b9194422e3db94f833f4abace43538dd

General

Target
b9194422e3db94f833f4abace43538dd
Size 3.2MB
Sample240307-thpjqaga91
SHA256 019cbdc39cce9b69a0b422cc3c19389b40c56c23979d79f789be771d08294d38
MD5 b9194422e3db94f833f4abace43538dd
SHA1 1f7193e5c33585eb8ea6e8c32440668d4e791019
SHA512 79c782a6aa446c60f04be9b0daacbc068ce885c7e74b51a9961f266b72f81f94028a29b3beaba42b23b1709ea7aec49f079bfd82968bd04baf72a2428e971930
SSDEEP 98304:OVdw+bLySP4K84nUOywFhEejkG+FlS2Si5gYnYSmZIVN67MF5D5iO:OA+bLLQK84wwFPjkhlSaGUFmZYN67k5R
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b9194422e3db94f833f4abace43538dd

.exe 3.2MB

b9194422e3db94f833f4abace43538dd

IMPHASH ec34e8a1d92e6ad47bf7797fe0ce71a2
SHA256 019cbdc39cce9b69a0b422cc3c19389b40c56c23979d79f789be771d08294d38
MD5 b9194422e3db94f833f4abace43538dd
SHA1 1f7193e5c33585eb8ea6e8c32440668d4e791019
SHA512 79c782a6aa446c60f04be9b0daacbc068ce885c7e74b51a9961f266b72f81f94028a29b3beaba42b23b1709ea7aec49f079bfd82968bd04baf72a2428e971930
SSDEEP 98304:OVdw+bLySP4K84nUOywFhEejkG+FlS2Si5gYnYSmZIVN67MF5D5iO:OA+bLLQK84wwFPjkhlSaGUFmZYN67k5R
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

4d:1a:f9:12:00:e6:b5:54:87:c0:ca:6b:36:d1:63:d6:91:fb:6b:57

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=LLC \"STAR SOFT\",O=LLC \"STAR SOFT\",POSTALCODE=46008,STREET=str. Shashkevycha\, 3,L=Ternopil,ST=Ternopilska,C=UA

Chains

Mar 6, 2024

Minor OS version

0

Major OS version

4

Entry point

3280640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

setupapi

SetupDiGetClassDevsExW SetupDiEnumDeviceInfo SetupDiOpenDevRegKey SetupDiDestroyDeviceInfoList

kernel32

GetEnvironmentStrings GetVersion GetVersionExA ExitProcess VirtualAlloc SetEvent GetLastError OpenEventW CreateThread CreateFileMappingA TlsGetValue CompareStringA TlsSetValue GetCommandLineW WriteFile QueryPerformanceCounter lstrlenA HeapReAlloc HeapAlloc GetOEMCP GetACP GetCPInfo RtlUnwind HeapFree VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA LCMapStringW GetFileType GetSystemTimeAsFileTime GetProcAddress GetCommandLineA GetModuleHandleA LoadLibraryA MultiByteToWideChar GetStringTypeA GetStringTypeW LCMapStringA GetModuleHandleW GetStdHandle SetHandleCount GetEnvironmentStringsW WideCharToMultiByte GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW

user32

DialogBoxParamA wsprintfA CreateWindowExA CreateDialogParamA GetDC MessageBoxA GetSystemMetrics CallWindowProcA CreateWindowExW SendMessageA

gdi32

GetStockObject Rectangle GetDeviceCaps

advapi32

RegCreateKeyExA AllocateAndInitializeSid RegQueryValueExW RegCloseKey AllocateLocallyUniqueId

ole32

CoInitialize CoTaskMemAlloc CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

b9194422e3db94f833f4abace43538dd

PE Signature issue

comctl32

setupapi

kernel32

user32

gdi32

advapi32

ole32

generic