f8a59fa79158e36f51038469ab4a67e6be2e79c903383e34a8fb454277e07f94[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

f8a59fa79158e36f51038469ab4a67e6be2e79c903383e34a8fb454277e07f94.exe
Size

676KB
MD5

77ac3150c0a2ea85af89954b900a5198
SHA1

bc22fa4303f9faba46eea3d5abbf7329f910f6a6
SHA256

f8a59fa79158e36f51038469ab4a67e6be2e79c903383e34a8fb454277e07f94
SHA512

802d1016f53fb4ab3bd2c9b5f6012579e75aee64063ced07484428d47f64872f05ef36c99429a9bfec2160a56b3494f380477a356e2d714fbabdc98b43d04e11
SSDEEP

12288:YHcRey4pHcRey4pHcRey4+Z2E6lbYvjha5snTOuC3:YCqCqCLZf6lK2GTOn3

Score

1^/10

Malware Config

Signatures

Files

f8a59fa79158e36f51038469ab4a67e6be2e79c903383e34a8fb454277e07f94.exe
.exe windows:4 windows x86 arch:x86

b6efbadda0c70ffd012b381cbefdab78

Code Sign

43:27:b1:36:9b:48:0c:98:4c:81:13:09:14:6f:7c:57
Certificate

Issuer

CN=DVUOWAAKOSJVSWJNWF

Not Before

16-09-2020 12:44

Not After

31-12-2039 23:59

Subject

CN=DVUOWAAKOSJVSWJNWF

Extended Key Usages

ExtKeyUsageCodeSigning

f7:a0:54:d5:98:ab:86:bd:5f:25:47:47:88:0f:0d:1c:66:48:bf:34
Signer

Actual PE Digest

f7:a0:54:d5:98:ab:86:bd:5f:25:47:47:88:0f:0d:1c:66:48:bf:34

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
lstrlenW
lstrcpynW
LoadLibraryExW
SetErrorMode
MultiByteToWideChar
GetLastError
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
GetCPInfoExW
GetProcAddress
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetVersionExA
GetStartupInfoA
ExitProcess
GetModuleHandleA
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
InterlockedIncrement
SetLastError
InterlockedDecrement
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleW
HeapDestroy
HeapCreate
OutputDebugStringA
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
VirtualProtect
VirtualQuery
FlushFileBuffers
ReadFile
CloseHandle

user32

GetSystemMetrics
SetWindowPos
GetForegroundWindow
GetWindowRect
LoadStringW
LoadCursorW
SetCursor
SetWindowLongW
MessageBoxW
SetWindowTextW
GetWindowTextW
DestroyCursor
SetFocus
PostMessageW
ReleaseDC
GetDC
SystemParametersInfoW
GetDlgItem
SendMessageW
EnableWindow
ShowWindow
LoadIconA
LoadCursorFromFileW
GetClipboardViewer
LoadCursorFromFileA
IsMenu
IsClipboardFormatAvailable
IsIconic
IsCharAlphaNumericA
GetTopWindow
IsGUIThread
VkKeyScanA
WindowFromDC
IsCharAlphaNumericW
GetQueueStatus
OpenIcon
GetParent
GetWindowTextLengthW
IsCharLowerA
OemKeyScan
ShowCaret
IsCharUpperW
GetSysColor

gdi32

DeleteObject
CreateFontIndirectW
GetDeviceCaps
UnrealizeObject
TextOutA
TextOutW
StretchDIBits
StretchBlt
StartPage
StartDocA
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetDCPenColor
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
OffsetRgn
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetViewportOrgEx
GetTextMetricsW
GetTextFaceA
GetTextExtentPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextColor
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetMapMode
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetCurrentObject
GetClipRgn
GetClipBox
GetBrushOrgEx
GetBkMode
GetBkColor
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontA
CreateFontW
CreateEnhMetaFileW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseEnhMetaFile
Chord
BitBlt
ArcTo
Arc
AngleArc
AbortDoc

comctl32

ord17

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

r421
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

r42
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata2
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

r4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

g2
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

g
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

r422
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6efbadda0c70ffd012b381cbefdab78

Code Sign

43:27:b1:36:9b:48:0c:98:4c:81:13:09:14:6f:7c:57Certificate

Extended Key Usages

f7:a0:54:d5:98:ab:86:bd:5f:25:47:47:88:0f:0d:1c:66:48:bf:34Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

Sections

.text Size: 16KB - Virtual size: 15KB

r421 Size: 512B - Virtual size: 1B

r42 Size: 512B - Virtual size: 1B

.rdata2 Size: 98KB - Virtual size: 97KB

.rdata Size: 196KB - Virtual size: 195KB

.data Size: 8KB - Virtual size: 8KB

r4 Size: 3KB - Virtual size: 2KB

g2 Size: 512B - Virtual size: 1B

g Size: 244KB - Virtual size: 244KB

r422 Size: 512B - Virtual size: 1B

.rsrc Size: 106KB - Virtual size: 105KB

43:27:b1:36:9b:48:0c:98:4c:81:13:09:14:6f:7c:57
Certificate

f7:a0:54:d5:98:ab:86:bd:5f:25:47:47:88:0f:0d:1c:66:48:bf:34
Signer

.text
Size: 16KB - Virtual size: 15KB

r421
Size: 512B - Virtual size: 1B

r42
Size: 512B - Virtual size: 1B

.rdata2
Size: 98KB - Virtual size: 97KB

.rdata
Size: 196KB - Virtual size: 195KB

.data
Size: 8KB - Virtual size: 8KB

r4
Size: 3KB - Virtual size: 2KB

g2
Size: 512B - Virtual size: 1B

g
Size: 244KB - Virtual size: 244KB

r422
Size: 512B - Virtual size: 1B

.rsrc
Size: 106KB - Virtual size: 105KB