
lame_stereo_mode_hist

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/6904
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41bdd03f5fbefa7e4e0a8ac43138d04d

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

74:a6:8f:ee:73:f7:05:c5:89:6a:66:69:e2:6d:70:29Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

ec:12:62:1e:d4:ac:83:f5:47:af:96:c2:91:f8:30:b7:78:28:98:59:89:87:b3:79:30:42:f9:6f:1e:bb:d9:c4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 269KB - Virtual size: 269KB

.rdata Size: 78KB - Virtual size: 78KB

.buildid Size: 512B - Virtual size: 53B

.data Size: 512B - Virtual size: 183KB

.pdata Size: 5KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 51KB - Virtual size: 50KB

.reloc Size: 1024B - Virtual size: 764B

/6904 Size: 512B - Virtual size: 28B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

74:a6:8f:ee:73:f7:05:c5:89:6a:66:69:e2:6d:70:29
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

ec:12:62:1e:d4:ac:83:f5:47:af:96:c2:91:f8:30:b7:78:28:98:59:89:87:b3:79:30:42:f9:6f:1e:bb:d9:c4
Signer

.text
Size: 269KB - Virtual size: 269KB

.rdata
Size: 78KB - Virtual size: 78KB

.buildid
Size: 512B - Virtual size: 53B

.data
Size: 512B - Virtual size: 183KB

.pdata
Size: 5KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 51KB - Virtual size: 50KB

.reloc
Size: 1024B - Virtual size: 764B

/6904
Size: 512B - Virtual size: 28B