9318e5cf71ad9673b85ee4f916aab022

General

Target
9318e5cf71ad9673b85ee4f916aab022
Size 4.4MB
Sample240205-1ta9ssbbgl
SHA256 f98cd274386ef966648db3d0c5c8b09e6833cf04931116ed5374989e419f3077
MD5 9318e5cf71ad9673b85ee4f916aab022
SHA1 48fe502b109fee5df082ac7faace1fe385478f11
SHA512 e246ff5876233518ffce141b3557fc4c3c1511ac19cc62cccfd97a6897dbb638735d64aaba63560c4593109a0eadffa6537db7080b1d410e2da549153dd3d728
SSDEEP 98304:4ELoLpH/sE2wG7UlfzmO2yXJXUtxlKD9PYRfdrhY/VqT7Pze/:holkE1G7UZzmDyXD6drhYL/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9318e5cf71ad9673b85ee4f916aab022

.exe 4.4MB

9318e5cf71ad9673b85ee4f916aab022

IMPHASH bcd64e2657251d69bf082a6790bd215d
SHA256 f98cd274386ef966648db3d0c5c8b09e6833cf04931116ed5374989e419f3077
MD5 9318e5cf71ad9673b85ee4f916aab022
SHA1 48fe502b109fee5df082ac7faace1fe385478f11
SHA512 e246ff5876233518ffce141b3557fc4c3c1511ac19cc62cccfd97a6897dbb638735d64aaba63560c4593109a0eadffa6537db7080b1d410e2da549153dd3d728
SSDEEP 98304:4ELoLpH/sE2wG7UlfzmO2yXJXUtxlKD9PYRfdrhY/VqT7Pze/:holkE1G7UZzmDyXD6drhYL/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c4:bb:7c:47:53:ca:79:a9:db:12:e0:ef:de:57:b3:ba:5d:ab:33:a7:de:ed:dc:13:af:57:3d:e8:2e:d6:c6:38

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10124

Chains

Feb 5, 2024

Minor OS version

0

Major OS version

5

Entry point

10030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cex.pdb

kernel32

WriteConsoleOutputCharacterW GetConsoleAliasesLengthW EnumDateFormatsExW InterlockedIncrement InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW GetSystemDefaultLCID GetModuleHandleW EnumCalendarInfoExW SetThreadUILanguage IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA SetVolumeMountPointA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA lstrcpynW SetConsoleCursorPosition GetMailslotInfo ReadFile CreateTimerQueue GetTimeZoneInformation lstrcatA lstrlenW GetConsoleOutputCP InterlockedExchange FillConsoleOutputCharacterW GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW ResetEvent GetLocalTime LoadLibraryA WriteConsoleA LocalAlloc BuildCommDCBAndTimeoutsW SetFileApisToANSI GetOEMCP HeapSetInformation GetConsoleTitleW GetCPInfoExA ReleaseMutex FindFirstVolumeW DeleteTimerQueueTimer GetCurrentProcessId GetConsoleProcessList GetModuleFileNameW LocalUnlock LCMapStringW LCMapStringA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

9318e5cf71ad9673b85ee4f916aab022

PE Signature issue

kernel32

user32

generic