fb383ed47cf47b61dbef2da08e28781eb9cfa7ccb88f9b10a5375fa2e4835f44

Sharing

Copy URL

Twitter E-mail

General

Target

fb383ed47cf47b61dbef2da08e28781eb9cfa7ccb88f9b10a5375fa2e4835f44
Size

4.0MB
MD5

28bd172590738d8a4ca6c881625366ff
SHA1

df79f50ca2d305b5017cf30a40386ca0912b5df2
SHA256

fb383ed47cf47b61dbef2da08e28781eb9cfa7ccb88f9b10a5375fa2e4835f44
SHA512

7112c9f351466f6d75d0ed847354a24e121040f96bfb0c374c3ac4d2fd7bc4c88d5c41353c1a016366c197ef524102eee47a877fe1bb5c0905a581fde3f68099
SSDEEP

98304:d4H6MakeJ1W4DrEvzZecVYmjEtkZbbCeeLpuu:d4afSeZ8ceCdH

Score

N/A

Malware Config

Signatures

Files

fb383ed47cf47b61dbef2da08e28781eb9cfa7ccb88f9b10a5375fa2e4835f44
.exe windows x86

439962f0abdf3e15a4d985738590e170

Code Sign

95:c2:4c:32:02:ca:8d:a1:b5:b6:2b:59:4f:74:62:d6
Certificate

Issuer

POSTALCODE=10305

Not Before

24-11-2022 00:03

Not After

24-11-2023 00:03

Subject

POSTALCODE=10305

e1:4b:e1:bd:57:2a:47:cc:58:57:12:8f:f8:63:bb:19:75:96:cd:fa:dd:64:40:50:e9:b7:52:a3:09:ff:63:95
Signer

Actual PE Digest

e1:4b:e1:bd:57:2a:47:cc:58:57:12:8f:f8:63:bb:19:75:96:cd:fa:dd:64:40:50:e9:b7:52:a3:09:ff:63:95

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10305

17-11-2022 13:16
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
WriteConsoleInputA
EnumDateFormatsA
OpenMutexW
GetConsoleAliasExesLengthW
CopyFileExA
ReadConsoleOutputCharacterW
GetEnvironmentStrings
FreeUserPhysicalPages
QueryDosDeviceA
EnumCalendarInfoExA
GetProcessPriorityBoost
LocalSize
AddConsoleAliasA
CreateFileA
GetMailslotInfo
GetWindowsDirectoryW
GetModuleHandleW
VirtualFree
FindNextVolumeMountPointA
CreateDirectoryExA
GetLogicalDriveStringsW
ReadConsoleInputA
FindNextVolumeMountPointW
OpenWaitableTimerW
GetVersionExA
SearchPathA
RequestWakeupLatency
CallNamedPipeA
GetCurrentDirectoryW
GetDriveTypeA
CreateMailslotA
BuildCommDCBAndTimeoutsA
GetProcAddress
GetModuleHandleA
LocalAlloc
MoveFileWithProgressA
WritePrivateProfileStringA
TerminateThread
GetCommandLineW
FindFirstChangeNotificationW
VerifyVersionInfoA
CancelTimerQueueTimer
CopyFileW
GetHandleInformation
FindResourceA
FormatMessageW
CreateJobObjectW
ReadConsoleOutputAttribute
GetConsoleFontSize
FindFirstVolumeA
GetTickCount
GetACP
GlobalWire
GetTapeParameters
HeapWalk
GetConsoleTitleW
EnumCalendarInfoA
InterlockedIncrement
InterlockedDecrement
GetEnvironmentStringsW
SetCalendarInfoA
MoveFileA
AddAtomW
FreeEnvironmentStringsW
SetConsoleTitleW
SetVolumeMountPointA
VirtualAlloc
SetConsoleActiveScreenBuffer
GetCPInfo
GetProcessIoCounters
GlobalFindAtomA
DeleteFileA
GetVolumeInformationW
EnumSystemCodePagesA
GetBinaryTypeA
LoadLibraryW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetStartupInfoW
HeapAlloc
GetLastError
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetOEMCP
IsValidCodePage
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
ReadFile
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle

user32

GetMessageExtraInfo
GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

439962f0abdf3e15a4d985738590e170

Code Sign

95:c2:4c:32:02:ca:8d:a1:b5:b6:2b:59:4f:74:62:d6Certificate

e1:4b:e1:bd:57:2a:47:cc:58:57:12:8f:f8:63:bb:19:75:96:cd:fa:dd:64:40:50:e9:b7:52:a3:09:ff:63:95Signer

Signature Validations

Verification

17-11-2022 13:16 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 102KB - Virtual size: 102KB

.data Size: 3.9MB - Virtual size: 6.0MB

.rsrc Size: 12KB - Virtual size: 2.4MB

95:c2:4c:32:02:ca:8d:a1:b5:b6:2b:59:4f:74:62:d6
Certificate

e1:4b:e1:bd:57:2a:47:cc:58:57:12:8f:f8:63:bb:19:75:96:cd:fa:dd:64:40:50:e9:b7:52:a3:09:ff:63:95
Signer

17-11-2022 13:16
Valid: false

.text
Size: 102KB - Virtual size: 102KB

.data
Size: 3.9MB - Virtual size: 6.0MB

.rsrc
Size: 12KB - Virtual size: 2.4MB