86cc7815c5287c3c1eee6fae58db88a7

Sharing

Copy URL Twitter E-mail

General

Target

86cc7815c5287c3c1eee6fae58db88a7
Size

4.4MB
MD5

86cc7815c5287c3c1eee6fae58db88a7
SHA1

9ebccaafd7bbaa16484f4756abe399238d8de55b
SHA256

0520c27af2c24de8d42ec714cfe3e0e15c5d7aa62ea245b160a7f023b03e8a97
SHA512

c159d72841506b6ead0defb18a659d3d5989ca580a9156317e21b91508dbaa52ecfa269aeedf7e692d4afaddd1367d65100aadd09fbcacfbec84cdec26df1dff
SSDEEP

98304:Vp64KW8KGOq1TlK+YB42vqHDOUeH3utfdzyxwJ/ZETTHa:V4ZWdEplVcSH6hHGd+xy/+va

Score

1^/10

Malware Config

Signatures

Files

86cc7815c5287c3c1eee6fae58db88a7
.exe windows:5 windows x86 arch:x86

f8220ac65423f0267d42ab4cbda2e1d4

Code Sign

f6:8a:a5:b9:8b:1c:64:59:30:9f:01:db:67:a4:7a:6e
Certificate

Issuer

POSTALCODE=10188

Not Before

22/07/2021, 14:32

Not After

22/07/2022, 14:32

Subject

POSTALCODE=10188

e8:4b:a8:4a:58:13:7a:55:3b:18:18:9f:d5:f8:72:2a:f0:ff:2d:46:d3:fd:5f:d7:73:ad:6b:b8:c6:64:64:6f
Signer

Actual PE Digest

e8:4b:a8:4a:58:13:7a:55:3b:18:18:9f:d5:f8:72:2a:f0:ff:2d:46:d3:fd:5f:d7:73:ad:6b:b8:c6:64:64:6f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\cehisikajor\jadeponu_gesunacebiguso-wuyapekezutiv\mapobumof ket.pdb

Imports

kernel32

GetCPInfoExW
WriteConsoleInputW
ReadConsoleInputA
GetConsoleAliasW
SetCommTimeouts
InitializeSListHead
GetConsoleDisplayMode
CreateConsoleScreenBuffer
GetConsoleCP
VerifyVersionInfoA
WaitNamedPipeA
CreateMutexW
WriteConsoleA
SetLastError
CreateFileA
WritePrivateProfileSectionW
GetPrivateProfileSectionW
EnumDateFormatsExA
SetStdHandle
LoadLibraryW
RequestDeviceWakeup
FindFirstVolumeA
ReadFile
BuildCommDCBA
VerLanguageNameA
SetFileApisToANSI
WriteProcessMemory
ResetEvent
Sleep
EndUpdateResourceA
GetCPInfo
SetConsoleCtrlHandler
SetConsoleTitleA
SetFilePointer
GetCurrentConsoleFont
AddRefActCtx
AttachConsole
GetConsoleAliasesLengthW
ZombifyActCtx
ReadConsoleOutputW
GetSystemWindowsDirectoryA
GetStringTypeW
BuildCommDCBAndTimeoutsA
HeapAlloc
HeapLock
GetAtomNameW
GlobalSize
HeapValidate
GetGeoInfoA
GetCurrentProcess
VirtualProtect
GetProcAddress
GetModuleHandleA
CreateThread
GetVersionExA
GetOEMCP
WaitForSingleObject
GetSystemPowerStatus
VerifyVersionInfoW
WriteConsoleOutputCharacterW
LocalAlloc
GetMailslotInfo
SetEnvironmentVariableW
GetFileAttributesExA
GetComputerNameW
CommConfigDialogA
GetConsoleWindow
GetDiskFreeSpaceW
GetLongPathNameW
GetUserDefaultLangID
CopyFileA
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
RaiseException
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetLastError
HeapFree
TerminateProcess
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
WideCharToMultiByte
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetConsoleOutputCP
WriteConsoleW
CloseHandle

user32

GetAltTabInfoW

gdi32

GetCharWidth32A

advapi32

AdjustTokenPrivileges
BackupEventLogA

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8220ac65423f0267d42ab4cbda2e1d4

Code Sign

f6:8a:a5:b9:8b:1c:64:59:30:9f:01:db:67:a4:7a:6eCertificate

e8:4b:a8:4a:58:13:7a:55:3b:18:18:9f:d5:f8:72:2a:f0:ff:2d:46:d3:fd:5f:d7:73:ad:6b:b8:c6:64:64:6fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.data Size: 19KB - Virtual size: 4.4MB

.rsrc Size: 67KB - Virtual size: 542KB

f6:8a:a5:b9:8b:1c:64:59:30:9f:01:db:67:a4:7a:6e
Certificate

e8:4b:a8:4a:58:13:7a:55:3b:18:18:9f:d5:f8:72:2a:f0:ff:2d:46:d3:fd:5f:d7:73:ad:6b:b8:c6:64:64:6f
Signer

.text
Size: 4.3MB - Virtual size: 4.3MB

.data
Size: 19KB - Virtual size: 4.4MB

.rsrc
Size: 67KB - Virtual size: 542KB