59399529325fbd4c34a031efe298277b

General

Target
59399529325fbd4c34a031efe298277b
Size 351KB
Sample240113-vcwlhsdeh8
SHA256 a7dd08771e0b61f4adc9071bf6de08518be1b7260e631aac85eebf02dc28be3a
MD5 59399529325fbd4c34a031efe298277b
SHA1 861997ddb05e50afdc899c8aae4ea958852b4def
SHA512 6c1a5ac2d97ee7fc5339a47914ea5fe5d57caf7d786ff50eee3149068a2cf7928c1df46ad0cc803b98470c6601ca27cbf6d9daf41d5737b9bd54f3b50673390a
SSDEEP 6144:NaIgsPIvmVYSTEMt6ZeaeTgey3aB3t84AOX+9kzoYvFdaY+3Nv5tvo96RXCBlr:NxcmVTTEMt6ZheT+AVsWan3Nv5tg96RG
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

59399529325fbd4c34a031efe298277b

.exe 351KB

59399529325fbd4c34a031efe298277b

IMPHASH b535572a0356e55475d8da75f1f57f3e
SHA256 a7dd08771e0b61f4adc9071bf6de08518be1b7260e631aac85eebf02dc28be3a
MD5 59399529325fbd4c34a031efe298277b
SHA1 861997ddb05e50afdc899c8aae4ea958852b4def
SHA512 6c1a5ac2d97ee7fc5339a47914ea5fe5d57caf7d786ff50eee3149068a2cf7928c1df46ad0cc803b98470c6601ca27cbf6d9daf41d5737b9bd54f3b50673390a
SSDEEP 6144:NaIgsPIvmVYSTEMt6ZeaeTgey3aB3t84AOX+9kzoYvFdaY+3Nv5tvo96RXCBlr:NxcmVTTEMt6ZheT+AVsWan3Nv5tg96RG
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

70:e4:f1:c9:f0:6a:91:f1:3d:a2:0c:6e:24:16:75:c6:09:ad:ac:75:3e:4e:99:f0:fd:39:98:da:d0:6a:dc:de

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Chains

Jun 15, 2021

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Minor OS version

0

Major OS version

6

Entry point

47817

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

Sleep GetSystemInfo GetTickCount GetModuleHandleA GetModuleHandleW GetProcAddress LoadResource LockResource FindResourceW CreateFileW HeapSize GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW WriteConsoleW

user32

SendMessageCallbackA MessageBoxA MessageBeep

Sharing

General

Malware Config

Signatures

File Explorer

59399529325fbd4c34a031efe298277b

PE Signature issue

kernel32

user32

generic