93b5e003653f38ddaa5f17ac6265e667

General

Target
93b5e003653f38ddaa5f17ac6265e667
Size 4.4MB
Sample240206-d2j6caeeb4
SHA256 ea0caa6312daceeb1afafa56060d7de28ae4a91c814c79c4ddbf6f2e751d50c3
MD5 93b5e003653f38ddaa5f17ac6265e667
SHA1 0d00421e970dba8ca2ba409e1861ea3b87e61459
SHA512 98a8347a46ea55aff1c6fe68157054745bc33acb399114d8b0e347f87306f6c4276fed367857fa9546d7c8776a9bb6ec96f51a47a234c2c81bb7de139ee22395
SSDEEP 98304:W4k4uKmwYOjbaFBfnLleT0Rnt3S9L2/4NAzWQtEx/rh8ATEYgiHe:64uYYOKDleT0RhS9L+PWMMDQke
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

93b5e003653f38ddaa5f17ac6265e667

.exe 4.4MB

93b5e003653f38ddaa5f17ac6265e667

IMPHASH c2177a2021a127fae92a922150801df7
SHA256 ea0caa6312daceeb1afafa56060d7de28ae4a91c814c79c4ddbf6f2e751d50c3
MD5 93b5e003653f38ddaa5f17ac6265e667
SHA1 0d00421e970dba8ca2ba409e1861ea3b87e61459
SHA512 98a8347a46ea55aff1c6fe68157054745bc33acb399114d8b0e347f87306f6c4276fed367857fa9546d7c8776a9bb6ec96f51a47a234c2c81bb7de139ee22395
SSDEEP 98304:W4k4uKmwYOjbaFBfnLleT0Rnt3S9L2/4NAzWQtEx/rh8ATEYgiHe:64uYYOKDleT0RhS9L+PWMMDQke
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

da:d3:e5:6e:04:77:2c:18:91:e0:e2:4c:06:60:a2:bb:41:35:30:24:29:4a:46:e7:1e:7a:f5:6b:0d:c6:2e:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10124

Chains

Feb 5, 2024

Minor OS version

0

Major OS version

5

Entry point

10059

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cidobexo\kasaxisefipa.pdb

kernel32

WriteConsoleOutputCharacterW GetConsoleAliasesLengthW EnumDateFormatsExW InterlockedIncrement _lwrite InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW SetVolumeMountPointW GetModuleHandleW EnumCalendarInfoExW IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA GetComputerNameExA lstrcpynW SetConsoleCursorPosition LocalReAlloc CreateTimerQueue ReadFile GetTimeZoneInformation lstrlenW GetConsoleOutputCP InterlockedExchange GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW RemoveDirectoryA BuildCommDCBW ResetEvent GetLocalTime LoadLibraryA OpenMutexA WriteConsoleA SetEnvironmentVariableA GetModuleFileNameA GetOEMCP HeapSetInformation GetConsoleTitleW VirtualProtect SetCalendarInfoA ReleaseMutex FindFirstVolumeW GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetConsoleProcessList CreateFileA GetMailslotInfo GetSystemDefaultLangID SetStdHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

93b5e003653f38ddaa5f17ac6265e667

PE Signature issue

kernel32

user32

generic