d604eca0ca126e745a31998acc8340115f4ca82f0d7d5f74761c39864acfbc56

Sharing

Copy URL

Twitter E-mail

General

Target

d604eca0ca126e745a31998acc8340115f4ca82f0d7d5f74761c39864acfbc56
Size

4.0MB
MD5

6c3bb85d8a6a45ceefda1f45c47d518d
SHA1

62831a17b4c7c5c3d740f8eee23efc1f7f4edf6a
SHA256

d604eca0ca126e745a31998acc8340115f4ca82f0d7d5f74761c39864acfbc56
SHA512

ed51b3590cd936564d8a7d6c574330d379c782d17238008b7187f4489739a21ce81915d59ba7173ea2e8d202bdeb533a0ad736e65a8cf40872404c0fd0b12b94
SSDEEP

98304:Pcqr6k/yug5DoF/HgoKhx2o4EeXyyFvXJfN0oSJOafMqR1UmlY:URnClFcsobHyFvXJf34tkqR1U3

Score

N/A

Malware Config

Signatures

Files

d604eca0ca126e745a31998acc8340115f4ca82f0d7d5f74761c39864acfbc56
.exe windows x86

9e0c0a8bbd1c3c9c8f9256662a922565

Code Sign

2f:ed:7e:c4:65:79:db:a6:3e:63:c4:5e:0e:7d:28:c5
Certificate

Issuer

POSTALCODE=10407

Not Before

24-11-2022 10:37

Not After

24-11-2023 10:37

Subject

POSTALCODE=10407

61:18:11:01:85:4b:e0:a1:e4:24:ea:44:cd:c6:2b:40:6e:75:db:fa:52:c9:92:a3:db:b6:11:80:76:a0:90:1e
Signer

Actual PE Digest

61:18:11:01:85:4b:e0:a1:e4:24:ea:44:cd:c6:2b:40:6e:75:db:fa:52:c9:92:a3:db:b6:11:80:76:a0:90:1e

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10407

17-11-2022 13:18
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputA
EnumDateFormatsA
OpenMutexW
GetConsoleAliasExesLengthW
CopyFileExA
ReadConsoleOutputCharacterA
GetEnvironmentStrings
FreeUserPhysicalPages
QueryDosDeviceA
EnumCalendarInfoExA
GetProcessPriorityBoost
LocalSize
AddConsoleAliasA
CreateFileA
GetMailslotInfo
GetWindowsDirectoryW
GetModuleHandleW
VirtualFree
CreateDirectoryExA
GetLogicalDriveStringsW
ReadConsoleInputA
FindNextVolumeMountPointW
OpenWaitableTimerW
GetVersionExA
SearchPathA
RequestWakeupLatency
CallNamedPipeA
GetCurrentDirectoryW
GetDriveTypeA
CreateMailslotW
BuildCommDCBAndTimeoutsA
GetProcAddress
GetModuleHandleA
FindNextFileA
GetVolumeInformationW
TerminateThread
GetCommandLineW
FindFirstChangeNotificationW
VerifyVersionInfoA
CancelTimerQueueTimer
FindFirstVolumeA
GlobalFlags
GetTickCount
GetACP
GlobalWire
GetTapeParameters
HeapWalk
GetConsoleTitleW
EnumCalendarInfoA
InterlockedIncrement
InterlockedDecrement
GetNamedPipeHandleStateW
SetCalendarInfoA
MoveFileA
AddAtomW
FreeEnvironmentStringsW
SetConsoleTitleW
SetVolumeMountPointA
VirtualAlloc
SetConsoleActiveScreenBuffer
GetCPInfo
GetProcessIoCounters
LoadLibraryA
GlobalFindAtomA
LocalAlloc
EnumSystemCodePagesA
LoadLibraryW
MoveFileWithProgressA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetStartupInfoW
HeapAlloc
GetLastError
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
GetOEMCP
IsValidCodePage
HeapSize
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
ReadFile
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
DeleteFileA

user32

GetMessageExtraInfo
GetComboBoxInfo

gdi32

GetBoundsRect

advapi32

SetThreadToken

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e0c0a8bbd1c3c9c8f9256662a922565

Code Sign

2f:ed:7e:c4:65:79:db:a6:3e:63:c4:5e:0e:7d:28:c5Certificate

61:18:11:01:85:4b:e0:a1:e4:24:ea:44:cd:c6:2b:40:6e:75:db:fa:52:c9:92:a3:db:b6:11:80:76:a0:90:1eSigner

Signature Validations

Verification

17-11-2022 13:18 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 102KB - Virtual size: 101KB

.data Size: 3.9MB - Virtual size: 6.0MB

.rsrc Size: 12KB - Virtual size: 2.4MB

2f:ed:7e:c4:65:79:db:a6:3e:63:c4:5e:0e:7d:28:c5
Certificate

61:18:11:01:85:4b:e0:a1:e4:24:ea:44:cd:c6:2b:40:6e:75:db:fa:52:c9:92:a3:db:b6:11:80:76:a0:90:1e
Signer

17-11-2022 13:18
Valid: false

.text
Size: 102KB - Virtual size: 101KB

.data
Size: 3.9MB - Virtual size: 6.0MB

.rsrc
Size: 12KB - Virtual size: 2.4MB