b584210f26cf4eadf5593e767c78b916[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b584210f26cf4eadf5593e767c78b916.exe
Size 3.5MB
Sample231013-freh8agh62
SHA256 e1fb148206beb7168a5f92581a51ea32a03d841abf00aff221f35ed03197a59d
MD5 b584210f26cf4eadf5593e767c78b916
SHA1 b20ba3e2754ea1153cbff5c3d85b7ea68e7da6f5
SHA512 e57d07a5307333159d1a640a1946e629286523d9008d12c71457d9e8e4277644faa43d0ef7e37d57bd81bffc83f5c522fdf4f2908899268d5d084a4a0a831881
SSDEEP 98304:+3azLHnwqxoNZx2bk965530QD0x7juoYCALtnfYwM00:+3qLHnwqxAr65q+y0ZpfYD00
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b584210f26cf4eadf5593e767c78b916.exe

.exe 3.5MB

b584210f26cf4eadf5593e767c78b916.exe

IMPHASH cf783285c9654d3e78afcafb8e4d19d5
SHA256 e1fb148206beb7168a5f92581a51ea32a03d841abf00aff221f35ed03197a59d
MD5 b584210f26cf4eadf5593e767c78b916
SHA1 b20ba3e2754ea1153cbff5c3d85b7ea68e7da6f5
SHA512 e57d07a5307333159d1a640a1946e629286523d9008d12c71457d9e8e4277644faa43d0ef7e37d57bd81bffc83f5c522fdf4f2908899268d5d084a4a0a831881
SSDEEP 98304:+3azLHnwqxoNZx2bk965530QD0x7juoYCALtnfYwM00:+3qLHnwqxAr65q+y0ZpfYD00
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64

Digest

8e:9b:ee:ff:60:19:15:c9:2b:20:81:72:1c:27:ad:2d:e1:18:f7:c0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Micro-Star International CO.\, LTD.,O=Micro-Star International CO.\, LTD.,L=Zhonghe District,ST=New Taipei City,C=TW

Chains

Oct 12, 2023

CN=Micro-Star International CO.\, LTD.,O=Micro-Star International CO.\, LTD.,L=Zhonghe District,ST=New Taipei City,C=TW

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

Major OS version

Entry point

159892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetFilePointerEx GetConsoleOutputCP FlushFileBuffers HeapSize AddVectoredExceptionHandler SetThreadStackGuarantee GetLastError GetCurrentThread HeapReAlloc LCMapStringW CreateFileW GetCurrentProcess CompareStringW CloseHandle Sleep GetModuleHandleA GetProcAddress TryAcquireSRWLockExclusive HeapFree GetStdHandle GetConsoleMode FlsFree WaitForSingleObject FlsSetValue MultiByteToWideChar WriteConsoleW SetLastError WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex RtlLookupFunctionEntry GetModuleHandleW FormatMessageW HeapAlloc GetCurrentDirectoryW RtlCaptureContext AcquireSRWLockExclusive GetEnvironmentVariableW AcquireSRWLockShared ReleaseSRWLockShared FreeLibrary FlsGetValue FlsAlloc ReleaseSRWLockExclusive GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent RtlUnwindEx EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RtlPcToFileHeader WriteFile GetModuleFileNameW ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW

oleaut32

GetErrorInfo SafeArrayCreate SafeArrayAccessData SafeArrayUnaccessData SysFreeString SafeArrayCreateVector SafeArrayGetUBound SafeArrayPutElement SysStringLen SysAllocStringLen SafeArrayGetLBound

bcrypt

BCryptGenRandom

psapi

GetModuleFileNameExW GetModuleBaseNameW EnumProcessModulesEx

ntdll

NtWriteFile RtlNtStatusToDosError

advapi32

SystemFunction036