029cfa383c2a3c9934a370a3b88f93e1[.]exe

General

Target
029cfa383c2a3c9934a370a3b88f93e1.exe
Size 4.1MB
Sample240126-l9mkfacfdp
SHA256 452c2fae1cf93f933ef30e73cd3ae5d8afc14286b0aa58a512c40f3e81e5a922
MD5 029cfa383c2a3c9934a370a3b88f93e1
SHA1 dbf3495d86a7ed0ef39c46e29b0c8b9701e6a59a
SHA512 889df24541d0eeb701723c65d1f818d65e0b114c26cb4bc5f42f76c9c28710a5a805045f25a2b1d42c89557ae2acf187f7808cdc563b65a998a7d08ed17c2bb4
SSDEEP 98304:H+godgzD5J7Vt33OUYbXVn2+WcYvDBrpcjynumtC/B+xaGNkE:H+g82Jt3+UYbXVWcYv1y6Tto+xME
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

029cfa383c2a3c9934a370a3b88f93e1.exe

.exe 4.1MB

029cfa383c2a3c9934a370a3b88f93e1.exe

IMPHASH 8c68e70cc24d87305de76ebb23297bcf
SHA256 452c2fae1cf93f933ef30e73cd3ae5d8afc14286b0aa58a512c40f3e81e5a922
MD5 029cfa383c2a3c9934a370a3b88f93e1
SHA1 dbf3495d86a7ed0ef39c46e29b0c8b9701e6a59a
SHA512 889df24541d0eeb701723c65d1f818d65e0b114c26cb4bc5f42f76c9c28710a5a805045f25a2b1d42c89557ae2acf187f7808cdc563b65a998a7d08ed17c2bb4
SSDEEP 98304:H+godgzD5J7Vt33OUYbXVn2+WcYvDBrpcjynumtC/B+xaGNkE:H+g82Jt3+UYbXVWcYv1y6Tto+xME
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

b6:d7:a6:93:c9:df:1a:bb:96:ae:84:73:f9:1e:c6:9e:3e:16:7a:97:2b:8b:e6:7b:00:88:8e:8e:ae:ec:9c:c3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10700,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

Chains

Jan 25, 2024

Minor OS version

0

Major OS version

5

Entry point

7352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ReadConsoleOutputAttribute CreateJobObjectW AddConsoleAliasW GetFileAttributesExA GetModuleHandleW GetTickCount LoadLibraryW WriteConsoleW GetStartupInfoW GetLastError SetLastError GetProcAddress AttachConsole VirtualAlloc SetVolumeLabelW SetComputerNameExA RemoveDirectoryA LoadLibraryA InterlockedExchangeAdd LocalAlloc QueryDosDeviceW FindNextChangeNotification GlobalFindAtomW GetModuleFileNameA FindFirstVolumeMountPointA PurgeComm DeleteFileW GetCurrentProcessId MoveFileWithProgressW DebugBreak MoveFileW GetSystemDefaultLangID MultiByteToWideChar Sleep ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA HeapAlloc HeapReAlloc LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize RtlUnwind

advapi32

SetKernelObjectSecurity

Sharing