bbdc6b32cbaccc9ec45b67d342530f35c71a4214516e5f8db8edeb6be3cad93b

Sharing

Copy URL

Twitter E-mail

General

Target

bbdc6b32cbaccc9ec45b67d342530f35c71a4214516e5f8db8edeb6be3cad93b
Size

4.2MB
MD5

48caf2ab304b55554173b96787123609
SHA1

2e814b926081a06620ff6eeb3820d98861cbb72a
SHA256

bbdc6b32cbaccc9ec45b67d342530f35c71a4214516e5f8db8edeb6be3cad93b
SHA512

b39adce143a838f8bbb56f41ac40cc37964bec636ac8a8a945159d39a936a838bbcd4ce8a918ed49d4a06af94f2ccde6ae860cfaf792b9fb9b4e4e8482978e29
SSDEEP

98304:bKfb7yXOGFOo6euReI9O3ubi7A1E0YqPytfEPQuxKc1vV9:2fi+W6e0L9OUyPvoQugc1v/

Score

N/A

Malware Config

Signatures

Files

bbdc6b32cbaccc9ec45b67d342530f35c71a4214516e5f8db8edeb6be3cad93b
.exe windows x86

d11875c477193ed1ba21d61ddbc06c18

Code Sign

3b:af:9b:e0:ff:10:4d:a7:30:2d:0f:ee:79:68:ff:21
Certificate

Issuer

POSTALCODE=10305

Not Before

28-09-2022 04:51

Not After

28-09-2023 04:51

Subject

POSTALCODE=10305

be:65:dd:fb:8e:ad:d1:10:73:6e:51:6c:ce:b3:fe:2f:8b:28:e4:fd:45:e8:91:53:6a:f8:ee:22:29:72:1b:c0
Signer

Actual PE Digest

be:65:dd:fb:8e:ad:d1:10:73:6e:51:6c:ce:b3:fe:2f:8b:28:e4:fd:45:e8:91:53:6a:f8:ee:22:29:72:1b:c0

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10305

23-09-2022 10:36
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
InterlockedCompareExchange
OpenWaitableTimerW
CreateEventA
ReadConsoleInputA
WaitNamedPipeW
FindVolumeMountPointClose
SetSystemTimeAdjustment
FindNextFileW
EnumResourceTypesW
GetModuleFileNameW
IsBadCodePtr
DeleteFileA
SearchPathW
VirtualAlloc
WriteConsoleOutputCharacterA
GetConsoleAliasA
GetShortPathNameW
GetPrivateProfileStringA
PeekConsoleInputA
GlobalGetAtomNameA
GetProcAddress
GetSystemDefaultLangID
FindFirstChangeNotificationW
GetFileType
SetFileShortNameW
lstrcpynA
AddAtomW
SetConsoleCtrlHandler
CreateMutexA
GetLongPathNameW
FoldStringW
ResetEvent
GlobalWire
GetComputerNameW
GetVersionExA
GetSystemDefaultLCID
GetProcessHandleCount
GetLastError
VirtualProtect
GlobalAlloc
SetFileShortNameA
GetFileSize
GetFileAttributesExW
SetComputerNameA
GetFileAttributesA
ReadConsoleW
FindFirstChangeNotificationA
GetVolumePathNameA
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
DeleteCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapAlloc
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetFilePointer
ReadFile
GetConsoleCP
GetConsoleMode
CloseHandle
CreateFileA
HeapSize
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d11875c477193ed1ba21d61ddbc06c18

Code Sign

3b:af:9b:e0:ff:10:4d:a7:30:2d:0f:ee:79:68:ff:21Certificate

be:65:dd:fb:8e:ad:d1:10:73:6e:51:6c:ce:b3:fe:2f:8b:28:e4:fd:45:e8:91:53:6a:f8:ee:22:29:72:1b:c0Signer

Signature Validations

Verification

23-09-2022 10:36 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 101KB - Virtual size: 101KB

.data Size: 3.9MB - Virtual size: 4.2MB

.rsrc Size: 134KB - Virtual size: 4.3MB

.reloc Size: 18KB - Virtual size: 17KB

3b:af:9b:e0:ff:10:4d:a7:30:2d:0f:ee:79:68:ff:21
Certificate

be:65:dd:fb:8e:ad:d1:10:73:6e:51:6c:ce:b3:fe:2f:8b:28:e4:fd:45:e8:91:53:6a:f8:ee:22:29:72:1b:c0
Signer

23-09-2022 10:36
Valid: false

.text
Size: 101KB - Virtual size: 101KB

.data
Size: 3.9MB - Virtual size: 4.2MB

.rsrc
Size: 134KB - Virtual size: 4.3MB

.reloc
Size: 18KB - Virtual size: 17KB