835d26595aa873d46f00f34ff36d8067a38b734b2c2bf1443c8c54762ff8d106

Sharing

Copy URL Twitter E-mail

General

Target

835d26595aa873d46f00f34ff36d8067a38b734b2c2bf1443c8c54762ff8d106
Size

4.1MB
MD5

44ae4608cbc2902c8048726638462efe
SHA1

636366691f039c4d6973f0243daf7ca2aff2866c
SHA256

835d26595aa873d46f00f34ff36d8067a38b734b2c2bf1443c8c54762ff8d106
SHA512

0c1f16f715998ae31b13e7e2cb51f44c0855ad7717cba9b8a47e99ee28845ee6879a6903a1372fec12452d667742340418fbee0e56dd6213255295f3af718de2
SSDEEP

98304:kTqhS9Lnz8MmSV7jAB6wVffYAFzc/C0Dla1eCdEfwq9hv7fsfHoqc5/0ndP:LS9LzA0QB3VffYAWClIC+YKgH5cgd

Score

1^/10

Malware Config

Signatures

Files

835d26595aa873d46f00f34ff36d8067a38b734b2c2bf1443c8c54762ff8d106
.exe windows:5 windows x86 arch:x86

de009c97dbede2471fc24942f3fc3ae1

Code Sign

20:01:0c:8f:24:83:af:98:55:ed:b1:5b:56:52:9f:5b
Certificate

Issuer

CN=522434573635311625120101053d123d53210e113336571014061e5d361525000421,POSTALCODE=10802,ST=0b1c1115005f5c4e11160813180402164b1c1312+ST=0b1c1115494a5c111413080004511740571216140506085f501c465147571b51505119141402511b5716571c511b0904121c030e061111050a0600110102055b0c0b0a070b

Not Before

12/05/2024, 06:54

Not After

12/05/2025, 06:54

Subject

CN=522434573635311625120101053d123d53210e113336571014061e5d361525000421,POSTALCODE=10802,ST=0b1c1115005f5c4e11160813180402164b1c1312+ST=0b1c1115494a5c111413080004511740571216140506085f501c465147571b51505119141402511b5716571c511b0904121c030e061111050a0600110102055b0c0b0a070b

8a:0f:7b:f9:79:fb:82:1c:cb:56:d4:a0:3c:dd:af:9a:b0:48:e1:ea:29:7b:94:d2:91:89:54:12:4a:69:1d:21
Signer

Actual PE Digest

8a:0f:7b:f9:79:fb:82:1c:cb:56:d4:a0:3c:dd:af:9a:b0:48:e1:ea:29:7b:94:d2:91:89:54:12:4a:69:1d:21

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
SetComputerNameExA
LoadLibraryExW
InterlockedDecrement
SetCommBreak
CreateHardLinkA
LockFile
GetTickCount
ReadConsoleW
GetWindowsDirectoryA
EnumTimeFormatsA
SetCommTimeouts
GlobalAlloc
GetSystemDirectoryW
LoadLibraryW
GetLocaleInfoW
ReadConsoleInputA
CreateEventA
GetConsoleAliasW
GlobalMemoryStatus
InterlockedExchange
OpenMutexW
GetLastError
SetLastError
BackupRead
GetProcAddress
RemoveDirectoryA
SetConsoleOutputCP
AddAtomW
GlobalFindAtomW
GetOEMCP
GetModuleHandleA
BuildCommDCBA
VirtualProtect
GetTempPathA
GetVolumeInformationW
WriteConsoleW
GetComputerNameA
IsProcessorFeaturePresent
EncodePointer
DecodePointer
ReadFile
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
HeapFree
HeapAlloc
HeapSize
EnterCriticalSection
LeaveCriticalSection
SetFilePointerEx
GetConsoleMode
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetCPInfo
GetCurrentThreadId
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
LCMapStringW
SetStdHandle
GetConsoleCP
FlushFileBuffers
OutputDebugStringW
GetStringTypeW
CreateFileW
CloseHandle
SetEndOfFile

gdi32

GetCharABCWidthsI

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.0MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de009c97dbede2471fc24942f3fc3ae1

Code Sign

20:01:0c:8f:24:83:af:98:55:ed:b1:5b:56:52:9f:5bCertificate

8a:0f:7b:f9:79:fb:82:1c:cb:56:d4:a0:3c:dd:af:9a:b0:48:e1:ea:29:7b:94:d2:91:89:54:12:4a:69:1d:21Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 4.0MB - Virtual size: 7.3MB

.rsrc Size: 53KB - Virtual size: 1.7MB

20:01:0c:8f:24:83:af:98:55:ed:b1:5b:56:52:9f:5b
Certificate

8a:0f:7b:f9:79:fb:82:1c:cb:56:d4:a0:3c:dd:af:9a:b0:48:e1:ea:29:7b:94:d2:91:89:54:12:4a:69:1d:21
Signer

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 4.0MB - Virtual size: 7.3MB

.rsrc
Size: 53KB - Virtual size: 1.7MB