1402b4ad48f862ffd9fe608bcc24c12b1577d8cb3eb4b7a9876b6cbb4fa56531

Sharing

Copy URL Twitter E-mail

General

Target

1402b4ad48f862ffd9fe608bcc24c12b1577d8cb3eb4b7a9876b6cbb4fa56531
Size

4.1MB
MD5

ad4e692d042307b7f652dddf7e843c66
SHA1

2103bb73da2e5e1dbcb65f05b8f14eae094f7267
SHA256

1402b4ad48f862ffd9fe608bcc24c12b1577d8cb3eb4b7a9876b6cbb4fa56531
SHA512

0cb906c29e86beb215b2be3674cec2aa378fa810724b6a79a4d3fb83ade9019d3146ef12338274a1391d0fc0d07b6fbef63af59e75ca49ea42d80d0b03e30493
SSDEEP

98304:AU7hzGsRaAb7ofZVjGWcP7vl+XAVS/IkDzBE0C07en:AUk4aeohV6jDNrE/ISEoy

Score

N/A

Malware Config

Signatures

Files

1402b4ad48f862ffd9fe608bcc24c12b1577d8cb3eb4b7a9876b6cbb4fa56531
.exe windows x86

d4c5f97a5c4d3eaebbb1142457ab9469

Code Sign

c2:ce:6e:36:51:75:a7:6a:0c:ba:b8:2e:5d:44:10:b5
Certificate

Issuer

POSTALCODE=10305

Not Before

07/11/2022, 12:20

Not After

07/11/2023, 12:20

Subject

POSTALCODE=10305

28:8c:e9:22:da:d6:be:4d:6e:11:d1:d5:ed:1e:f5:5b:85:ec:39:52:76:0b:66:46:c6:34:4d:9d:b1:2d:e7:ae
Signer

Actual PE Digest

28:8c:e9:22:da:d6:be:4d:6e:11:d1:d5:ed:1e:f5:5b:85:ec:39:52:76:0b:66:46:c6:34:4d:9d:b1:2d:e7:ae

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10305

04/11/2022, 15:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumeInformationA
SetComputerNameW
LocalSize
InterlockedDecrement
GetTickCount
CopyFileExW
GetConsoleAliasExesLengthW
EnumSystemCodePagesW
TlsGetValue
CopyFileExA
MoveFileWithProgressW
VerifyVersionInfoW
LocalLock
WaitForDebugEvent
GlobalGetAtomNameW
MapViewOfFileEx
GetModuleHandleW
VirtualProtectEx
GlobalDeleteAtom
SizeofResource
WriteConsoleInputW
CopyFileW
CancelWaitableTimer
GlobalAlloc
FindResourceW
OpenEventW
SearchPathA
GetThreadPriority
CallNamedPipeW
GetProcAddress
ReadConsoleA
GetConsoleAliasesLengthW
OpenFileMappingA
GetSystemWindowsDirectoryA
MoveFileW
GetOEMCP
GetMailslotInfo
GetConsoleAliasW
LockFile
GetDiskFreeSpaceExW
DefineDosDeviceW
GetACP
SetProcessAffinityMask
GlobalFindAtomW
WriteConsoleW
MoveFileWithProgressA
AddRefActCtx
FindNextVolumeA
InitializeCriticalSection
GetComputerNameW
CancelDeviceWakeupRequest
LocalUnlock
EnterCriticalSection
GetPrivateProfileStructA
GetConsoleAliasExesLengthA
InterlockedIncrement
EnumCalendarInfoA
InterlockedExchange
GetNamedPipeHandleStateA
AreFileApisANSI
SetLastError
GetModuleHandleA
LoadLibraryW
Sleep
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
DeleteFileA
GetStartupInfoW
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA

advapi32

SetThreadToken

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4c5f97a5c4d3eaebbb1142457ab9469

Code Sign

c2:ce:6e:36:51:75:a7:6a:0c:ba:b8:2e:5d:44:10:b5Certificate

28:8c:e9:22:da:d6:be:4d:6e:11:d1:d5:ed:1e:f5:5b:85:ec:39:52:76:0b:66:46:c6:34:4d:9d:b1:2d:e7:aeSigner

Signature Validations

Verification

04/11/2022, 15:46 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 127KB - Virtual size: 126KB

.data Size: 3.9MB - Virtual size: 5.3MB

.rsrc Size: 14KB - Virtual size: 3.2MB

c2:ce:6e:36:51:75:a7:6a:0c:ba:b8:2e:5d:44:10:b5
Certificate

28:8c:e9:22:da:d6:be:4d:6e:11:d1:d5:ed:1e:f5:5b:85:ec:39:52:76:0b:66:46:c6:34:4d:9d:b1:2d:e7:ae
Signer

04/11/2022, 15:46
Valid: false

.text
Size: 127KB - Virtual size: 126KB

.data
Size: 3.9MB - Virtual size: 5.3MB

.rsrc
Size: 14KB - Virtual size: 3.2MB