c26ba07654897acae88d97f22f629ad2926a62828749a8ea3af86d3f80fc1a86

Sharing

Copy URL

Twitter E-mail

General

Target

c26ba07654897acae88d97f22f629ad2926a62828749a8ea3af86d3f80fc1a86
Size

4.1MB
MD5

482ffad847ffb10500a5343f12b1bad3
SHA1

029749d6e0ad70f93c84f42a37c3a39169bab430
SHA256

c26ba07654897acae88d97f22f629ad2926a62828749a8ea3af86d3f80fc1a86
SHA512

de8a3e299d7d413d96cd69999a6bd3318854be142370c6f611f27e43497730c8a224c86dd0f18e5ce400062c55845ac8c439ec7f1be6d9406a1437df60dc3db7
SSDEEP

49152:L5Yim6tSR5O+LMEfTFjudw5bzFSua7/4Un5m77VqtkbBsTajfEjIb+yCsDFEpYrU:L52FhoQRjlRzgH0yukX6fJDCK5X2Im

Score

N/A

Malware Config

Signatures

Files

c26ba07654897acae88d97f22f629ad2926a62828749a8ea3af86d3f80fc1a86
.exe windows x86

b6bedcb856f1ec78742547ac6d88521a

Code Sign

a2:64:22:08:6d:fa:8e:cd:76:bd:71:4f:95:e9:c8:ac
Certificate

Issuer

POSTALCODE=10305

Not Before

16-09-2022 04:06

Not After

16-09-2023 04:06

Subject

POSTALCODE=10305

14:bf:0e:0f:0f:a6:95:d8:a5:6b:12:2f:49:13:6f:dc:59:1a:80:ef:e6:15:ac:99:ed:e1:09:1a:05:07:76:06
Signer

Actual PE Digest

14:bf:0e:0f:0f:a6:95:d8:a5:6b:12:2f:49:13:6f:dc:59:1a:80:ef:e6:15:ac:99:ed:e1:09:1a:05:07:76:06

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10305

15-09-2022 14:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileSectionW
VerifyVersionInfoA
LocalFree
GetProcessPriorityBoost
FindFirstChangeNotificationW
GlobalGetAtomNameA
FindResourceExW
GetComputerNameExW
GetModuleHandleW
GetTempPathA
BuildCommDCBAndTimeoutsA
GetProcAddress
GetModuleHandleA
VirtualUnlock
GetTapeParameters
LockFile
GetAtomNameA
SetConsoleScreenBufferSize
SetProcessAffinityMask
EnumResourceLanguagesW
GetCPInfoExA
SetThreadContext
lstrlenA
GetProcessAffinityMask
SetConsoleCtrlHandler
GlobalGetAtomNameW
SetInformationJobObject
lstrcpynA
WriteConsoleA
MoveFileWithProgressA
GetBinaryTypeA
GetLastError
GetCommandLineA
GetCalendarInfoA
GetConsoleTitleA
SearchPathA
CreateActCtxA
FormatMessageA
InitializeCriticalSection
FindNextVolumeA
GetCurrentConsoleFont
LoadLibraryA
GetConsoleAliasW
LoadLibraryW
ExitProcess
MoveFileWithProgressW
LeaveCriticalSection
EnumSystemLocalesW
OpenMutexA
FileTimeToLocalFileTime
SearchPathW
GetProcessShutdownParameters
FindResourceA
FormatMessageW
CreateIoCompletionPort
GetPrivateProfileStructW
CreateFiber
InterlockedExchange
EnumDateFormatsA
FindResourceExA
InterlockedIncrement
FindActCtxSectionGuid
SetConsoleCursorInfo
UnregisterWait
FoldStringW
LocalAlloc
GetFileType
GetNumberOfConsoleInputEvents
GetProfileSectionA
SetDefaultCommConfigW
SetLastError
GetMailslotInfo
GetSystemDefaultUILanguage
GetFileAttributesA
GetSystemWindowsDirectoryA
GetAtomNameW
GetComputerNameA
ReadConsoleInputA
EnumTimeFormatsA
GetPrivateProfileStructA
_hwrite
GetConsoleAliasA
lstrcatA
GetFullPathNameW
DebugSetProcessKillOnExit
AddAtomA
SetCurrentDirectoryW
SetCalendarInfoA
CopyFileExA
HeapAlloc
FindNextChangeNotification
DeleteFileA
RaiseException
GetStartupInfoW
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
GetModuleFileNameW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
InterlockedDecrement
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStdHandle
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
GetConsoleOutputCP
CreateFileA
CloseHandle
FlushFileBuffers

user32

CharUpperW

gdi32

GetCharWidthW
SelectObject

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rib
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pofegi
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6bedcb856f1ec78742547ac6d88521a

Code Sign

a2:64:22:08:6d:fa:8e:cd:76:bd:71:4f:95:e9:c8:acCertificate

14:bf:0e:0f:0f:a6:95:d8:a5:6b:12:2f:49:13:6f:dc:59:1a:80:ef:e6:15:ac:99:ed:e1:09:1a:05:07:76:06Signer

Signature Validations

Verification

15-09-2022 14:52 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 177KB - Virtual size: 176KB

.data Size: 3.9MB - Virtual size: 5.3MB

.rib Size: 512B - Virtual size: 5B

.pofegi Size: 1024B - Virtual size: 1024B

.rsrc Size: 32KB - Virtual size: 3.1MB

a2:64:22:08:6d:fa:8e:cd:76:bd:71:4f:95:e9:c8:ac
Certificate

14:bf:0e:0f:0f:a6:95:d8:a5:6b:12:2f:49:13:6f:dc:59:1a:80:ef:e6:15:ac:99:ed:e1:09:1a:05:07:76:06
Signer

15-09-2022 14:52
Valid: false

.text
Size: 177KB - Virtual size: 176KB

.data
Size: 3.9MB - Virtual size: 5.3MB

.rib
Size: 512B - Virtual size: 5B

.pofegi
Size: 1024B - Virtual size: 1024B

.rsrc
Size: 32KB - Virtual size: 3.1MB