04efa711f59a425eb44f146ad399b36f0344423d131d1d61332a4234fe8e7378

Sharing

Copy URL Twitter E-mail

General

Target

04efa711f59a425eb44f146ad399b36f0344423d131d1d61332a4234fe8e7378
Size

4.2MB
MD5

0630cdc7e57ce551be3c94f9ffe916af
SHA1

23c1fb317777fca6a594f5f3274ab83593e325e5
SHA256

04efa711f59a425eb44f146ad399b36f0344423d131d1d61332a4234fe8e7378
SHA512

86ee8df54e5c88d1d241f4c53e4ffa3f97584a430bacacbda8cdff2eb7c227733e09b780005b4a3a3de3d3dce17559c6e8f9b2dda3a9c8158d1162756b75742a
SSDEEP

98304:fRVa4xi7ZBpJj+zkIbBys8LApB2s3NiiJovN:J84xG7Jj+oGBysdB2FiiN

Score

1^/10

Malware Config

Signatures

Files

04efa711f59a425eb44f146ad399b36f0344423d131d1d61332a4234fe8e7378
.exe windows x86

7b4896352eacf26f78ef6e8da79677ff

Code Sign

39:af:49:d3:38:00:6d:c6:b2:22:7f:bd:09:a8:dd:40
Certificate

Issuer

POSTALCODE=10307

Not Before

24/04/2023, 17:30

Not After

23/04/2024, 17:30

Subject

POSTALCODE=10307

fe:7d:44:70:cf:da:35:38:b2:9e:48:8f:1d:bf:da:ee:03:b3:bd:66:75:b7:be:02:b4:0b:c3:4e:9b:ad:61:44
Signer

Actual PE Digest

fe:7d:44:70:cf:da:35:38:b2:9e:48:8f:1d:bf:da:ee:03:b3:bd:66:75:b7:be:02:b4:0b:c3:4e:9b:ad:61:44

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10307

24/04/2023, 18:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFix
CreateMutexW
EnumCalendarInfoA
GetConsoleAliasesLengthW
RtlCaptureContext
GetDriveTypeW
GlobalCompact
InterlockedIncrement
EnumCalendarInfoW
GetCommState
ZombifyActCtx
QueryDosDeviceA
GetNamedPipeHandleStateA
GetEnvironmentStringsW
WaitForSingleObject
SetComputerNameW
GetModuleHandleW
GetTickCount
GetConsoleTitleA
EnumResourceTypesA
GetDriveTypeA
GetProcessTimes
GetVolumePathNameW
GetConsoleCP
GlobalAlloc
SetFileShortNameW
LoadLibraryW
GetConsoleWindow
GetConsoleAliasExesLengthW
GetStringTypeExW
GetFileAttributesA
GetConsoleAliasW
GetFileAttributesW
GetBinaryTypeW
GetOverlappedResult
FindNextVolumeMountPointW
SetTapePosition
EnumSystemLocalesA
GetPrivateProfileIntW
GetLastError
GetProcAddress
CreateJobSet
RemoveDirectoryA
UnhandledExceptionFilter
LocalAlloc
BuildCommDCBAndTimeoutsW
FindFirstVolumeMountPointW
BeginUpdateResourceA
SetThreadIdealProcessor
FindAtomA
GetPrivateProfileStructA
FoldStringA
GetModuleFileNameA
GetModuleHandleA
FreeEnvironmentStringsW
FindNextFileW
EnumDateFormatsW
GetShortPathNameW
GetCPInfoExA
SetCalendarInfoA
SetThreadAffinityMask
TerminateJobObject
QueryDepthSList
MoveFileWithProgressW
DebugBreak
InterlockedPushEntrySList
EnumSystemLocalesW
DeleteFileA
SetFilePointer
CreateFileW
WriteConsoleW
FlushFileBuffers
GetConsoleMode
WideCharToMultiByte
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MoveFileA
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapSize
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
CloseHandle
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
FatalAppExitA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
SetStdHandle

user32

DefDlgProcA
GetMenuBarInfo

shell32

DuplicateIcon

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 869KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b4896352eacf26f78ef6e8da79677ff

Code Sign

39:af:49:d3:38:00:6d:c6:b2:22:7f:bd:09:a8:dd:40Certificate

fe:7d:44:70:cf:da:35:38:b2:9e:48:8f:1d:bf:da:ee:03:b3:bd:66:75:b7:be:02:b4:0b:c3:4e:9b:ad:61:44Signer

Signature Validations

Verification

24/04/2023, 18:04 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 152KB - Virtual size: 151KB

.data Size: 3.9MB - Virtual size: 7.6MB

.rsrc Size: 86KB - Virtual size: 869KB

39:af:49:d3:38:00:6d:c6:b2:22:7f:bd:09:a8:dd:40
Certificate

fe:7d:44:70:cf:da:35:38:b2:9e:48:8f:1d:bf:da:ee:03:b3:bd:66:75:b7:be:02:b4:0b:c3:4e:9b:ad:61:44
Signer

24/04/2023, 18:04
Valid: false

.text
Size: 152KB - Virtual size: 151KB

.data
Size: 3.9MB - Virtual size: 7.6MB

.rsrc
Size: 86KB - Virtual size: 869KB