74f4d95f80c3550edea7d8683bdfea5e92a09ff78dba2dc012fa4f37172f5cda

General

Target
74f4d95f80c3550edea7d8683bdfea5e92a09ff78dba2dc012fa4f37172f5cda
Size 263KB
Sample231011-vtbyfabe3x
SHA256 74f4d95f80c3550edea7d8683bdfea5e92a09ff78dba2dc012fa4f37172f5cda
MD5 275c9a8634c431af4c32c764b67ba756
SHA1 e8005c7d094a1a2775c27321598c41fc29409f2d
SHA512 40f2721976bfb62980ac04c5720cd2f478ac49149a017cae3c9ba4a7bfbd39e5e8727008103daf1942a541034002e6db0a3a534ace9bfb0881968b1b6a3b2eec
SSDEEP 6144:X3wneSsTaYPwJ8W2ZoSOlKvQyM62CeRsWT:X3DrOcvQy4D
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

74f4d95f80c3550edea7d8683bdfea5e92a09ff78dba2dc012fa4f37172f5cda

.exe 263KB

74f4d95f80c3550edea7d8683bdfea5e92a09ff78dba2dc012fa4f37172f5cda

IMPHASH 5e5ba5601efb9190a6203c4a75615a32
SHA256 74f4d95f80c3550edea7d8683bdfea5e92a09ff78dba2dc012fa4f37172f5cda
MD5 275c9a8634c431af4c32c764b67ba756
SHA1 e8005c7d094a1a2775c27321598c41fc29409f2d
SHA512 40f2721976bfb62980ac04c5720cd2f478ac49149a017cae3c9ba4a7bfbd39e5e8727008103daf1942a541034002e6db0a3a534ace9bfb0881968b1b6a3b2eec
SSDEEP 6144:X3wneSsTaYPwJ8W2ZoSOlKvQyM62CeRsWT:X3DrOcvQy4D
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

cd:a0:5e:ca:9e:f3:08:14:d4:99:e1:6f:11:8a:86:b7:4e:8f:07:63:c4:98:98:14:c9:76:84:e8:35:c1:1f:7e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=CodeSigningCert

Chains

Oct 11, 2023

Minor OS version

0

Major OS version

6

Entry point

129512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetConsoleCtrlHandler SetFileTime CloseHandle GetCurrentProcess MoveFileA CreateFileA CreateFileW FlushFileBuffers GetFileType ReadFile SetEndOfFile SetFilePointer WriteFile SetLastError CreateDirectoryA CreateDirectoryW GetDiskFreeSpaceA GetDriveTypeA GetFileAttributesA GetFileAttributesW GetFullPathNameA SetFileAttributesA SetFileAttributesW DeviceIoControl GetModuleHandleA GetProcAddress ExpandEnvironmentStringsA ExpandEnvironmentStringsW FormatMessageA FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW GetVersionExA GetModuleFileNameA GetTempPathA SetErrorMode GetCurrentThread SetThreadPriority SetPriorityClass FileTimeToLocalFileTime LocalFileTimeToFileTime GetSystemTime FileTimeToSystemTime SystemTimeToFileTime MultiByteToWideChar WideCharToMultiByte GetCPInfo IsDBCSLeadByte DecodePointer HeapSize GetConsoleOutputCP GetStringTypeW SetStdHandle GetProcessHeap SetEnvironmentVariableW LocalFree Sleep GetLastError GetCurrentDirectoryA ReadConsoleA GetStdHandle SetConsoleMode GetConsoleMode FindClose FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW QueryPerformanceFrequency GetModuleFileNameW GetCommandLineA GetCommandLineW HeapFree HeapAlloc HeapReAlloc GetFileSizeEx SetFilePointerEx CompareStringW LCMapStringW DeleteFileW MoveFileExW FindFirstFileExW WriteConsoleW

user32

CharUpperA CharToOemBuffA OemToCharA CharToOemA OemToCharBuffA CharLowerA ExitWindowsEx

advapi32

RegQueryValueExA RegOpenKeyExA LookupPrivilegeValueA SetFileSecurityA SetFileSecurityW AdjustTokenPrivileges OpenProcessToken RegCloseKey

shell32

SHGetPathFromIDListA SHGetMalloc SHGetSpecialFolderLocation ShellExecuteA

Sharing

General

Malware Config

Signatures

File Explorer

74f4d95f80c3550edea7d8683bdfea5e92a09ff78dba2dc012fa4f37172f5cda

PE Signature issue

kernel32

user32

advapi32

shell32