7078d048869d7d3d226c9d3ed6ed74e2

Sharing

Copy URL Twitter E-mail

General

Target

7078d048869d7d3d226c9d3ed6ed74e2
Size

4.4MB
MD5

7078d048869d7d3d226c9d3ed6ed74e2
SHA1

8806b62c5eaf75fd5f112ae120afeb84f04d8460
SHA256

7ac3c1e1ba3ea2779c5c98781f573c3fe87c63342860cb8f923d3ac5af601f5b
SHA512

ba580a488fca110e5d6a82df76e11347befb0ad2b248c7a5bc73e26f82d7a0a0e10c6bff063f1635a4e60788c5ec48643bf7549d1e9ce0e021ec517e3961f7fb
SSDEEP

98304:NXwiwg8oledgMIsM4v4sB4ujaYoogzrOc5Bk5n0gbYeNHz:NN1lkgMIsM4As7jaHo6uTb3NHz

Score

1^/10

Malware Config

Signatures

Files

7078d048869d7d3d226c9d3ed6ed74e2
.exe windows:5 windows x86 arch:x86

63fc28335e602552107036f2ceb974a9

Code Sign

75:c4:15:02:47:e7:1a:9c:11:d0:04:21:7a:6c:01:da
Certificate

Issuer

POSTALCODE=10051

Not Before

02/09/2021, 06:39

Not After

02/09/2022, 06:39

Subject

POSTALCODE=10051

1b:2b:2e:6d:40:fb:84:9b:60:c1:54:00:fa:84:65:1d:ca:db:14:c1:d1:05:9c:a4:a5:1f:a1:7b:88:34:00:1f
Signer

Actual PE Digest

1b:2b:2e:6d:40:fb:84:9b:60:c1:54:00:fa:84:65:1d:ca:db:14:c1:d1:05:9c:a4:a5:1f:a1:7b:88:34:00:1f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetNativeSystemInfo
lstrlenA
TlsGetValue
GetStringTypeA
InterlockedIncrement
GetQueuedCompletionStatus
ReadConsoleA
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
GetPrivateProfileStringW
WriteFile
SetCommState
GlobalAlloc
LoadLibraryW
GetSystemWindowsDirectoryA
GetConsoleAliasExesLengthW
GlobalFlags
GetExitCodeProcess
IsDBCSLeadByte
ReadFile
GetStartupInfoW
GlobalUnlock
GetNamedPipeHandleStateW
LCMapStringA
GetPrivateProfileIntW
InterlockedExchange
GetStartupInfoA
GetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
CopyFileA
LoadLibraryA
CreateSemaphoreW
GetFileType
SetCurrentDirectoryW
HeapWalk
FindAtomA
Process32NextW
FreeEnvironmentStringsW
EnumResourceNamesA
GetCurrentThreadId
GetCPInfoExA
SetThreadAffinityMask
FindAtomW
DeleteFileW
GetSystemTime
CopyFileExA
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsSetValue
TlsFree
SetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
HeapAlloc
HeapSize
HeapReAlloc
InitializeCriticalSectionAndSpinCount
LCMapStringW
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
CloseHandle
CreateFileA

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.2MB - Virtual size: 43.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63fc28335e602552107036f2ceb974a9

Code Sign

75:c4:15:02:47:e7:1a:9c:11:d0:04:21:7a:6c:01:daCertificate

1b:2b:2e:6d:40:fb:84:9b:60:c1:54:00:fa:84:65:1d:ca:db:14:c1:d1:05:9c:a4:a5:1f:a1:7b:88:34:00:1fSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 4.2MB - Virtual size: 43.3MB

.rsrc Size: 15KB - Virtual size: 15KB

75:c4:15:02:47:e7:1a:9c:11:d0:04:21:7a:6c:01:da
Certificate

1b:2b:2e:6d:40:fb:84:9b:60:c1:54:00:fa:84:65:1d:ca:db:14:c1:d1:05:9c:a4:a5:1f:a1:7b:88:34:00:1f
Signer

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 4.2MB - Virtual size: 43.3MB

.rsrc
Size: 15KB - Virtual size: 15KB