bbcb810af38078c17e60c5552cefd10b16205f19e974af84682263e949a14a1b

Sharing

Copy URL Twitter E-mail

General

Target

bbcb810af38078c17e60c5552cefd10b16205f19e974af84682263e949a14a1b
Size

4.1MB
MD5

2424de2ab149ce5ad81808164c1d31f6
SHA1

85497b22ae498f31d91a50b6bbab490fd9f1d610
SHA256

bbcb810af38078c17e60c5552cefd10b16205f19e974af84682263e949a14a1b
SHA512

2d12e8db623af79a28b76668182a06cfd0069d60ead0a176861677993e2d5745271f6b8d3a73a5a85b558c6db86c0caaee45b989b121c22a7b8ac85bc43f18f4
SSDEEP

98304:IiDHVidKXx53yhFZAkO26hafSnw5E5uGS+Dvt:L1QKh53yh9fgDuGJ

Score

1^/10

Malware Config

Signatures

Files

bbcb810af38078c17e60c5552cefd10b16205f19e974af84682263e949a14a1b
.exe windows:5 windows x86 arch:x86

776366fc550d6850ffd7c9ac6fe41209

Code Sign

b5:17:f6:7b:7c:4a:d3:4a:4b:f2:2e:2e:08:9b:e9:1c
Certificate

Issuer

CN=522303292b2005041027200a5d5d12051031230d161c143d24542553452740323d28,POSTALCODE=10820,ST=0b1c1115005f5c4e061704171b0617160407045b0c1704+ST=0b1c1115494a5c11101704105c1f07410b17550d0e1c0c5a070a090e025212541c510f17091909155406121d141b0850180d0a16140e53100100171b1d12055b0c0b0a070b

Not Before

24/01/2024, 00:43

Not After

23/01/2025, 00:43

Subject

CN=522303292b2005041027200a5d5d12051031230d161c143d24542553452740323d28,POSTALCODE=10820,ST=0b1c1115005f5c4e061704171b0617160407045b0c1704+ST=0b1c1115494a5c11101704105c1f07410b17550d0e1c0c5a070a090e025212541c510f17091909155406121d141b0850180d0a16140e53100100171b1d12055b0c0b0a070b

60:d7:7f:33:a7:df:46:89:75:46:a6:62:82:8b:73:69:e0:3b:69:dc:a0:2c:68:5b:04:91:b2:86:21:18:22:15
Signer

Actual PE Digest

60:d7:7f:33:a7:df:46:89:75:46:a6:62:82:8b:73:69:e0:3b:69:dc:a0:2c:68:5b:04:91:b2:86:21:18:22:15

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterWait
GetNativeSystemInfo
GetStringTypeA
MoveFileExA
FindResourceW
SystemTimeToTzSpecificLocalTime
HeapAlloc
InterlockedDecrement
SetComputerNameW
GetTickCount
LocalFlags
GetConsoleAliasesA
WideCharToMultiByte
LoadLibraryW
GetLocaleInfoW
GetAtomNameW
ReadFile
GetEnvironmentVariableA
CompareStringW
WritePrivateProfileStringW
RaiseException
GetLastError
GetProcAddress
GetLongPathNameA
LoadLibraryA
LocalAlloc
SetCurrentDirectoryW
OpenJobObjectW
SetSystemTime
SetConsoleTitleW
CancelIo
FreeEnvironmentStringsW
ReleaseMutex
EndUpdateResourceA
EnumCalendarInfoExA
SetFileAttributesW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

776366fc550d6850ffd7c9ac6fe41209

Code Sign

b5:17:f6:7b:7c:4a:d3:4a:4b:f2:2e:2e:08:9b:e9:1cCertificate

60:d7:7f:33:a7:df:46:89:75:46:a6:62:82:8b:73:69:e0:3b:69:dc:a0:2c:68:5b:04:91:b2:86:21:18:22:15Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 7KB - Virtual size: 14KB

.tls Size: 2KB - Virtual size: 2KB

.rsrc Size: 72KB - Virtual size: 5.0MB

b5:17:f6:7b:7c:4a:d3:4a:4b:f2:2e:2e:08:9b:e9:1c
Certificate

60:d7:7f:33:a7:df:46:89:75:46:a6:62:82:8b:73:69:e0:3b:69:dc:a0:2c:68:5b:04:91:b2:86:21:18:22:15
Signer

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 7KB - Virtual size: 14KB

.tls
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 72KB - Virtual size: 5.0MB