678e14131fd1d0501e4d3c23074c320d[.]exe

General

Target
678e14131fd1d0501e4d3c23074c320d.exe
Size 4.2MB
Sample240302-f4ve7sbc39
SHA256 e1f34d829af2d8a889df3c978822415d95373d057412e4becf48b655e00ff431
MD5 678e14131fd1d0501e4d3c23074c320d
SHA1 a8455d82ce9d3b6ec944d5b7e1ae5e8cd9b1f628
SHA512 39cc0e0855a29c74518d0f22001b5b240e7b779b5a310002b6f4c5fae993bf78bb25d4572754f4539013a938e634ef839f5df4c67c482ec3560164eb04d61190
SSDEEP 98304:R+TlrsT5SFhvQXOYCBhsUbZMgCWhsR9r66Kc4yrgSt:KRsT5SXvQh8K6SgCWhsHbYyrge
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

678e14131fd1d0501e4d3c23074c320d.exe

.exe 4.2MB

678e14131fd1d0501e4d3c23074c320d.exe

IMPHASH 835e7ff9bbff8c440158acd0a81735f5
SHA256 e1f34d829af2d8a889df3c978822415d95373d057412e4becf48b655e00ff431
MD5 678e14131fd1d0501e4d3c23074c320d
SHA1 a8455d82ce9d3b6ec944d5b7e1ae5e8cd9b1f628
SHA512 39cc0e0855a29c74518d0f22001b5b240e7b779b5a310002b6f4c5fae993bf78bb25d4572754f4539013a938e634ef839f5df4c67c482ec3560164eb04d61190
SSDEEP 98304:R+TlrsT5SFhvQXOYCBhsUbZMgCWhsR9r66Kc4yrgSt:KRsT5SXvQh8K6SgCWhsHbYyrge
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

41:9c:65:a5:82:12:f0:0d:75:80:7f:1b:e4:a2:93:36:89:bc:19:8e:48:45:37:a4:46:6f:eb:73:62:19:e6:0e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5251371f362b4011042b13043a2d223e0f19152c2014093e313d075d110f3d082e50,POSTALCODE=10820,ST=0b1c1115005f5c4e061704171b001d03091c1310114b0c1a02+ST=0b1c1115494a5c52100110515d52141b57170d14161d12025206141340084056005707170746501e16121203571c1452160c10121450010500175112041a055b0c0b0a070b

Chains

Feb 29, 2024

Minor OS version

0

Major OS version

5

Entry point

12055

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bibit82\xiyoma tiwecikewos_but\tacecu\kiwomip.pdb

kernel32

CreateFileA GetConsoleAliasExesA SetComputerNameExA GetConsoleAliasExesLengthA InterlockedIncrement ReadConsoleA GetConsoleAliasA AddConsoleAliasW GetFileAttributesExA GetTickCount GenerateConsoleCtrlEvent FindNextVolumeMountPointA GetConsoleTitleA ReadConsoleW GlobalAlloc GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA ReadFile GetTempFileNameW CreateDirectoryA GetLastError SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA SetStdHandle LoadLibraryA WriteConsoleA SetCalendarInfoW GetNumberFormatW GetVersionExA GetVolumeInformationW CloseHandle GetModuleFileNameW GetComputerNameA HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree WideCharToMultiByte SetHandleCount GetStdHandle GetFileType DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetConsoleCP GetConsoleMode FlushFileBuffers TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA InitializeCriticalSectionAndSpinCount RtlUnwind GetConsoleOutputCP WriteConsoleW MultiByteToWideChar HeapSize LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetAltTabInfoA SetMenu LoadKeyboardLayoutA CharUpperBuffA

gdi32

StretchDIBits

Sharing