9b843f7ab358e4639b48c2736e90459adb7dd43a7c0a3eecbeed54797db18d31

Sharing

Copy URL Twitter E-mail

General

Target

9b843f7ab358e4639b48c2736e90459adb7dd43a7c0a3eecbeed54797db18d31
Size

4.2MB
MD5

7b1eb94bee755d08daaef6effc1cd71c
SHA1

7f92a4a3110c39d5eafd8c9d0b1d53d70728e535
SHA256

9b843f7ab358e4639b48c2736e90459adb7dd43a7c0a3eecbeed54797db18d31
SHA512

2d2f73d2b6cb20136aa0ce67dbd40e533c71f9dba86fbf19cdb3a58ab4204c5ade3fd23845b5726e20793e7c4b1083bc6b60819730ab5845031502518d51f578
SSDEEP

98304:fRVa4xi7ZBpJj+zkIbBys8LApB2s3NiiJovo:J84xG7Jj+oGBysdB2Fiio

Score

1^/10

Malware Config

Signatures

Files

9b843f7ab358e4639b48c2736e90459adb7dd43a7c0a3eecbeed54797db18d31
.exe windows x86

7b4896352eacf26f78ef6e8da79677ff

Code Sign

8d:62:01:42:7b:f6:24:66:8b:2a:8f:fb:1e:2b:69:63
Certificate

Issuer

POSTALCODE=10305

Not Before

24/04/2023, 17:45

Not After

23/04/2024, 17:45

Subject

POSTALCODE=10305

fe:7d:44:70:cf:da:35:38:b2:9e:48:8f:1d:bf:da:ee:03:b3:bd:66:75:b7:be:02:b4:0b:c3:4e:9b:ad:61:44
Signer

Actual PE Digest

fe:7d:44:70:cf:da:35:38:b2:9e:48:8f:1d:bf:da:ee:03:b3:bd:66:75:b7:be:02:b4:0b:c3:4e:9b:ad:61:44

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

POSTALCODE=10305

24/04/2023, 07:41
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFix
CreateMutexW
EnumCalendarInfoA
GetConsoleAliasesLengthW
RtlCaptureContext
GetDriveTypeW
GlobalCompact
InterlockedIncrement
EnumCalendarInfoW
GetCommState
ZombifyActCtx
QueryDosDeviceA
GetNamedPipeHandleStateA
GetEnvironmentStringsW
WaitForSingleObject
SetComputerNameW
GetModuleHandleW
GetTickCount
GetConsoleTitleA
EnumResourceTypesA
GetDriveTypeA
GetProcessTimes
GetVolumePathNameW
GetConsoleCP
GlobalAlloc
SetFileShortNameW
LoadLibraryW
GetConsoleWindow
GetConsoleAliasExesLengthW
GetStringTypeExW
GetFileAttributesA
GetConsoleAliasW
GetFileAttributesW
GetBinaryTypeW
GetOverlappedResult
FindNextVolumeMountPointW
SetTapePosition
EnumSystemLocalesA
GetPrivateProfileIntW
GetLastError
GetProcAddress
CreateJobSet
RemoveDirectoryA
UnhandledExceptionFilter
LocalAlloc
BuildCommDCBAndTimeoutsW
FindFirstVolumeMountPointW
BeginUpdateResourceA
SetThreadIdealProcessor
FindAtomA
GetPrivateProfileStructA
FoldStringA
GetModuleFileNameA
GetModuleHandleA
FreeEnvironmentStringsW
FindNextFileW
EnumDateFormatsW
GetShortPathNameW
GetCPInfoExA
SetCalendarInfoA
SetThreadAffinityMask
TerminateJobObject
QueryDepthSList
MoveFileWithProgressW
DebugBreak
InterlockedPushEntrySList
EnumSystemLocalesW
DeleteFileA
SetFilePointer
CreateFileW
WriteConsoleW
FlushFileBuffers
GetConsoleMode
WideCharToMultiByte
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MoveFileA
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapSize
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
CloseHandle
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
FatalAppExitA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
SetStdHandle

user32

DefDlgProcA
GetMenuBarInfo

shell32

DuplicateIcon

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 869KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b4896352eacf26f78ef6e8da79677ff

Code Sign

8d:62:01:42:7b:f6:24:66:8b:2a:8f:fb:1e:2b:69:63Certificate

fe:7d:44:70:cf:da:35:38:b2:9e:48:8f:1d:bf:da:ee:03:b3:bd:66:75:b7:be:02:b4:0b:c3:4e:9b:ad:61:44Signer

Signature Validations

Verification

24/04/2023, 07:41 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 152KB - Virtual size: 151KB

.data Size: 3.9MB - Virtual size: 7.6MB

.rsrc Size: 86KB - Virtual size: 869KB

8d:62:01:42:7b:f6:24:66:8b:2a:8f:fb:1e:2b:69:63
Certificate

fe:7d:44:70:cf:da:35:38:b2:9e:48:8f:1d:bf:da:ee:03:b3:bd:66:75:b7:be:02:b4:0b:c3:4e:9b:ad:61:44
Signer

24/04/2023, 07:41
Valid: false

.text
Size: 152KB - Virtual size: 151KB

.data
Size: 3.9MB - Virtual size: 7.6MB

.rsrc
Size: 86KB - Virtual size: 869KB