193878735d171404f704d71e76366baf[.]exe

General

Target
193878735d171404f704d71e76366baf.exe
Size 1.5MB
Sample230710-qqnqlsaf89
SHA256 2d46ab188cd5589cd3ad6587440919f3d2b592d501cd456f6d0bd4f4fac70a31
MD5 193878735d171404f704d71e76366baf
SHA1 f3271d9a0854615d339cc64567fdb579b145a814
SHA512 51df8a35f86005c3b6ad621af1a313576c079d47313e92a84dba5cab00ab453c0c16069a254293b3ec00e8d5037b900edff74fc23bb1fe2e918c20f44583a7b7
SSDEEP 24576:uwDkNTFT+bvoog7jTPZvDD/SCHzQJ86uJBbVTb34k30/8dRi9:upjEO7nxbGGQqTykji9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

193878735d171404f704d71e76366baf.exe

.exe 1.5MB

193878735d171404f704d71e76366baf.exe

IMPHASH 8da5973a84d0980eaf40ac16e606fbd5
SHA256 2d46ab188cd5589cd3ad6587440919f3d2b592d501cd456f6d0bd4f4fac70a31
MD5 193878735d171404f704d71e76366baf
SHA1 f3271d9a0854615d339cc64567fdb579b145a814
SHA512 51df8a35f86005c3b6ad621af1a313576c079d47313e92a84dba5cab00ab453c0c16069a254293b3ec00e8d5037b900edff74fc23bb1fe2e918c20f44583a7b7
SSDEEP 24576:uwDkNTFT+bvoog7jTPZvDD/SCHzQJ86uJBbVTb34k30/8dRi9:upjEO7nxbGGQqTykji9
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

7e:b9:f7:61:7e:66:90:9a:cd:dd:47:99:85:34:f6:71:bc:18:40:18:7f:8e:20:96:f0:d0:3f:c0:a6:69:c0:d0

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 6, 2023

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

Major OS version

Entry point

13536

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.cjwqrjx

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.WA3lp

Size

173KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.nzl

Size

840KB

Virtual Size

840KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

193878735d171404f704d71e76366baf.exe

PE Signature issue

kernel32