72a8e6ac9a6df4f5cbc1096c0d2fd2a6fe5f4d1cb083b280f55a7946a8b70a1b

General

Target
72a8e6ac9a6df4f5cbc1096c0d2fd2a6fe5f4d1cb083b280f55a7946a8b70a1b
Size 4.2MB
Sample230424-lp9jgaba24
SHA256 72a8e6ac9a6df4f5cbc1096c0d2fd2a6fe5f4d1cb083b280f55a7946a8b70a1b
MD5 e2935cca1fa380d594094c6fd1a668c9
SHA1 658b05e0ee7e2af3f009f36c974016a3a6cd748d
SHA512 1dc4c624fc7716b83e8b82c542b72101b58d6413db9eb5791990a56fd4bcbe3149b596702a7c41b64ff7d87f803805af0f2480c65a75886c8ca2f924bd491c84
SSDEEP 98304:Wg9GSC+N9hD86X4JcvWCJ6tk+6TgQgPNZ5uO2L6oxIasCi:WOG7c9hDVIJeLJNgFuO2L6oxIXCi
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

72a8e6ac9a6df4f5cbc1096c0d2fd2a6fe5f4d1cb083b280f55a7946a8b70a1b

.exe 4.2MB

72a8e6ac9a6df4f5cbc1096c0d2fd2a6fe5f4d1cb083b280f55a7946a8b70a1b

IMPHASH 6a8dd0359e3425dd330b8f8519bc89c8
SHA256 72a8e6ac9a6df4f5cbc1096c0d2fd2a6fe5f4d1cb083b280f55a7946a8b70a1b
MD5 e2935cca1fa380d594094c6fd1a668c9
SHA1 658b05e0ee7e2af3f009f36c974016a3a6cd748d
SHA512 1dc4c624fc7716b83e8b82c542b72101b58d6413db9eb5791990a56fd4bcbe3149b596702a7c41b64ff7d87f803805af0f2480c65a75886c8ca2f924bd491c84
SSDEEP 98304:Wg9GSC+N9hD86X4JcvWCJ6tk+6TgQgPNZ5uO2L6oxIasCi:WOG7c9hDVIJeLJNgFuO2L6oxIXCi
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

9d:9d:54:d4:c7:dc:37:4f:af:cd:c6:8d:5f:81:31:fd:67:08:89:b0:5e:3e:b5:9a:9f:1f:95:b7:d3:71:cb:c5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Minor OS version

Major OS version

Entry point

42995

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlCaptureContext GetDriveTypeW GlobalCompact InterlockedIncrement EnumCalendarInfoW QueryDosDeviceA GetEnvironmentStringsW WaitForSingleObject SetComputerNameW GetModuleHandleW GetTickCount GetConsoleAliasesLengthA SetCommState EnumResourceTypesA GetDriveTypeA GetProcessTimes GetVolumePathNameW GetConsoleCP GlobalAlloc LoadLibraryW IsProcessInJob GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA GetConsoleAliasW GetFileAttributesW FindNextVolumeMountPointW SetTapePosition GetNamedPipeHandleStateW EnumSystemLocalesA EnumCalendarInfoA GetLastError GetProcAddress BeginUpdateResourceW CreateJobSet UnhandledExceptionFilter BuildCommDCBAndTimeoutsW FindFirstVolumeMountPointW RemoveDirectoryW SetThreadIdealProcessor FindAtomA FoldStringA GetModuleFileNameA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW EnumDateFormatsW GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask SetFileShortNameA GetConsoleProcessList DebugBreak InterlockedPushEntrySList EnumSystemLocalesW DeleteFileA WriteConsoleW FlushFileBuffers GetConsoleMode GetPrivateProfileIntW GlobalFix SetStdHandle CreateFileW WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW IsProcessorFeaturePresent HeapCreate HeapDestroy ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetFilePointer SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapSize TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetCurrentThread CloseHandle QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW FatalAppExitA GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA IsValidLocale HeapReAlloc SetConsoleCtrlHandler FreeLibrary

user32

DefDlgProcA GetMenuBarInfo

advapi32

ReadEventLogW

shell32

DuplicateIcon

Sharing

General

Malware Config

Signatures

File Explorer

72a8e6ac9a6df4f5cbc1096c0d2fd2a6fe5f4d1cb083b280f55a7946a8b70a1b

PE Signature issue

kernel32

user32

advapi32

shell32