26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294

General

Target
26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294
Size 412KB
Sample231207-gs66asbbc4
SHA256 26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294
MD5 c28cc92a7c78b96bec58fa3e5398074a
SHA1 e33c3bd5f56d4152627501f7b8d3db62f7636dcf
SHA512 9b794d82cffb7ee7eafdc82ee955bf99eee2e09bbf9aa56adee16ee2aac399c0f5c8c5c1056b9dde7b90131c03ea4a77b0bff5cd278c3b39a297a7b08c4abf36
SSDEEP 12288:ir0/cxQev8EC1QdxTq+Oii1VUf0aJvb/x:e0/Tevs1QdNNg/Uf0aJvDx
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294

.exe 412KB

26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294

IMPHASH 562d80e80506d670bb0daaf0cbeebb79
SHA256 26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294
MD5 c28cc92a7c78b96bec58fa3e5398074a
SHA1 e33c3bd5f56d4152627501f7b8d3db62f7636dcf
SHA512 9b794d82cffb7ee7eafdc82ee955bf99eee2e09bbf9aa56adee16ee2aac399c0f5c8c5c1056b9dde7b90131c03ea4a77b0bff5cd278c3b39a297a7b08c4abf36
SSDEEP 12288:ir0/cxQev8EC1QdxTq+Oii1VUf0aJvb/x:e0/Tevs1QdNNg/Uf0aJvDx
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

04:c2:84:56:da:93:c0:81:de:0a:8f:5d:7b:bd:a3:38:f8:fa:df:9b:75:04:d2:39:fd:0e:ca:c3:3d:d3:80:72

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Dec 6, 2023

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

5

Entry point

26860

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GetModuleHandleA MultiByteToWideChar DeleteAtom InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA GetLastError HeapFree LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer CloseHandle HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale LoadLibraryA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle GetLocaleInfoW CreateFileA

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294

PE Signature issue

kernel32

generic