919671cc2c143648988f50cfec83b318[.]exe

General

Target
919671cc2c143648988f50cfec83b318.exe
Size 1.1MB
Sample231012-hlye9aeg44
SHA256 2ab85857cb314cc5f5c46ab9adb8b4e384bff96e826040bd908e77bee9fb250a
MD5 919671cc2c143648988f50cfec83b318
SHA1 8fd38e123a3fb4f5e11cf844b377ed4c7c6da28f
SHA512 4562f903dcbae4907ea8117cc30c9e0b0f70e6657e69839ead3ee562db4baf6732c159a35747d7448bc1f5f15e9452fb5916a562b218f3a7a02a46e9f69d3251
SSDEEP 12288:PKx4zPp4xPpE+4WPoxOMOSv4G9yCfROYQ6Hn1/ua9BJp2RjY/v6VfRnK:tPp4xRE+4WPBfP4yCJk6HMY/v63nK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

919671cc2c143648988f50cfec83b318.exe

.exe 1.1MB

919671cc2c143648988f50cfec83b318.exe

IMPHASH 66025e7bb3415added2b8177bf9bcfbe
SHA256 2ab85857cb314cc5f5c46ab9adb8b4e384bff96e826040bd908e77bee9fb250a
MD5 919671cc2c143648988f50cfec83b318
SHA1 8fd38e123a3fb4f5e11cf844b377ed4c7c6da28f
SHA512 4562f903dcbae4907ea8117cc30c9e0b0f70e6657e69839ead3ee562db4baf6732c159a35747d7448bc1f5f15e9452fb5916a562b218f3a7a02a46e9f69d3251
SSDEEP 12288:PKx4zPp4xPpE+4WPoxOMOSv4G9yCfROYQ6Hn1/ua9BJp2RjY/v6VfRnK:tPp4xRE+4WPBfP4yCJk6HMY/v63nK
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

aa:3a:95:a0:9c:76:d6:82:58:9e:3d:5c:3d:4e:6b:8c:19:c0:13:6a:96:a1:37:1d:70:ee:6a:2a:c0:fa:8a:06

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=1027739867473,CN=AO Kaspersky Lab,O=AO Kaspersky Lab,STREET=sh Leningradskoye\, 39A / str 2,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 4, 2023

SERIALNUMBER=1027739867473,CN=AO Kaspersky Lab,O=AO Kaspersky Lab,STREET=sh Leningradskoye\, 39A / str 2,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Minor OS version

0

Major OS version

6

Entry point

4596

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeConsole CloseHandle WaitForSingleObjectEx Sleep SwitchToThread GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo FormatMessageA WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter QueryPerformanceFrequency InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableSRW LocalFree GetLocaleInfoEx EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx SetFileInformationByHandle GetTempPathW FlsAlloc FlsGetValue FlsSetValue FlsFree InitOnceExecuteOnce SleepConditionVariableCS CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetSystemTimeAsFileTime GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetModuleHandleW GetProcAddress GetFileInformationByHandleEx CreateSymbolicLinkW GetStringTypeW CompareStringEx GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW GetCurrentThread HeapAlloc HeapFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType SetConsoleCtrlHandler FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc GetTimeZoneInformation OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize WriteConsoleW

Sharing