1b42e0448e94173a0a6d97f51b11dd1b

Sharing

Copy URL Twitter E-mail

General

Target

1b42e0448e94173a0a6d97f51b11dd1b
Size

4.4MB
MD5

1b42e0448e94173a0a6d97f51b11dd1b
SHA1

e1abae5f552b200d5645a9073073506f98fc9816
SHA256

b4073a5b4ad0cf89b19ed57a117a6040a757974c5b80541d7c147dd3f7d1de56
SHA512

897ec2e26f2264f3067cf6918585087684c40e0c40a59e30a58ffebb96f4f5fda435e792e716c3185bd7d6f1eb80db5685e558f4ae2d8148fba2726897842d7f
SSDEEP

98304:UJpqKKoWQA9mP4FGcEwdOj4XG/W4SFMwv8vSUdJeB:oqtoW19mu1EwdIl/W40Mwv8BdJeB

Score

1^/10

Malware Config

Signatures

Files

1b42e0448e94173a0a6d97f51b11dd1b
.exe windows:5 windows x86 arch:x86

f1287ea8340d83d7c6e292a6b7d8dbf5

Code Sign

ca:8d:63:cf:4d:1e:0c:b9:9a:2f:99:1b:2c:08:a1:b2
Certificate

Issuer

POSTALCODE=10188

Not Before

21/07/2021, 04:37

Not After

21/07/2022, 04:37

Subject

POSTALCODE=10188

6f:bf:c4:1f:77:d0:92:31:49:44:f5:c6:ba:6b:61:8a:34:74:ac:8b:03:d9:04:91:2b:65:ed:8e:58:bb:1e:a9
Signer

Actual PE Digest

6f:bf:c4:1f:77:d0:92:31:49:44:f5:c6:ba:6b:61:8a:34:74:ac:8b:03:d9:04:91:2b:65:ed:8e:58:bb:1e:a9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
CreateTapePartition
GetLongPathNameA
GetUserDefaultLangID
AddRefActCtx
GetCPInfoExW
WriteConsoleInputA
ReadConsoleInputW
GetConsoleAliasW
SetCommTimeouts
SetConsoleCP
VerifyVersionInfoA
WaitNamedPipeA
CreateMutexA
WriteConsoleW
GetLastError
CreateFileW
WritePrivateProfileSectionA
GetPrivateProfileSectionA
EnumDateFormatsExA
SetStdHandle
LoadLibraryA
IsDebuggerPresent
FindFirstVolumeW
ReadFile
BuildCommDCBW
FindActCtxSectionStringA
VerLanguageNameW
SetFileApisToANSI
WriteProcessMemory
RequestWakeupLatency
ResetEvent
Sleep
EndUpdateResourceW
GetCPInfo
SetConsoleCtrlHandler
EnumDateFormatsA
GenerateConsoleCtrlEvent
GetCurrentConsoleFont
AttachConsole
GetConsoleAliasesLengthW
ReadConsoleA
ZombifyActCtx
ReadConsoleOutputW
GetSystemWindowsDirectoryA
GetStringTypeW
BuildCommDCBAndTimeoutsA
HeapAlloc
HeapLock
GetAtomNameW
HeapReAlloc
HeapCompact
GetGeoInfoA
GetCurrentProcess
GetProcAddress
GetModuleHandleA
CreateThread
GetVersionExA
GetACP
ReleaseMutex
WaitForSingleObject
GetSystemPowerStatus
WriteConsoleOutputCharacterA
LocalAlloc
GetMailslotInfo
SetEnvironmentVariableW
GetFileAttributesExW
GetComputerNameW
CommConfigDialogA
GetConsoleWindow
PostQueuedCompletionStatus
AreFileApisANSI
GetStringTypeA
GetDiskFreeSpaceW
SetConsoleTitleA
InitializeSListHead
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
RtlUnwind
GetModuleHandleW
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
HeapFree
TerminateProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
VirtualFree
VirtualAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetOEMCP
IsValidCodePage
GetLocaleInfoA
MultiByteToWideChar
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle

advapi32

AdjustTokenGroups

Exports

Exports

@GetSecondVice@0

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1287ea8340d83d7c6e292a6b7d8dbf5

Code Sign

ca:8d:63:cf:4d:1e:0c:b9:9a:2f:99:1b:2c:08:a1:b2Certificate

6f:bf:c4:1f:77:d0:92:31:49:44:f5:c6:ba:6b:61:8a:34:74:ac:8b:03:d9:04:91:2b:65:ed:8e:58:bb:1e:a9Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.data Size: 18KB - Virtual size: 4.4MB

.rsrc Size: 104KB - Virtual size: 556KB

ca:8d:63:cf:4d:1e:0c:b9:9a:2f:99:1b:2c:08:a1:b2
Certificate

6f:bf:c4:1f:77:d0:92:31:49:44:f5:c6:ba:6b:61:8a:34:74:ac:8b:03:d9:04:91:2b:65:ed:8e:58:bb:1e:a9
Signer

.text
Size: 4.3MB - Virtual size: 4.3MB

.data
Size: 18KB - Virtual size: 4.4MB

.rsrc
Size: 104KB - Virtual size: 556KB