5d156ab536c3beab66eeff3d1376db29

Sharing

Copy URL Twitter E-mail

General

Target
5d156ab536c3beab66eeff3d1376db29
Size 122KB
Sample240115-pl1zpsffcl
SHA256 ec57c3b8f76f519e74e2011dc3df10ad4677939526eb8e7e92f9aa4ad09093ad
MD5 5d156ab536c3beab66eeff3d1376db29
SHA1 b2bf4cd0a2467c5b39323ebe37b8c0a4315a0055
SHA512 14410862ff8e2c0475be92a7149ba012246d5bf0e547fb065f8d283015f82a56b45ac55acd4d8d4254cf2f163a257939ce592af2637e630780413fa68735ef45
SSDEEP 1536:ZmgDAAg80OAshx5ahNFuFcTsuG+2J1zsw5KA/oWOvWFE2F5scSRfT6+OyJnsrSt6:nAqx5quFhAI6WMfYyJsrSteJwK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

5d156ab536c3beab66eeff3d1376db29

.exe 122KB

5d156ab536c3beab66eeff3d1376db29

IMPHASH b341e4693998867a277df3a1616ed62f
SHA256 ec57c3b8f76f519e74e2011dc3df10ad4677939526eb8e7e92f9aa4ad09093ad
MD5 5d156ab536c3beab66eeff3d1376db29
SHA1 b2bf4cd0a2467c5b39323ebe37b8c0a4315a0055
SHA512 14410862ff8e2c0475be92a7149ba012246d5bf0e547fb065f8d283015f82a56b45ac55acd4d8d4254cf2f163a257939ce592af2637e630780413fa68735ef45
SSDEEP 1536:ZmgDAAg80OAshx5ahNFuFcTsuG+2J1zsw5KA/oWOvWFE2F5scSRfT6+OyJnsrSt6:nAqx5quFhAI6WMfYyJsrSteJwK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

f1:4e:71:cd:c1:eb:89:06:25:ee:55:9c:50:d2:66:d7:77:35:6e:7c

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 15, 2024

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 4, 2006 - Apr 26, 2012

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:46:9e:cb:00:04:00:00:00:65

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 4, 2006 - Oct 4, 2007

Minor OS version

Major OS version

Entry point

6938

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

mpr

WNetCancelConnection2A WNetAddConnection2A

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

kernel32

Sleep GetTimeFormatA GetDateFormatA FileTimeToSystemTime FileTimeToLocalFileTime GetSystemTimeAsFileTime SetConsoleCursorPosition SetConsoleCtrlHandler SetPriorityClass GetCurrentProcess GetComputerNameA GetLastError SetLastError GetTickCount CloseHandle CreateFileA WriteFile GetStdHandle GetModuleHandleA WideCharToMultiByte GetVersion GetModuleFileNameA GetLocaleInfoA GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType GetConsoleScreenBufferInfo FillConsoleOutputCharacterA LocalAlloc LoadLibraryA LocalFree SetHandleCount FlushFileBuffers IsBadStringPtrA lstrlenA HeapSize SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle HeapAlloc HeapFree RtlUnwind GetProcAddress ExitProcess ReadConsoleInputA SetConsoleMode GetConsoleMode ExitThread ResumeThread CreateThread EnterCriticalSection LeaveCriticalSection GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue TlsAlloc TlsSetValue TlsFree LCMapStringA MultiByteToWideChar LCMapStringW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapDestroy HeapCreate GetStringTypeA GetStringTypeW InitializeCriticalSection GetConsoleCP

user32

GetSysColorBrush EndDialog SetWindowTextA GetDlgItem SetCursor InflateRect SendMessageA DialogBoxIndirectParamA LoadCursorA wsprintfA

gdi32

SetMapMode StartDocA StartPage EndPage EndDoc GetDeviceCaps

comdlg32

PrintDlgA

advapi32

RegConnectRegistryA RegCreateKeyA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

5d156ab536c3beab66eeff3d1376db29

PE Signature issue

mpr

version

kernel32

user32

gdi32

comdlg32

advapi32

generic