Resubmissions

07/05/2024, 13:41

240507-qzkejshh4y7

24/02/2024, 05:38

240224-gbqrzsbg3s7

02/02/2024, 14:39

240202-r1e2wsafcm7

General

  • Target
    MediaCreationTool22H2.exe
  • Size 18.6MB
  • Sample240202-r1e2wsafcm
  • SHA256 690c8a63769d444fad47b7ddecee7f24c9333aa735d0bd46587d0df5cf15cde5
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • MediaCreationTool22H2.exe
    .exe 18.6MB

MediaCreationTool22H2.exe

  • IMPHASH d715fe1c9f60fa2c4d89588b638bb8e6
  • SHA256 690c8a63769d444fad47b7ddecee7f24c9333aa735d0bd46587d0df5cf15cde5
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
4a:b9:8b:9e:22:9d:2b:09:db:9a:a5:7b:11:6a:b9:66:e2:c2:ed:34:ed:f3:e6:2b:cc:35:ed:55:83:af:7e:26
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains

Feb 1, 2024

Minor OS version
0
Major OS version
10
Entry point
469424
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
SetupPrep.pdb