908a89a17743ee6a9317233913c3b0a2

General

Target
908a89a17743ee6a9317233913c3b0a2
Size 4.4MB
Sample240205-amncnsgcck
SHA256 e7422002cf9d5ac396f1a082d9e3135bd8e1d1df56c38f5d685963b95e8eaab9
MD5 908a89a17743ee6a9317233913c3b0a2
SHA1 5350ad3efe1f4a8a070c058763667dd922b58a8a
SHA512 3d672e96b586f6a421d684728afb109c00d8ff0c1ccc6dbe438f8f86b6a0e0756d1fb27bb90a38ee3f8145933c179e848a2a9861af6a11930672177cb8959cfb
SSDEEP 98304:ClbIFJfWkvSGgrg6VX28mJ9IFJodu5rhA/m7utM/Eh8h:uIFtSGRuX283FJodwrW/mTEh8h
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

908a89a17743ee6a9317233913c3b0a2

.exe 4.4MB

908a89a17743ee6a9317233913c3b0a2

IMPHASH 3e335ab1bd48187462dff6eb1356956c
SHA256 e7422002cf9d5ac396f1a082d9e3135bd8e1d1df56c38f5d685963b95e8eaab9
MD5 908a89a17743ee6a9317233913c3b0a2
SHA1 5350ad3efe1f4a8a070c058763667dd922b58a8a
SHA512 3d672e96b586f6a421d684728afb109c00d8ff0c1ccc6dbe438f8f86b6a0e0756d1fb27bb90a38ee3f8145933c179e848a2a9861af6a11930672177cb8959cfb
SSDEEP 98304:ClbIFJfWkvSGgrg6VX28mJ9IFJodu5rhA/m7utM/Eh8h:uIFtSGRuX283FJodwrW/mTEh8h
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

f2:e9:a4:83:e6:a3:6c:d7:50:33:21:88:38:ca:3d:98:7a:31:06:6d:ac:05:42:39:4a:e4:0e:c2:3f:20:40:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10094

Chains

Feb 1, 2024

Minor OS version

0

Major OS version

5

Entry point

4461015

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mulak.pdb

kernel32

EnterCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputW InterlockedPopEntrySList SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfoExA GetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx AddRefActCtx HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA IsWow64Process UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoA WriteConsoleOutputCharacterA GetFileAttributesExW GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTimeAsFileTime GetDiskFreeSpaceW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection RaiseException RtlUnwind HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType SetFilePointer HeapCreate VirtualFree VirtualAlloc ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

908a89a17743ee6a9317233913c3b0a2

PE Signature issue

kernel32

user32

generic