47d46c51ee1e2b1687c22f9834ff2d76113c807f787798965fb54532a4b7ff1b

Sharing

Copy URL Twitter E-mail

General

Target

47d46c51ee1e2b1687c22f9834ff2d76113c807f787798965fb54532a4b7ff1b
Size

4.1MB
MD5

1cb9513ede0d78805ca644b02e97e372
SHA1

8b3368c4175a7bcb35e265212a80fd616fcc061b
SHA256

47d46c51ee1e2b1687c22f9834ff2d76113c807f787798965fb54532a4b7ff1b
SHA512

9d3ff2fa7fa182b9b481bd1e2d8b46246657e0f6ec7b637bb078cd07589066b1c7455a85cb2732975e7cc3f4cb6d5434cec6a96c86ae3787acdb2bae28792dd7
SSDEEP

98304:yrNUdGTNpyNYArnPG5CXPlN04lbJMyc1jWPw++UfDUu:QPNpyNWwPlNjSycIIi1

Score

1^/10

Malware Config

Signatures

Files

47d46c51ee1e2b1687c22f9834ff2d76113c807f787798965fb54532a4b7ff1b
.exe windows:5 windows x86 arch:x86

9c7ec8079f6d07185b2fe2fc2f3a7a87

Code Sign

07:e5:33:73:66:3d:f3:a6:61:fc:0f:64:da:22:39:4b
Certificate

Issuer

CN=52263d520931235736570a2402571c4021122b211102515e242235323619033a0b11,POSTALCODE=10805,ST=0b1c1115005f5c4e061704171b111712031508164d0a110f+ST=0b1c1115494a5c5305080e17100e0340021d1116090d510a0d0c455712130f510c06110f020b0a100346090b065b0e06410b06530c151c1b191457400b12055b0c0b0a070b

Not Before

26/01/2024, 23:27

Not After

25/01/2025, 23:27

Subject

CN=52263d520931235736570a2402571c4021122b211102515e242235323619033a0b11,POSTALCODE=10805,ST=0b1c1115005f5c4e061704171b111712031508164d0a110f+ST=0b1c1115494a5c5305080e17100e0340021d1116090d510a0d0c455712130f510c06110f020b0a100346090b065b0e06410b06530c151c1b191457400b12055b0c0b0a070b

9a:95:cc:c2:e1:05:b8:5a:5f:68:d4:b1:02:89:5f:a6:86:8b:3f:92:70:2f:d8:16:58:2f:fd:f0:e5:18:24:ae
Signer

Actual PE Digest

9a:95:cc:c2:e1:05:b8:5a:5f:68:d4:b1:02:89:5f:a6:86:8b:3f:92:70:2f:d8:16:58:2f:fd:f0:e5:18:24:ae

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\kolu\hazawubamot.pdb

Imports

kernel32

ReadConsoleOutputAttribute
AddConsoleAliasW
SetCommBreak
GetTickCount
LoadLibraryW
FatalAppExitW
SetComputerNameExW
CreateJobObjectA
GetLastError
SetLastError
GetProcAddress
AttachConsole
VirtualAlloc
SetVolumeLabelW
MoveFileW
InterlockedDecrement
LoadLibraryA
WriteConsoleA
LocalAlloc
QueryDosDeviceW
FindNextChangeNotification
GlobalFindAtomW
GetModuleFileNameA
FindFirstVolumeMountPointA
GetModuleHandleA
GetFileAttributesExW
DeleteFileW
GetCurrentProcessId
MoveFileWithProgressW
DebugBreak
AreFileApisANSI
RemoveDirectoryA
AllocConsole
MultiByteToWideChar
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
Sleep
HeapSize
ExitProcess
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException

advapi32

DeleteAce

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 38.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c7ec8079f6d07185b2fe2fc2f3a7a87

Code Sign

07:e5:33:73:66:3d:f3:a6:61:fc:0f:64:da:22:39:4bCertificate

9a:95:cc:c2:e1:05:b8:5a:5f:68:d4:b1:02:89:5f:a6:86:8b:3f:92:70:2f:d8:16:58:2f:fd:f0:e5:18:24:aeSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 18KB - Virtual size: 38.9MB

.rsrc Size: 69KB - Virtual size: 69KB

07:e5:33:73:66:3d:f3:a6:61:fc:0f:64:da:22:39:4b
Certificate

9a:95:cc:c2:e1:05:b8:5a:5f:68:d4:b1:02:89:5f:a6:86:8b:3f:92:70:2f:d8:16:58:2f:fd:f0:e5:18:24:ae
Signer

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 18KB - Virtual size: 38.9MB

.rsrc
Size: 69KB - Virtual size: 69KB