260c7589714f3a838bbe391033187eb3084bf3552ff4cce5863bd402c2017bd1

Sharing

Copy URL Twitter E-mail

General

Target

260c7589714f3a838bbe391033187eb3084bf3552ff4cce5863bd402c2017bd1
Size

4.1MB
MD5

c218cf952dba5d2ab5c5aedb51a842d2
SHA1

2c35de0e23f5e5dd0706e076d706d06ad4fde0ef
SHA256

260c7589714f3a838bbe391033187eb3084bf3552ff4cce5863bd402c2017bd1
SHA512

599222ccda7b4088b9fe38499af96db364b4cb5c1851ad8c1262f0d2835cad680570bc5bd0e2b3b31a97452dac14151fa4af8008784868af93490ce78ace6d9d
SSDEEP

98304:TghrEZ96obyXz/wWZkP4BO3cSz7iplbE6f3:TdPu/BzOXz7izAk

Score

1^/10

Malware Config

Signatures

Files

260c7589714f3a838bbe391033187eb3084bf3552ff4cce5863bd402c2017bd1
.exe windows x86

3551efe05608342dde7fe9118350806c

Code Sign

81:9f:05:cb:e5:02:59:9a:b2:dd:0f:ec:62:d9:90:52
Certificate

Issuer

CN=522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19,POSTALCODE=10407,ST=0b1c1115005f5c4e1802161701040e1609164f161a0a16+ST=0b1c1115494a5c05125116195f151d00521f0d135111515d03161110070d03151709010f5103081c0b00040b545d06080b0b050e060b08091d5301090612055b0c0b0a070b

Not Before

30/04/2023, 23:36

Not After

29/04/2024, 23:36

Subject

CN=522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19,POSTALCODE=10407,ST=0b1c1115005f5c4e1802161701040e1609164f161a0a16+ST=0b1c1115494a5c05125116195f151d00521f0d135111515d03161110070d03151709010f5103081c0b00040b545d06080b0b050e060b08091d5301090612055b0c0b0a070b

de:40:c7:49:89:31:40:bd:7b:5b:5e:6d:4d:a1:55:4b:a8:d1:ce:3f:aa:fd:a1:55:c7:bb:10:20:19:fb:c3:b4
Signer

Actual PE Digest

de:40:c7:49:89:31:40:bd:7b:5b:5e:6d:4d:a1:55:4b:a8:d1:ce:3f:aa:fd:a1:55:c7:bb:10:20:19:fb:c3:b4

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19,POSTALCODE=10407,ST=0b1c1115005f5c4e1802161701040e1609164f161a0a16+ST=0b1c1115494a5c05125116195f151d00521f0d135111515d03161110070d03151709010f5103081c0b00040b545d06080b0b050e060b08091d5301090612055b0c0b0a070b

03/05/2023, 12:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoA
GetDriveTypeW
BuildCommDCBAndTimeoutsA
GetCommState
InterlockedDecrement
MoveFileWithProgressA
GetModuleHandleW
GetTickCount
LoadLibraryW
GetConsoleAliasExesLengthW
InterlockedPopEntrySList
GlobalFlags
GetFileAttributesW
lstrcatA
GetOverlappedResult
GetVolumePathNameA
FindNextVolumeMountPointW
SetTapePosition
GetStringTypeExA
EnumSystemLocalesA
GetPrivateProfileIntW
GlobalUnfix
GetProfileIntA
ReleaseActCtx
GetStdHandle
GetProcAddress
BeginUpdateResourceW
SetComputerNameA
VerLanguageNameW
WriteConsoleA
UnhandledExceptionFilter
GetConsoleScreenBufferInfo
LocalAlloc
SetCalendarInfoW
RemoveDirectoryW
SetThreadIdealProcessor
GetModuleFileNameA
FindNextFileA
EraseTape
CreateMutexA
FreeEnvironmentStringsW
GetStringTypeW
GetConsoleTitleW
EnumDateFormatsW
SetFileShortNameA
FindAtomW
GetVolumeNameForVolumeMountPointW
DeleteFileW
WideCharToMultiByte
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
HeapCreate
ExitProcess
WriteFile
GetModuleFileNameW
SetFilePointer
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CloseHandle
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoW
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleW
CreateFileW
DeleteFileA

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cix
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3551efe05608342dde7fe9118350806c

Code Sign

81:9f:05:cb:e5:02:59:9a:b2:dd:0f:ec:62:d9:90:52Certificate

de:40:c7:49:89:31:40:bd:7b:5b:5e:6d:4d:a1:55:4b:a8:d1:ce:3f:aa:fd:a1:55:c7:bb:10:20:19:fb:c3:b4Signer

Signature Validations

Verification

03/05/2023, 12:04 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 86KB - Virtual size: 85KB

.data Size: 4.0MB - Virtual size: 7.6MB

.cix Size: 6KB - Virtual size: 5KB

.rsrc Size: 65KB - Virtual size: 1.4MB

81:9f:05:cb:e5:02:59:9a:b2:dd:0f:ec:62:d9:90:52
Certificate

de:40:c7:49:89:31:40:bd:7b:5b:5e:6d:4d:a1:55:4b:a8:d1:ce:3f:aa:fd:a1:55:c7:bb:10:20:19:fb:c3:b4
Signer

03/05/2023, 12:04
Valid: false

.text
Size: 86KB - Virtual size: 85KB

.data
Size: 4.0MB - Virtual size: 7.6MB

.cix
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 65KB - Virtual size: 1.4MB