d2948665400cb5d01a719eb751137b667d9cfd9d23ff07507ad83522f6f88426

Sharing

Copy URL Twitter E-mail

General

Target

d2948665400cb5d01a719eb751137b667d9cfd9d23ff07507ad83522f6f88426
Size

37KB
MD5

908acdfe7aa61c050c3c8c07262aee4e
SHA1

e915f150ebb316f7f15a24c8220685b2a7f05f7e
SHA256

d2948665400cb5d01a719eb751137b667d9cfd9d23ff07507ad83522f6f88426
SHA512

57c335e90e0a88f92156e928dbd3c5a12c5af948f1fe7bf714dfe567ff30b80a106df030614cfab1c8b00f45161dbb6c42715bc02de902be9b9d16c7fd1893af
SSDEEP

768:Sutr8qoXfNWTjToqVfx13tor3b+ul+aAf0YCr9:ltPoPNQjvw3b+uMfwr9

Score

1^/10

Malware Config

Signatures

Files

d2948665400cb5d01a719eb751137b667d9cfd9d23ff07507ad83522f6f88426
.exe windows x64

3ab59e0ee1356d6bbd8965109dc47b6b

Code Sign

6d:73:d1:b6:3d:99:a7:55:bb:1b:71:2d:2c:3f:55:c2
Certificate

Issuer

CN=Andersom Avelino Cesar Paes CA,O=Aiping,C=Aliya

Not Before

29/08/2023, 03:16

Not After

31/12/2029, 16:00

Subject

CN=Raul Elarre Margineanu CA,O=Cl??udio,C=Mats

Extended Key Usages

ExtKeyUsageCodeSigning

fe:4c:89:bf:2a:d1:9c:bc:19:8b:44:58:1f:eb:1c:c1:90:b4:e6:72:ec:58:de:96:ba:ef:76:24:1e:af:5d:ed
Signer

Actual PE Digest

fe:4c:89:bf:2a:d1:9c:bc:19:8b:44:58:1f:eb:1c:c1:90:b4:e6:72:ec:58:de:96:ba:ef:76:24:1e:af:5d:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualProtect

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
memcpy
memmove
memset

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
_c_exit
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
exit
terminate

api-ms-win-crt-heap-l1-1-0

_callnewh
_set_new_mode
free
malloc

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

strcmp

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ab59e0ee1356d6bbd8965109dc47b6b

Code Sign

6d:73:d1:b6:3d:99:a7:55:bb:1b:71:2d:2c:3f:55:c2Certificate

Extended Key Usages

fe:4c:89:bf:2a:d1:9c:bc:19:8b:44:58:1f:eb:1c:c1:90:b4:e6:72:ec:58:de:96:ba:ef:76:24:1e:af:5d:edSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 2KB - Virtual size: 1KB

.00cfg Size: 512B - Virtual size: 56B

.retplne Size: 512B - Virtual size: 140B

.reloc Size: 512B - Virtual size: 96B

6d:73:d1:b6:3d:99:a7:55:bb:1b:71:2d:2c:3f:55:c2
Certificate

fe:4c:89:bf:2a:d1:9c:bc:19:8b:44:58:1f:eb:1c:c1:90:b4:e6:72:ec:58:de:96:ba:ef:76:24:1e:af:5d:ed
Signer

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 2KB - Virtual size: 1KB

.00cfg
Size: 512B - Virtual size: 56B

.retplne
Size: 512B - Virtual size: 140B

.reloc
Size: 512B - Virtual size: 96B