59beb5a53805e06189b70e684c71ea5605dafc772907f0745d7e0e5cc96950df

Sharing

Copy URL Twitter E-mail

General

Target

59beb5a53805e06189b70e684c71ea5605dafc772907f0745d7e0e5cc96950df
Size

4.1MB
MD5

36cc83f4d2fada02052b1a4a01aec54f
SHA1

4e0def50d85536e877096a9cddbea1991c714760
SHA256

59beb5a53805e06189b70e684c71ea5605dafc772907f0745d7e0e5cc96950df
SHA512

accbd7f9ed442112e265a377d3300d12470e4ad1c4178c699ebb5b1f3e052cd7db2a60fd1fb56588f78f621d40b79055ab90afb8df4d62a1aa281f44ac0f43fb
SSDEEP

98304:QGk1efVZwgT36jHI0vJtFIaxMxEn9xLKiYtHGjg2gj4r:QGKetZwuhyqEnYHwC4r

Score

1^/10

Malware Config

Signatures

Files

59beb5a53805e06189b70e684c71ea5605dafc772907f0745d7e0e5cc96950df
.exe windows x86

2821f07e04708b885221a29f6cc88220

Code Sign

33:2c:60:d1:fb:e2:dc:9f:63:b7:92:da:99:a0:cc:ae
Certificate

Issuer

POSTALCODE=10305

Not Before

23/04/2023, 14:23

Not After

22/04/2024, 14:23

Subject

POSTALCODE=10305

b4:7e:de:af:31:0f:a4:22:a1:2b:41:70:6a:cd:14:b5:d0:98:af:8a:3b:d2:d8:07:3b:ef:be:ee:f7:81:a0:c3
Signer

Actual PE Digest

b4:7e:de:af:31:0f:a4:22:a1:2b:41:70:6a:cd:14:b5:d0:98:af:8a:3b:d2:d8:07:3b:ef:be:ee:f7:81:a0:c3

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10305

23/04/2023, 10:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
EnumCalendarInfoExW
GetConsoleAliasesLengthA
GetNumberFormatA
GetWindowsDirectoryA
EnumTimeFormatsA
GetDateFormatA
TzSpecificLocalTimeToSystemTime
EnumResourceTypesA
TlsSetValue
FindResourceExA
GlobalAlloc
LoadLibraryW
GetCalendarInfoA
GetConsoleAliasW
GlobalUnfix
GetCPInfoExW
GetCurrentDirectoryW
SetLastError
GetProcAddress
VirtualAlloc
HeapSize
GetProcessPriorityBoost
GetConsoleDisplayMode
GetDiskFreeSpaceW
SetThreadPriorityBoost
WriteConsoleA
InterlockedExchangeAdd
BeginUpdateResourceA
WaitForMultipleObjects
GetDefaultCommConfigA
GetConsoleTitleW
VirtualProtect
TlsAlloc
AddConsoleAliasA
DebugBreak
FindNextVolumeA
GetModuleHandleA
WriteProfileSectionA
lstrlenA
MultiByteToWideChar
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsFree
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

GetWindowLongW
GetSysColorBrush
SetCaretPos
RegisterClassA
CharLowerBuffW

gdi32

GetColorAdjustment
GetCharWidthW

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 39.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2821f07e04708b885221a29f6cc88220

Code Sign

33:2c:60:d1:fb:e2:dc:9f:63:b7:92:da:99:a0:cc:aeCertificate

b4:7e:de:af:31:0f:a4:22:a1:2b:41:70:6a:cd:14:b5:d0:98:af:8a:3b:d2:d8:07:3b:ef:be:ee:f7:81:a0:c3Signer

Signature Validations

Verification

23/04/2023, 10:57 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.data Size: 14KB - Virtual size: 39.4MB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 34KB - Virtual size: 33KB

33:2c:60:d1:fb:e2:dc:9f:63:b7:92:da:99:a0:cc:ae
Certificate

b4:7e:de:af:31:0f:a4:22:a1:2b:41:70:6a:cd:14:b5:d0:98:af:8a:3b:d2:d8:07:3b:ef:be:ee:f7:81:a0:c3
Signer

23/04/2023, 10:57
Valid: false

.text
Size: 4.0MB - Virtual size: 4.0MB

.data
Size: 14KB - Virtual size: 39.4MB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 34KB - Virtual size: 33KB