cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d

General

Target
cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d
Size 413KB
Sample230925-ffgjfacc5y
SHA256 cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d
MD5 5c5eb6489ecad14a5161afa90f965adc
SHA1 6922636c390d47f9a77dd30a1ef20a91a369587f
SHA512 46c7d4f26a742d793bf26d430e6f185b2de8f5b7c6a6f7cf0c2bf14d971591c23cc2537341174548f7cfb3a1bc216d14ef95c9008a4bad068b8c8323ecdcdd1c
SSDEEP 6144:Ql8hbVeadz9+w/SZHOCu5gRuAO7EUUUUUUMTATsrJ8qefuHvK+APAHqwC:QlCReadAweueu1zVefuK+APZwC
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d

.exe 413KB

cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d

IMPHASH 8ddc982ec86bc15061e6b2eab1424dec
SHA256 cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d
MD5 5c5eb6489ecad14a5161afa90f965adc
SHA1 6922636c390d47f9a77dd30a1ef20a91a369587f
SHA512 46c7d4f26a742d793bf26d430e6f185b2de8f5b7c6a6f7cf0c2bf14d971591c23cc2537341174548f7cfb3a1bc216d14ef95c9008a4bad068b8c8323ecdcdd1c
SSDEEP 6144:Ql8hbVeadz9+w/SZHOCu5gRuAO7EUUUUUUMTATsrJ8qefuHvK+APAHqwC:QlCReadAweueu1zVefuK+APZwC
MD5 SHA1 SHA512 SSDEEP

windows x86

PE Signature issue

Digest

27:ac:59:d0:2f:6c:95:20:12:2d:73:86:96:73:a6:7b:c5:a4:6d:19:38:cb:65:8b:cb:cf:c1:59:76:ca:cd:1d

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=K Desktop Environment e.V.,O=K Desktop Environment e.V.,POSTALCODE=10969,STREET=Prinzenstr 85 F,L=Berlin,ST=Berlin,C=DE

Chains

Apr 27, 2022

CN=K Desktop Environment e.V.,O=K Desktop Environment e.V.,POSTALCODE=10969,STREET=Prinzenstr 85 F,L=Berlin,ST=Berlin,C=DE

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Minor OS version

0

Major OS version

6

Entry point

46230

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MultiByteToWideChar GetStringTypeW WideCharToMultiByte CloseHandle GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess CreateFileW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d

PE Signature issue

kernel32