9a7daa20189a9dd8bed91141c0757dfa

General

Target
9a7daa20189a9dd8bed91141c0757dfa
Size 4.4MB
Sample240214-cmscqsed4s
SHA256 02f939659b3cef0b65d0104a9ac9e9dba507beb6f02be7246729906dde9c10da
MD5 9a7daa20189a9dd8bed91141c0757dfa
SHA1 aff7eda9049a51332d2b752e66445885525d3be5
SHA512 d24fca9a9110cea21bc051cf753f52875cafd32ce7d29ebb338f68b805bca66d5ea573297f4822ff86fe4949e59070596c86356ac4a22fef07804d806068a031
SSDEEP 98304:AYoPU39MAEZxdHeQCxaVf6cl3M/kVA3C5ZpcVzQsXchQDWrkq5CQAOGDf:NOAEheQcqf6cl3M/TiASsXchQIpAO8f
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9a7daa20189a9dd8bed91141c0757dfa

.exe 4.4MB

9a7daa20189a9dd8bed91141c0757dfa

IMPHASH 1d03ad9b9e9a9068c266e5f5e715b4b7
SHA256 02f939659b3cef0b65d0104a9ac9e9dba507beb6f02be7246729906dde9c10da
MD5 9a7daa20189a9dd8bed91141c0757dfa
SHA1 aff7eda9049a51332d2b752e66445885525d3be5
SHA512 d24fca9a9110cea21bc051cf753f52875cafd32ce7d29ebb338f68b805bca66d5ea573297f4822ff86fe4949e59070596c86356ac4a22fef07804d806068a031
SSDEEP 98304:AYoPU39MAEZxdHeQCxaVf6cl3M/kVA3C5ZpcVzQsXchQDWrkq5CQAOGDf:NOAEheQcqf6cl3M/TiASsXchQIpAO8f
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

00:00:ca:42:5f:20:bf:69:b5:6f:d5:e0:aa:3a:64:ff:62:51:47:d1:42:48:5e:b1:dd:4a:c4:27:cc:c9:57:80

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10104

Chains

Feb 12, 2024

Minor OS version

0

Major OS version

5

Entry point

9136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dufif\getipuhuk\yopolojabetole-wawafikasak\holigik-zad.pdb

kernel32

GetCommandLineW GetThreadContext FileTimeToDosDateTime EnumResourceNamesW SetPriorityClass GetNativeSystemInfo lstrlenA GetConsoleAliasesLengthW CopyFileExW TlsGetValue GetDriveTypeW SetEndOfFile InterlockedIncrement GetCommState InterlockedDecrement GetSystemWindowsDirectoryW GetNamedPipeHandleStateA WaitForSingleObject SetEvent FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetSystemTimeAsFileTime GetPrivateProfileStringW WriteFile FindResourceExA GetPrivateProfileIntA LoadLibraryW GetConsoleMode CopyFileW SetConsoleMode SetConsoleCursorPosition IsDBCSLeadByte GetOverlappedResult GetStartupInfoW GlobalUnlock LCMapStringA GetFileSizeEx GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc OpenMutexA LocalAlloc IsSystemResumeAutomatic SetCurrentDirectoryW WriteProfileSectionW HeapWalk FindAtomA Process32NextW CreateIoCompletionPort FindFirstChangeNotificationA FreeEnvironmentStringsW FatalAppExitA GetCurrentThreadId SetThreadAffinityMask OpenSemaphoreW DeleteFileW ReadConsoleOutputCharacterW GetSystemTime UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr RaiseException Sleep ExitProcess GetModuleFileNameA GetStdHandle TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle GetModuleHandleA

user32

GetTitleBarInfo

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

9a7daa20189a9dd8bed91141c0757dfa

PE Signature issue

kernel32

user32

winhttp

generic