5662a34c09d1de65f13a855eccd8e846c755df54aa040670db211b09ba8d3469

Sharing

Copy URL Twitter E-mail

General

Target

5662a34c09d1de65f13a855eccd8e846c755df54aa040670db211b09ba8d3469
Size

4.1MB
MD5

0b52c8808985918d99a08f58d2b90f37
SHA1

dcb2b53ec125917d828bc4303fae91acea126882
SHA256

5662a34c09d1de65f13a855eccd8e846c755df54aa040670db211b09ba8d3469
SHA512

99b6d3e0d02a614377e9a1e2bc6419df48cf3db6bed4cc43decf89fdf3a4cc68b0e55d95f20aef282c2e05ed0df57429ff1fbd7c07c66616b1e7601ab410a57f
SSDEEP

98304:GwgKoOuIYCyEu2tjL+hM7ITl9qVYOYxqNCcsOd3pQXzV:TruhCb/+C+lkVYOYxhc9PQjV

Score

N/A

Malware Config

Signatures

Files

5662a34c09d1de65f13a855eccd8e846c755df54aa040670db211b09ba8d3469
.exe windows x86

9111c2b05e717afa2acabbf314a51e79

Code Sign

58:99:a5:88:ea:e2:b2:1f:60:71:a5:d6:40:35:14:6b
Certificate

Issuer

POSTALCODE=10305

Not Before

17/10/2022, 19:13

Not After

17/10/2023, 19:13

Subject

POSTALCODE=10305

89:5f:ce:ff:1c:e9:eb:ca:30:fb:88:10:40:d8:63:f4:99:44:c9:1c:fd:19:4d:76:5b:eb:45:20:69:57:a1:d7
Signer

Actual PE Digest

89:5f:ce:ff:1c:e9:eb:ca:30:fb:88:10:40:d8:63:f4:99:44:c9:1c:fd:19:4d:76:5b:eb:45:20:69:57:a1:d7

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10305

14/10/2022, 21:54
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReadConsoleW
GetVolumeInformationA
GetComputerNameA
VerLanguageNameA
LocalFlags
InterlockedDecrement
SetSystemTimeAdjustment
SetLocaleInfoA
FindNextVolumeW
GetConsoleAliasExesLengthA
EnumSystemCodePagesA
FindNextFileA
CopyFileExA
MoveFileWithProgressW
VerifyVersionInfoA
LocalSize
DebugBreak
GlobalGetAtomNameA
MapViewOfFileEx
GetWindowsDirectoryA
DeleteFileA
lstrlenW
IsBadWritePtr
FindResourceA
GetComputerNameExW
GetProcAddress
GetStringTypeW
GetFileTime
GetConsoleAliasesLengthA
DeleteVolumeMountPointW
GetOEMCP
CreateIoCompletionPort
CopyFileA
lstrcpynW
WriteConsoleW
GetCommandLineW
GetProfileSectionA
WriteConsoleOutputA
SearchPathA
GetCommandLineA
FindFirstChangeNotificationA
GetCalendarInfoA
GetConsoleTitleA
CreateActCtxA
FormatMessageW
GetModuleHandleW
CreateJobObjectA
GetConsoleFontSize
FindNextVolumeA
GlobalFlags
GetCurrentConsoleFont
GetModuleHandleA
LoadLibraryW
InitializeCriticalSection
GetStringTypeExA
OpenMutexA
RtlCaptureContext
InterlockedExchange
LeaveCriticalSection
DeleteFiber
InterlockedCompareExchange
EnumDateFormatsW
EnumCalendarInfoA
GetPrivateProfileStructA
InterlockedIncrement
GetNamedPipeHandleStateW
CreateTimerQueue
LocalAlloc
GetLogicalDriveStringsW
GetTickCount
SetLastError
WideCharToMultiByte
MultiByteToWideChar
Sleep
DeleteCriticalSection
EnterCriticalSection
RtlUnwind
RaiseException
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MoveFileA
GetStartupInfoW
LCMapStringA
LCMapStringW
GetCPInfo
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9111c2b05e717afa2acabbf314a51e79

Code Sign

58:99:a5:88:ea:e2:b2:1f:60:71:a5:d6:40:35:14:6bCertificate

89:5f:ce:ff:1c:e9:eb:ca:30:fb:88:10:40:d8:63:f4:99:44:c9:1c:fd:19:4d:76:5b:eb:45:20:69:57:a1:d7Signer

Signature Validations

Verification

14/10/2022, 21:54 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 124KB - Virtual size: 123KB

.data Size: 3.9MB - Virtual size: 5.3MB

.rsrc Size: 19KB - Virtual size: 3.2MB

58:99:a5:88:ea:e2:b2:1f:60:71:a5:d6:40:35:14:6b
Certificate

89:5f:ce:ff:1c:e9:eb:ca:30:fb:88:10:40:d8:63:f4:99:44:c9:1c:fd:19:4d:76:5b:eb:45:20:69:57:a1:d7
Signer

14/10/2022, 21:54
Valid: false

.text
Size: 124KB - Virtual size: 123KB

.data
Size: 3.9MB - Virtual size: 5.3MB

.rsrc
Size: 19KB - Virtual size: 3.2MB