67e9eab4600841a381b2540694ac64696fd47f5d96e3a8a64c759a7976cf756b

Sharing

Copy URL

Twitter E-mail

General

Target

67e9eab4600841a381b2540694ac64696fd47f5d96e3a8a64c759a7976cf756b
Size

4.0MB
MD5

31ae41816fb6178992aa07efd85bad7f
SHA1

055222fe9118c21dbadb487a821364cb37b925c0
SHA256

67e9eab4600841a381b2540694ac64696fd47f5d96e3a8a64c759a7976cf756b
SHA512

41ab121e6ad1a9b1e1a8fe37b74aefb19f32af9bd9446a6018cb5294fbd24633fd98ad07164e06bfd9655e4b14c363772e31292c289fa198f5a52dd6007286d1
SSDEEP

98304:DzFhKBml+UwKZ8TkaQTG2+XPFmd29j4gt3Q3Sipya:DhlwKZ8TkLP+849sq38Sba

Score

N/A

Malware Config

Signatures

Files

67e9eab4600841a381b2540694ac64696fd47f5d96e3a8a64c759a7976cf756b
.exe windows x86

df93d21c471ccff0ce55a97430489352

Code Sign

9e:ca:71:9a:0e:10:a0:51:1b:5f:c4:92:10:a7:e3:5d
Certificate

Issuer

POSTALCODE=10407

Not Before

21/11/2022, 10:32

Not After

21/11/2023, 10:32

Subject

POSTALCODE=10407

12:a6:7e:a3:80:3d:06:4e:1a:a6:f4:80:f0:1f:40:33:88:56:6b:2c:49:0a:14:37:0d:03:f6:c9:f5:6b:5e:ad
Signer

Actual PE Digest

12:a6:7e:a3:80:3d:06:4e:1a:a6:f4:80:f0:1f:40:33:88:56:6b:2c:49:0a:14:37:0d:03:f6:c9:f5:6b:5e:ad

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10407

17/11/2022, 13:16
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemCodePagesW
LocalFree
FindNextFileW
WriteConsoleInputW
EnumDateFormatsA
OpenMutexW
GetConsoleAliasesLengthW
CopyFileExW
ReadConsoleOutputCharacterA
SetVolumeLabelA
GetEnvironmentStrings
VerifyVersionInfoW
QueryDosDeviceA
EnumCalendarInfoExA
RequestWakeupLatency
LocalSize
TlsGetValue
CreateFileA
SetMailslotInfo
GetWindowsDirectoryA
GetModuleHandleW
VirtualFree
CreateDirectoryExW
GetLogicalDriveStringsA
ReadConsoleInputW
FindNextVolumeMountPointA
OpenWaitableTimerA
TransactNamedPipe
SearchPathA
IsSystemResumeAutomatic
CallNamedPipeW
GetProcAddress
LoadLibraryA
GlobalAlloc
MoveFileWithProgressW
GetBinaryTypeA
GetThreadSelectorEntry
GetCommandLineW
InterlockedExchange
FillConsoleOutputCharacterA
CancelTimerQueueTimer
GetConsoleTitleW
CopyFileA
CreateTimerQueueTimer
FindResourceA
FormatMessageW
CreateJobObjectA
GetConsoleFontSize
FindFirstVolumeW
InterlockedIncrement
GetModuleHandleA
GetACP
HeapSetInformation
EnumCalendarInfoW
GetConsoleTitleA
GetPrivateProfileStructW
EnumCalendarInfoA
GetConsoleAliasExesLengthW
InterlockedExchangeAdd
InterlockedDecrement
GetVolumeNameForVolumeMountPointW
SetCalendarInfoA
TerminateThread
MoveFileA
FindAtomW
GetMailslotInfo
FreeEnvironmentStringsA
SetConsoleTitleA
SetVolumeMountPointA
GetAtomNameW
FlushConsoleInputBuffer
GetOEMCP
GetProcessIoCounters
CreateDirectoryExA
GlobalFindAtomW
GetTickCount
FindFirstChangeNotificationW
LoadLibraryW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetLastError
DeleteFileA
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
IsValidCodePage
HeapSize
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
ReadFile
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle

user32

GetMessageTime

gdi32

GetBoundsRect

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df93d21c471ccff0ce55a97430489352

Code Sign

9e:ca:71:9a:0e:10:a0:51:1b:5f:c4:92:10:a7:e3:5dCertificate

12:a6:7e:a3:80:3d:06:4e:1a:a6:f4:80:f0:1f:40:33:88:56:6b:2c:49:0a:14:37:0d:03:f6:c9:f5:6b:5e:adSigner

Signature Validations

Verification

17/11/2022, 13:16 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 77KB - Virtual size: 77KB

.data Size: 3.9MB - Virtual size: 5.3MB

.rsrc Size: 15KB - Virtual size: 3.2MB

9e:ca:71:9a:0e:10:a0:51:1b:5f:c4:92:10:a7:e3:5d
Certificate

12:a6:7e:a3:80:3d:06:4e:1a:a6:f4:80:f0:1f:40:33:88:56:6b:2c:49:0a:14:37:0d:03:f6:c9:f5:6b:5e:ad
Signer

17/11/2022, 13:16
Valid: false

.text
Size: 77KB - Virtual size: 77KB

.data
Size: 3.9MB - Virtual size: 5.3MB

.rsrc
Size: 15KB - Virtual size: 3.2MB