4c8b3659caad796c116fcc4fb0fcf6cafa43a8d21347802f9e196a4ef2c8e763

Sharing

Copy URL Twitter E-mail

General

Target

4c8b3659caad796c116fcc4fb0fcf6cafa43a8d21347802f9e196a4ef2c8e763
Size

4.2MB
MD5

f269709a4775e6fb2ce5e7655434605e
SHA1

2f1510daadc7896ead4dfbb42447c40c9d13f180
SHA256

4c8b3659caad796c116fcc4fb0fcf6cafa43a8d21347802f9e196a4ef2c8e763
SHA512

e89f36cac7f03b8e566dc7a0df4b8b2678a5b2d61ae5a49160903d6b07ecba6b5c7ef4ef6f093bb7f27b2ecd923aecb65bf0e775c618c5f287554a686e6fec25
SSDEEP

98304:rZbN1QKSG/fprUv96lZZXQYmya6OVCHDJDg1:qKS8B5QYmFPg5g

Score

1^/10

Malware Config

Signatures

Files

4c8b3659caad796c116fcc4fb0fcf6cafa43a8d21347802f9e196a4ef2c8e763
.exe windows:5 windows x86 arch:x86

7f076c848aaeff78d08cb13e6f293004

Code Sign

b3:20:a5:21:20:34:69:14:b5:e2:77:f5:df:b3:03:38
Certificate

Issuer

CN=522a29533d3f200e2d1728300c141021081631313626321023042b113f2d26353224,POSTALCODE=10820,ST=0b1c1115005f5c4e140f09101c0411000c1d4f0716+ST=0b1c1115494a5c17161151151d135100034653465007170e1c520b071c040f0f5216050f1244171f0b110e04061211081e0347124308570a1e0c0b19560a055b0c0b0a070b

Not Before

09/12/2023, 22:56

Not After

08/12/2024, 22:56

Subject

CN=522a29533d3f200e2d1728300c141021081631313626321023042b113f2d26353224,POSTALCODE=10820,ST=0b1c1115005f5c4e140f09101c0411000c1d4f0716+ST=0b1c1115494a5c17161151151d135100034653465007170e1c520b071c040f0f5216050f1244171f0b110e04061211081e0347124308570a1e0c0b19560a055b0c0b0a070b

80:c6:6e:02:85:4f:21:7d:9b:b9:27:2c:99:46:7c:f3:6d:24:76:98:a9:fd:64:03:44:43:e1:04:02:98:ac:3d
Signer

Actual PE Digest

80:c6:6e:02:85:4f:21:7d:9b:b9:27:2c:99:46:7c:f3:6d:24:76:98:a9:fd:64:03:44:43:e1:04:02:98:ac:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFix
HeapReAlloc
FindFirstFileW
SetLocaleInfoA
BuildCommDCBAndTimeoutsA
UpdateResourceA
DeleteVolumeMountPointA
SetDefaultCommConfigW
CreateJobObjectW
GetProfileSectionA
WriteConsoleInputA
GetComputerNameW
GetModuleHandleW
LocalFlags
GetWindowsDirectoryA
GetCommandLineA
GetVolumePathNameW
GlobalAlloc
AddRefActCtx
LoadLibraryW
GetLocaleInfoW
ReadConsoleInputA
GetBinaryTypeA
ReadFile
CreateFileW
FindNextVolumeMountPointW
GetStartupInfoW
GetNamedPipeHandleStateW
GetConsoleOutputCP
InterlockedExchange
DeleteFiber
FindFirstFileA
GetCPInfoExW
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
HeapSize
VerLanguageNameA
MoveFileW
IsValidCodePage
WriteConsoleA
OpenWaitableTimerW
GetNumberFormatW
FindNextFileA
GetModuleHandleA
GetProcessShutdownParameters
OpenFileMappingW
GetConsoleCursorInfo
LocalSize
GetVolumeNameForVolumeMountPointW
ExpandEnvironmentStringsW
FlushFileBuffers
WriteConsoleW
SetStdHandle
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
DeleteFileA
HeapSetInformation
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
IsProcessorFeaturePresent
GetACP
GetOEMCP
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
CloseHandle

user32

CharToOemBuffW
CharUpperA

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4.1MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f076c848aaeff78d08cb13e6f293004

Code Sign

b3:20:a5:21:20:34:69:14:b5:e2:77:f5:df:b3:03:38Certificate

80:c6:6e:02:85:4f:21:7d:9b:b9:27:2c:99:46:7c:f3:6d:24:76:98:a9:fd:64:03:44:43:e1:04:02:98:ac:3dSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 133KB - Virtual size: 132KB

.data Size: 4.1MB - Virtual size: 11.4MB

.rsrc Size: 37KB - Virtual size: 36KB

b3:20:a5:21:20:34:69:14:b5:e2:77:f5:df:b3:03:38
Certificate

80:c6:6e:02:85:4f:21:7d:9b:b9:27:2c:99:46:7c:f3:6d:24:76:98:a9:fd:64:03:44:43:e1:04:02:98:ac:3d
Signer

.text
Size: 133KB - Virtual size: 132KB

.data
Size: 4.1MB - Virtual size: 11.4MB

.rsrc
Size: 37KB - Virtual size: 36KB