07670199[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

07670199.exe
Size

4.2MB
MD5

584a08454febc94566aaf7dbe4623306
SHA1

6fed16840beeb70c6f7aa1a19b766277413f2de9
SHA256

6b48dea06097c036cd0ad489663ebd6ef6f2780379d06af80ef553d612aaf4a5
SHA512

6bf812144ffe60fd2de543f08da6aa4ccd496ac8e278a967803f959141ddfc732eeff6cda6d7b9debdbc96eb9e633f7e8a0f457df20a92acb005810f10767b64
SSDEEP

98304:lazGeoP07U6s55sN0EQNLTiJSwlX8i8XkB2lD7LC7RJ:laJo0AbENLUOlMi8XkQl/L2J

Score

1^/10

Malware Config

Signatures

Files

07670199.exe
.exe windows x86

8522dc5d9d6a2a97002c24ca5ed58b85

Code Sign

45:a3:03:1e:42:c2:7e:15:0f:c9:02:6e:d5:30:04:0b
Certificate

Issuer

CN=522910322628070b250c52200b542f1a57031b422732351e332f4620190820022d0b,POSTALCODE=10305,ST=0b1c1115005f5c4e16070b061d170a03165d091002091700+ST=0b1c1115494a5c18101602500b53081d121c021c1b120f07110e12511d161a5003091c030c1053460e4113160e181d130101060d401252070f0f08001312055b0c0b0a070b

Not Before

25/05/2023, 12:59

Not After

24/05/2024, 12:59

Subject

CN=522910322628070b250c52200b542f1a57031b422732351e332f4620190820022d0b,POSTALCODE=10305,ST=0b1c1115005f5c4e16070b061d170a03165d091002091700+ST=0b1c1115494a5c18101602500b53081d121c021c1b120f07110e12511d161a5003091c030c1053460e4113160e181d130101060d401252070f0f08001312055b0c0b0a070b

b1:9b:cb:27:3b:57:ba:69:4e:61:fd:50:91:de:28:89:70:1a:bc:90:c1:5e:0b:e5:5b:fd:61:00:db:46:5d:b1
Signer

Actual PE Digest

b1:9b:cb:27:3b:57:ba:69:4e:61:fd:50:91:de:28:89:70:1a:bc:90:c1:5e:0b:e5:5b:fd:61:00:db:46:5d:b1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesLengthA
EnumCalendarInfoW
InterlockedDecrement
SetComputerNameW
FreeEnvironmentStringsA
MoveFileWithProgressA
GetProcessPriorityBoost
GetModuleHandleW
GetSystemTimeAsFileTime
EnumTimeFormatsA
GetDriveTypeA
GetVolumePathNameW
GlobalAlloc
IsProcessInJob
SizeofResource
WriteConsoleW
lstrcatA
EnumSystemLocalesA
GetPrivateProfileIntW
InterlockedExchange
ConvertThreadToFiber
GetLastError
GetProcAddress
HeapSize
SearchPathA
GetLocalTime
LoadLibraryA
WriteConsoleA
InterlockedExchangeAdd
FindFirstVolumeMountPointW
AddAtomW
SetFileApisToANSI
GetModuleFileNameA
FindNextFileA
GetModuleHandleA
GetCurrentDirectoryA
CompareStringA
SetCalendarInfoA
OpenSemaphoreW
FileTimeToLocalFileTime
GetVolumeNameForVolumeMountPointW
DeleteFileW
GetProfileIntA
FindFirstFileW
WideCharToMultiByte
InterlockedIncrement
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MoveFileA
HeapFree
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointer
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
GetLocaleInfoW
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
LoadLibraryW
CreateFileW

gdi32

GetCharABCWidthsW

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8522dc5d9d6a2a97002c24ca5ed58b85

Code Sign

45:a3:03:1e:42:c2:7e:15:0f:c9:02:6e:d5:30:04:0bCertificate

b1:9b:cb:27:3b:57:ba:69:4e:61:fd:50:91:de:28:89:70:1a:bc:90:c1:5e:0b:e5:5b:fd:61:00:db:46:5d:b1Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 112KB - Virtual size: 112KB

.data Size: 4.0MB - Virtual size: 6.5MB

.rsrc Size: 53KB - Virtual size: 2.5MB

45:a3:03:1e:42:c2:7e:15:0f:c9:02:6e:d5:30:04:0b
Certificate

b1:9b:cb:27:3b:57:ba:69:4e:61:fd:50:91:de:28:89:70:1a:bc:90:c1:5e:0b:e5:5b:fd:61:00:db:46:5d:b1
Signer

.text
Size: 112KB - Virtual size: 112KB

.data
Size: 4.0MB - Virtual size: 6.5MB

.rsrc
Size: 53KB - Virtual size: 2.5MB