beefd9dafabc069ed47dd45416879ab7e6662f066ffb43602bc38f0805113d21

Sharing

Copy URL

Twitter E-mail

General

Target

beefd9dafabc069ed47dd45416879ab7e6662f066ffb43602bc38f0805113d21
Size

4.2MB
MD5

ab5a230546ff552b319999c0ef967291
SHA1

8b966291b9d8ef5a6ac526dd7800e4982009babe
SHA256

beefd9dafabc069ed47dd45416879ab7e6662f066ffb43602bc38f0805113d21
SHA512

0caf5c29aed26d8bfc274523e5cb3506e3cb2d23bfd27f964134d8356f4cd286bf25382663bc692ec07dd0108d4d8d2d0e7445c35377f06e150373aa5829e173
SSDEEP

98304:3GLBeWgRmDIdsGaAhVpwIzjSVZL0bY3DPTJjE0nsA:2LBeSVGaAjGVqY3DbO0sA

Score

1^/10

Malware Config

Signatures

Files

beefd9dafabc069ed47dd45416879ab7e6662f066ffb43602bc38f0805113d21
.exe windows x86

ee2cc8de8216a98a04e64dc8ea701849

Code Sign

b3:48:81:d7:82:6c:a2:17:17:c1:0d:35:d5:0b:d8:b2
Certificate

Issuer

CN=52263d520931235736570a2402571c4021122b211102515e242235323619033a0b11,POSTALCODE=10407,ST=0b1c1115005f5c4e1802161701040e1609164f1c0010+ST=0b1c1115494a5c5305080e17100e0340021d1116090d510a0d0c455712130f510c06110f020b0a100346090b065b0e06410b06530c151c1b191457400b12055b0c0b0a070b

Not Before

13-05-2023 03:02

Not After

12-05-2024 03:02

Subject

CN=52263d520931235736570a2402571c4021122b211102515e242235323619033a0b11,POSTALCODE=10407,ST=0b1c1115005f5c4e1802161701040e1609164f1c0010+ST=0b1c1115494a5c5305080e17100e0340021d1116090d510a0d0c455712130f510c06110f020b0a100346090b065b0e06410b06530c151c1b191457400b12055b0c0b0a070b

39:ed:83:75:0b:2d:da:72:58:73:e8:74:7c:ef:a8:68:1e:4f:9d:31:b0:d0:be:ec:0a:61:f8:14:4b:41:23:49
Signer

Actual PE Digest

39:ed:83:75:0b:2d:da:72:58:73:e8:74:7c:ef:a8:68:1e:4f:9d:31:b0:d0:be:ec:0a:61:f8:14:4b:41:23:49

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=52263d520931235736570a2402571c4021122b211102515e242235323619033a0b11,POSTALCODE=10407,ST=0b1c1115005f5c4e1802161701040e1609164f1c0010+ST=0b1c1115494a5c5305080e17100e0340021d1116090d510a0d0c455712130f510c06110f020b0a100346090b065b0e06410b06530c151c1b191457400b12055b0c0b0a070b

11-05-2023 10:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringW
WaitForSingleObject
SetConsoleScreenBufferSize
CancelWaitableTimer
AddConsoleAliasW
GetProcessPriorityBoost
GetModuleHandleW
EnumCalendarInfoExW
GetConsoleAliasesA
GetConsoleAliasesLengthA
ReadConsoleW
EnumTimeFormatsW
CreateActCtxW
GetCalendarInfoA
GetSystemWindowsDirectoryA
SetConsoleCP
HeapCreate
DnsHostnameToComputerNameW
GetConsoleAliasW
GetModuleFileNameW
GetConsoleFontSize
lstrlenW
ReplaceFileA
GlobalUnlock
EnumSystemLocalesA
GetConsoleAliasesW
GetLastError
GetProcAddress
VirtualAlloc
SetComputerNameA
GetTempFileNameA
LoadLibraryA
WriteConsoleA
InterlockedExchangeAdd
LocalAlloc
IsSystemResumeAutomatic
GetNumberFormatW
RemoveDirectoryW
BeginUpdateResourceA
QueryDosDeviceW
AddAtomA
FindAtomA
FindFirstVolumeMountPointA
EnumDateFormatsA
GetModuleHandleA
GetConsoleTitleW
GetConsoleCursorInfo
OpenEventW
GetShortPathNameW
GetDiskFreeSpaceExW
GetWindowsDirectoryW
DeleteTimerQueueTimer
AddConsoleAliasA
FindNextVolumeA
CreateFileA
CloseHandle
WriteConsoleW
GetConsoleOutputCP
SetStdHandle
ReadConsoleA
GetDefaultCommConfigW
WriteProfileSectionA
SetProcessAffinityMask
FlushFileBuffers
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
MultiByteToWideChar
GetStartupInfoW
RaiseException
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
HeapReAlloc
ExitProcess
WriteFile
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW

user32

GetParent
ToAsciiEx
GetClassInfoExA
ChangeMenuA
GetWindowLongA
CreateAcceleratorTableW
GetSysColorBrush

gdi32

GetCharWidthA
SetColorAdjustment
GetCharABCWidthsFloatW

winhttp

WinHttpOpen

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 31.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee2cc8de8216a98a04e64dc8ea701849

Code Sign

b3:48:81:d7:82:6c:a2:17:17:c1:0d:35:d5:0b:d8:b2Certificate

39:ed:83:75:0b:2d:da:72:58:73:e8:74:7c:ef:a8:68:1e:4f:9d:31:b0:d0:be:ec:0a:61:f8:14:4b:41:23:49Signer

Signature Validations

Verification

11-05-2023 10:04 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winhttp

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.data Size: 7KB - Virtual size: 31.1MB

.rsrc Size: 76KB - Virtual size: 76KB

.reloc Size: 40KB - Virtual size: 40KB

b3:48:81:d7:82:6c:a2:17:17:c1:0d:35:d5:0b:d8:b2
Certificate

39:ed:83:75:0b:2d:da:72:58:73:e8:74:7c:ef:a8:68:1e:4f:9d:31:b0:d0:be:ec:0a:61:f8:14:4b:41:23:49
Signer

11-05-2023 10:04
Valid: false

.text
Size: 4.1MB - Virtual size: 4.1MB

.data
Size: 7KB - Virtual size: 31.1MB

.rsrc
Size: 76KB - Virtual size: 76KB

.reloc
Size: 40KB - Virtual size: 40KB