7394edbc5216b3da14f60ffd84733d75

Sharing

Copy URL Twitter E-mail

General

Target

7394edbc5216b3da14f60ffd84733d75
Size

4.2MB
MD5

7394edbc5216b3da14f60ffd84733d75
SHA1

282f6950b684f2e2bd16bfb93f6b28dedf7a2f80
SHA256

a765b42f1ed1a6f0548a93fb40d9cf9a3c3a33f3e7cfb3418e7ab32f27db1be0
SHA512

930251dea8b581781e718e7bf9be2f2d826784824251e0c3ec7df69f09ee7f03db23f8ffdd6e3c37e5122cb0ac2260328238bba1f32bbb70e96e7daf721aebcc
SSDEEP

98304:9NuwRodZUqJgWc5Ekf1uKgR9BW5a6n6oi20a8zmSpoEi3pB80uvRl:qPUqJoeFW5a6ZV0a8zmSWEi3pB8rb

Score

1^/10

Malware Config

Signatures

Files

7394edbc5216b3da14f60ffd84733d75
.exe windows:5 windows x86 arch:x86

52bacce242bcb13c8262e4b5366c6dd4

Code Sign

60:10:79:30:6a:17:56:68:2f:ee:25:25:6d:42:80:c4
Certificate

Issuer

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10826,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

Not Before

31/03/2024, 11:21

Not After

31/03/2025, 11:21

Subject

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10826,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

dd:27:52:ba:d8:f5:e4:00:ec:e3:0e:da:38:cc:a9:bd:fd:45:0e:6b:ca:b0:c9:26:41:c7:b6:3f:e3:ba:b7:26
Signer

Actual PE Digest

dd:27:52:ba:d8:f5:e4:00:ec:e3:0e:da:38:cc:a9:bd:fd:45:0e:6b:ca:b0:c9:26:41:c7:b6:3f:e3:ba:b7:26

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\xanuwu8\ricisugu69\senu\gusifiz\gijul52\wopa\togepa.pdb

Imports

kernel32

FindResourceW
GetConsoleAliasA
ZombifyActCtx
SetHandleInformation
_lcreat
MoveFileWithProgressA
GetConsoleAliasesLengthA
GetNumberFormatA
ReadConsoleW
GetConsoleCP
GetVolumeInformationA
GlobalFindAtomA
SetCommConfig
InitializeCriticalSectionAndSpinCount
ReadConsoleInputA
GetSystemPowerStatus
FindNextVolumeW
WriteConsoleW
GetLocaleInfoA
ExitThread
GetLastError
ChangeTimerQueueTimer
SetLastError
GetProcAddress
LoadLibraryA
InterlockedExchangeAdd
LocalAlloc
RemoveDirectoryW
QueryDosDeviceW
GetModuleFileNameA
FindFirstVolumeMountPointA
GetCurrentDirectoryA
GetWindowsDirectoryW
GetTempPathA
GetStringTypeW
OutputDebugStringW
FlushFileBuffers
CreateFileA
GetNumaNodeProcessorMask
FileTimeToSystemTime
GetEnvironmentVariableW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetCommandLineW
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
HeapSize
HeapFree
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
CloseHandle
HeapAlloc
GetProcessHeap
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
LCMapStringW
GetConsoleMode
SetFilePointerEx
SetStdHandle
CreateFileW

user32

CharUpperBuffA
DrawCaption

gdi32

SetTextColor

advapi32

ReadEventLogW

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 45.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52bacce242bcb13c8262e4b5366c6dd4

Code Sign

60:10:79:30:6a:17:56:68:2f:ee:25:25:6d:42:80:c4Certificate

dd:27:52:ba:d8:f5:e4:00:ec:e3:0e:da:38:cc:a9:bd:fd:45:0e:6b:ca:b0:c9:26:41:c7:b6:3f:e3:ba:b7:26Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 4.0MB - Virtual size: 45.0MB

.rsrc Size: 79KB - Virtual size: 78KB

60:10:79:30:6a:17:56:68:2f:ee:25:25:6d:42:80:c4
Certificate

dd:27:52:ba:d8:f5:e4:00:ec:e3:0e:da:38:cc:a9:bd:fd:45:0e:6b:ca:b0:c9:26:41:c7:b6:3f:e3:ba:b7:26
Signer

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 4.0MB - Virtual size: 45.0MB

.rsrc
Size: 79KB - Virtual size: 78KB