ff99a7d2f54832f2c6e7d2e4d69a04184e2a45ebbbda9251734bcc2aab51caa9

Sharing

Copy URL Twitter E-mail

General

Target

ff99a7d2f54832f2c6e7d2e4d69a04184e2a45ebbbda9251734bcc2aab51caa9
Size

4.2MB
MD5

5594fdcad21298194594303f3b63b781
SHA1

b57e7386916ccace46943bd8bbd6b6eedd964538
SHA256

ff99a7d2f54832f2c6e7d2e4d69a04184e2a45ebbbda9251734bcc2aab51caa9
SHA512

ec620d40e651b81a3586b571b6189e1587c701d4d8e799bcc903983fd33b5f53190b51f69e735e69be13f788743bd37e934f4fe809227533d9efa34536b1e4fb
SSDEEP

98304:uz7Cg0ld9bGpeFIidtQ9zICqBAsCsR7hN5aqRYTU7d:k7NcfZtQ9LJEd3aOYT+d

Score

1^/10

Malware Config

Signatures

Files

ff99a7d2f54832f2c6e7d2e4d69a04184e2a45ebbbda9251734bcc2aab51caa9
.exe windows:5 windows x86 arch:x86

22bf1f69973db63ec8672a8e8da9a861

Code Sign

7a:3b:0f:c4:05:c6:88:58:f2:03:29:0b:bc:f1:14:a8
Certificate

Issuer

CN=525d0b323423120e110456060e332e32311412140236333d57310b361108382b0633,POSTALCODE=10828,ST=0b1c1115005f5c4e181a03021b111003011215104d0a110f+ST=0b1c1115494a5c0c14061615180a130112020714120f145c5107110011530255570b5e0b52161c1c1217060c175f1703011717030c091c0e19041d15170a055b0c0b0a070b

Not Before

17/04/2024, 15:37

Not After

17/04/2025, 15:37

Subject

CN=525d0b323423120e110456060e332e32311412140236333d57310b361108382b0633,POSTALCODE=10828,ST=0b1c1115005f5c4e181a03021b111003011215104d0a110f+ST=0b1c1115494a5c0c14061615180a130112020714120f145c5107110011530255570b5e0b52161c1c1217060c175f1703011717030c091c0e19041d15170a055b0c0b0a070b

d0:a1:1c:55:62:a1:05:41:72:5f:a4:8a:e1:66:9f:59:61:88:61:a5:79:3d:98:02:d5:a1:f5:72:d6:25:6e:3a
Signer

Actual PE Digest

d0:a1:1c:55:62:a1:05:41:72:5f:a4:8a:e1:66:9f:59:61:88:61:a5:79:3d:98:02:d5:a1:f5:72:d6:25:6e:3a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\nuzereyo.pdb

Imports

kernel32

FindFirstChangeNotificationW
GetNumaProcessorNode
GetLocaleInfoA
GetUserDefaultLCID
CreateHardLinkA
GetNumberFormatA
GlobalFindAtomA
LoadLibraryW
ReadConsoleInputA
WriteConsoleW
GetModuleFileNameW
GetCompressedFileSizeA
SetThreadLocale
GetStdHandle
GetLastError
VirtualAlloc
CreateTimerQueueTimer
FindVolumeClose
LocalAlloc
GetExitCodeThread
AddAtomW
RemoveDirectoryW
SetCommMask
GetOEMCP
VirtualProtect
SetCalendarInfoA
GetWindowsDirectoryW
GetCurrentProcessId
AddConsoleAliasA
WriteProcessMemory
SetFileAttributesW
GetVolumeInformationW
CreateThread
CreateFileW
CopyFileA
DebugActiveProcess
OutputDebugStringW
FlushFileBuffers
SetStdHandle
GetConsoleMode
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapFree
GetCommandLineA
RaiseException
RtlUnwind
HeapAlloc
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetACP
GetCurrentThreadId
IsDebuggerPresent
GetProcessHeap
ExitProcess
GetModuleHandleExW
HeapSize
GetFileType
CloseHandle
GetModuleFileNameA
WriteFile
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
LoadLibraryExW
ReadFile
SetFilePointerEx
GetConsoleCP

user32

GetMenuItemID

gdi32

GetCharacterPlacementW

ole32

CoMarshalHresult

winhttp

WinHttpReadData

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 44.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22bf1f69973db63ec8672a8e8da9a861

Code Sign

7a:3b:0f:c4:05:c6:88:58:f2:03:29:0b:bc:f1:14:a8Certificate

d0:a1:1c:55:62:a1:05:41:72:5f:a4:8a:e1:66:9f:59:61:88:61:a5:79:3d:98:02:d5:a1:f5:72:d6:25:6e:3aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

ole32

winhttp

Sections

.text Size: 98KB - Virtual size: 98KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 4.0MB - Virtual size: 44.9MB

.rsrc Size: 102KB - Virtual size: 101KB

7a:3b:0f:c4:05:c6:88:58:f2:03:29:0b:bc:f1:14:a8
Certificate

d0:a1:1c:55:62:a1:05:41:72:5f:a4:8a:e1:66:9f:59:61:88:61:a5:79:3d:98:02:d5:a1:f5:72:d6:25:6e:3a
Signer

.text
Size: 98KB - Virtual size: 98KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 4.0MB - Virtual size: 44.9MB

.rsrc
Size: 102KB - Virtual size: 101KB