e5f2447cfc8d4c46948d054c6a954cd82a1cb9cc12ee4bd182f71c7d3c2ee942

Resubmissions

31/05/2023, 14:34

230531-rxkg7sga4v 10

31/05/2023, 12:49

230531-p2pavafa87 10

Sharing

Copy URL

Twitter E-mail

General

Target

e5f2447cfc8d4c46948d054c6a954cd82a1cb9cc12ee4bd182f71c7d3c2ee942
Size

4.2MB
MD5

ce1d1ac7a7258bb6365d287f535852bb
SHA1

8d6f60095d0d580470f1d3b8346cc3b5f72b564f
SHA256

e5f2447cfc8d4c46948d054c6a954cd82a1cb9cc12ee4bd182f71c7d3c2ee942
SHA512

5ac40d3c51d57aeaaee8e1725fa3b11cc66c708e826de3d7c9546626b706828c9589a242bdd0901c603dda53811ec03087ecce0877c743cae1da603fc3684d78
SSDEEP

98304:W3eEa4Yo0sQ6JN6ulY3ERiWsgeuupMr4s5fhmp4R+mu9a7SPB:FPCX2iiWtSpLE7g

Score

1^/10

Malware Config

Signatures

Files

e5f2447cfc8d4c46948d054c6a954cd82a1cb9cc12ee4bd182f71c7d3c2ee942
.exe windows x86

ecf9944f3c0ca13331da7daf765c4c3c

Code Sign

80:8b:6d:b7:76:31:9b:0d:97:93:4f:a2:96:e7:c1:78
Certificate

Issuer

CN=522b1f00070a2734475a3201002b1c42301c1b0732151b1d231030330b0713013107,POSTALCODE=10700,ST=0b1c1115005f5c4e1802161701040e1609164f0d1a1f+ST=0b1c1115494a5c141b55031011521200011110175651021a0c0100080654181701000b110407101e081204565401155144530712111a57090e5304000602055b0c0b0a070b

Not Before

31/05/2023, 12:31

Not After

30/05/2024, 12:31

Subject

CN=522b1f00070a2734475a3201002b1c42301c1b0732151b1d231030330b0713013107,POSTALCODE=10700,ST=0b1c1115005f5c4e1802161701040e1609164f0d1a1f+ST=0b1c1115494a5c141b55031011521200011110175651021a0c0100080654181701000b110407101e081204565401155144530712111a57090e5304000602055b0c0b0a070b

64:b4:fe:08:e7:ef:90:54:9c:ea:46:4e:a9:19:40:0f:a1:b4:69:d4:14:7e:ef:00:35:4b:52:3b:73:79:17:7d
Signer

Actual PE Digest

64:b4:fe:08:e7:ef:90:54:9c:ea:46:4e:a9:19:40:0f:a1:b4:69:d4:14:7e:ef:00:35:4b:52:3b:73:79:17:7d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstChangeNotificationW
GetDriveTypeW
GetProfileIntW
GetConsoleAliasExesLengthA
LoadResource
InterlockedIncrement
WaitNamedPipeA
OpenSemaphoreA
FreeEnvironmentStringsA
MoveFileWithProgressA
GetSystemTimeAsFileTime
EnumTimeFormatsA
SetProcessPriorityBoost
GetVolumePathNameW
GetPrivateProfileIntA
GetPrivateProfileStructW
GetSystemPowerStatus
FreeConsole
GetCalendarInfoA
GetFileAttributesW
WriteConsoleW
lstrcatA
GetShortPathNameA
EnumSystemLocalesA
DeleteFiber
GetLastError
GetCurrentDirectoryW
SearchPathW
SetComputerNameA
ResetEvent
LoadLibraryA
WriteConsoleA
GetProcessId
InterlockedExchangeAdd
OpenWaitableTimerW
LocalAlloc
SetCalendarInfoW
FindFirstVolumeMountPointW
SetFileApisToANSI
QueryDosDeviceW
AddAtomA
SetSystemTime
GlobalWire
GetModuleFileNameA
FindNextFileA
CreateIoCompletionPort
GetModuleHandleA
FreeEnvironmentStringsW
CreateMailslotA
EnumDateFormatsW
CompareStringA
TerminateJobObject
FileTimeToLocalFileTime
GetVolumeNameForVolumeMountPointW
EnumCalendarInfoExA
EnumSystemLocalesW
GetProcAddress
GlobalFix
WideCharToMultiByte
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
LCMapStringW
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
ExitProcess
WriteFile
GetModuleFileNameW
SetFilePointer
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
GetLocaleInfoW
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
GetConsoleCP
GetConsoleMode
LoadLibraryW
SetStdHandle
FlushFileBuffers
CreateFileW
CloseHandle

gdi32

GetCharABCWidthsA

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.docal
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

ecf9944f3c0ca13331da7daf765c4c3c

Code Sign

80:8b:6d:b7:76:31:9b:0d:97:93:4f:a2:96:e7:c1:78Certificate

64:b4:fe:08:e7:ef:90:54:9c:ea:46:4e:a9:19:40:0f:a1:b4:69:d4:14:7e:ef:00:35:4b:52:3b:73:79:17:7dSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 118KB - Virtual size: 117KB

.data Size: 4.0MB - Virtual size: 6.5MB

.docal Size: 512B - Virtual size: 5B

.rsrc Size: 45KB - Virtual size: 2.5MB

80:8b:6d:b7:76:31:9b:0d:97:93:4f:a2:96:e7:c1:78
Certificate

64:b4:fe:08:e7:ef:90:54:9c:ea:46:4e:a9:19:40:0f:a1:b4:69:d4:14:7e:ef:00:35:4b:52:3b:73:79:17:7d
Signer

.text
Size: 118KB - Virtual size: 117KB

.data
Size: 4.0MB - Virtual size: 6.5MB

.docal
Size: 512B - Virtual size: 5B

.rsrc
Size: 45KB - Virtual size: 2.5MB