829c2e48f57bfb06a346c4c2cf432bea35e98ac3a102877bb057b590b8322ee7

Sharing

Copy URL Twitter E-mail

General

Target

829c2e48f57bfb06a346c4c2cf432bea35e98ac3a102877bb057b590b8322ee7
Size

4.2MB
MD5

e4c53f9695620849254bd1f695a7dbb1
SHA1

1705a832a7ecdd3a566a60c39051b36fe13cc645
SHA256

829c2e48f57bfb06a346c4c2cf432bea35e98ac3a102877bb057b590b8322ee7
SHA512

8fdf0d8b8dcd831f1540229d5c389ef6acf234f6aeba99de23c55516dd9d67f324322330f788d099fc0d286714506df9670a424f6a45b7ca736a00b1087b8d10
SSDEEP

98304:/f8oS9gM8swdP3Ff94refPcUaVO7VDHQ7y8DStXNMeUvCV9:M0mw9Fl4ITaZ70tXNgvCV9

Score

1^/10

Malware Config

Signatures

Files

829c2e48f57bfb06a346c4c2cf432bea35e98ac3a102877bb057b590b8322ee7
.exe windows x86

bb27c4958c76443fcfe46f9765d838a2

Code Sign

89:9d:34:c2:4d:9a:8a:5b:e5:8b:a4:28:fa:04:ea:50
Certificate

Issuer

CN=52251f5711571c0f0d0d243a002f3139341c263d07362111531206573b1100053331,POSTALCODE=10305,ST=0b1c1115005f5c4e1802161701040e1609164f14064b0c1a02+ST=0b1c1115494a5c0e46050a0d120f1645561d521a15010e0a07500703161643105207180c51000c010f1413070a07025344080a0019190c561800501c570a055b0c0b0a070b

Not Before

21/05/2023, 00:43

Not After

20/05/2024, 00:43

Subject

CN=52251f5711571c0f0d0d243a002f3139341c263d07362111531206573b1100053331,POSTALCODE=10305,ST=0b1c1115005f5c4e1802161701040e1609164f14064b0c1a02+ST=0b1c1115494a5c0e46050a0d120f1645561d521a15010e0a07500703161643105207180c51000c010f1413070a07025344080a0019190c561800501c570a055b0c0b0a070b

76:96:d8:d9:a7:32:d7:bc:e1:de:fa:7d:fc:2e:23:50:7c:5c:f7:f2:5b:0a:41:22:38:13:b1:32:a9:f9:f3:ff
Signer

Actual PE Digest

76:96:d8:d9:a7:32:d7:bc:e1:de:fa:7d:fc:2e:23:50:7c:5c:f7:f2:5b:0a:41:22:38:13:b1:32:a9:f9:f3:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDefaultCommConfigW
GetCommState
InterlockedDecrement
CancelWaitableTimer
InterlockedCompareExchange
AddConsoleAliasW
SetEvent
GetProcessPriorityBoost
GetModuleHandleW
GetConsoleTitleA
ReadConsoleW
GetWindowsDirectoryA
InitializeCriticalSection
GlobalAlloc
FatalAppExitW
IsBadCodePtr
GetSystemWindowsDirectoryA
GetVersionExW
GlobalFlags
DnsHostnameToComputerNameW
FindNextVolumeW
GetConsoleAliasW
ReplaceFileW
IsDBCSLeadByte
GetModuleFileNameW
CreateActCtxA
GetTempPathW
GetLocaleInfoA
CreateJobObjectA
GetLogicalDriveStringsA
OpenMutexW
GetLastError
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
AttachConsole
VirtualAlloc
SetComputerNameA
GetTempFileNameA
LoadLibraryA
CreateFileMappingW
OpenEventA
FindAtomA
GetTapeParameters
FindFirstVolumeMountPointA
FindFirstChangeNotificationA
GetConsoleTitleW
GetConsoleCursorInfo
WaitForDebugEvent
ScrollConsoleScreenBufferA
AddConsoleAliasA
EnumCalendarInfoExA
EnumSystemLocalesW
GetConsoleAliasesLengthW
lstrlenA
SetThreadContext
GetDateFormatW
SetProcessAffinityMask
GetStringTypeExA
WideCharToMultiByte
InterlockedIncrement
InterlockedExchange
MultiByteToWideChar
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
HeapCreate
VirtualFree
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
GetModuleHandleA

gdi32

GetCharABCWidthsFloatW
GetCharABCWidthsI
EnumFontsW
GetCharWidthI
GetCharWidthA

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb27c4958c76443fcfe46f9765d838a2

Code Sign

89:9d:34:c2:4d:9a:8a:5b:e5:8b:a4:28:fa:04:ea:50Certificate

76:96:d8:d9:a7:32:d7:bc:e1:de:fa:7d:fc:2e:23:50:7c:5c:f7:f2:5b:0a:41:22:38:13:b1:32:a9:f9:f3:ffSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.data Size: 8KB - Virtual size: 2.3MB

.rsrc Size: 74KB - Virtual size: 2.7MB

.reloc Size: 23KB - Virtual size: 23KB

89:9d:34:c2:4d:9a:8a:5b:e5:8b:a4:28:fa:04:ea:50
Certificate

76:96:d8:d9:a7:32:d7:bc:e1:de:fa:7d:fc:2e:23:50:7c:5c:f7:f2:5b:0a:41:22:38:13:b1:32:a9:f9:f3:ff
Signer

.text
Size: 4.1MB - Virtual size: 4.1MB

.data
Size: 8KB - Virtual size: 2.3MB

.rsrc
Size: 74KB - Virtual size: 2.7MB

.reloc
Size: 23KB - Virtual size: 23KB