cd5b18ffe74c751de1645261623dafc9c270c90e60c284d243cf348d6bdc2feb

General

Target
cd5b18ffe74c751de1645261623dafc9c270c90e60c284d243cf348d6bdc2feb
Size 4.1MB
Sample240328-rrfl3agd4y
SHA256 cd5b18ffe74c751de1645261623dafc9c270c90e60c284d243cf348d6bdc2feb
MD5 341b98014272b07ef8b9eeaf696f1d23
SHA1 c185d72dd9e4aab8a1087443eaf90949ceb75831
SHA512 08c4ccfe3f21ef9a5e907abbcf755b3d8f46cf3ef72b0d886c4957ca7d56b3669256ab7170000525c45a5d9043b46f39b4c6c4a72c7adecb7ca770b2bd7a61fd
SSDEEP 98304:3iGq3KIeR6cCqKvuM4K2x9+Buk8CSmwN6LwJf1h9DYvlY:o0DS8x9+wVN60V1hdJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

cd5b18ffe74c751de1645261623dafc9c270c90e60c284d243cf348d6bdc2feb

.exe 4.1MB

cd5b18ffe74c751de1645261623dafc9c270c90e60c284d243cf348d6bdc2feb

IMPHASH 1b67119179f8385f294929b38dacfd5b
SHA256 cd5b18ffe74c751de1645261623dafc9c270c90e60c284d243cf348d6bdc2feb
MD5 341b98014272b07ef8b9eeaf696f1d23
SHA1 c185d72dd9e4aab8a1087443eaf90949ceb75831
SHA512 08c4ccfe3f21ef9a5e907abbcf755b3d8f46cf3ef72b0d886c4957ca7d56b3669256ab7170000525c45a5d9043b46f39b4c6c4a72c7adecb7ca770b2bd7a61fd
SSDEEP 98304:3iGq3KIeR6cCqKvuM4K2x9+Buk8CSmwN6LwJf1h9DYvlY:o0DS8x9+wVN60V1hdJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

3e:cf:da:6f:c9:29:43:d3:7d:8e:5c:3b:58:12:07:89:85:96:a6:8e:6c:5e:9e:c8:7f:9b:21:5a:a2:02:22:8c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522910322628070b250c52200b542f1a57031b422732351e332f4620190820022d0b,POSTALCODE=10831,ST=0b1c1115005f5c4e010b00101c041100031a0d10104b111d+ST=0b1c1115494a5c18101602500b53081d121c021c1b120f07110e12511d161a5003091c030c1053460e4113160e181d130101060d401252070f0f08001312055b0c0b0a070b

Chains

Mar 28, 2024

Minor OS version

1

Major OS version

5

Entry point

15398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jiyo-bezubedujo\demunipapuhoke\zemiguhacuc70\hedugevizosim.pdb

kernel32

ReadConsoleA GetCurrentProcess GetTickCount GetConsoleAliasesLengthA GetWindowsDirectoryA GlobalAlloc SetCommConfig GetLocaleInfoW GetSystemPowerStatus GetConsoleAliasExesLengthW GetVersionExW FindNextVolumeW GetConsoleAliasW WriteConsoleW CreateFileW GetEnvironmentVariableA ExitThread GetHandleInformation GetLastError GetProcAddress InterlockedIncrement PeekConsoleInputW RemoveDirectoryA LoadLibraryA SetConsoleCtrlHandler GetNumberFormatW SetFileApisToANSI QueryDosDeviceW GlobalFindAtomW GetModuleFileNameA FindFirstVolumeMountPointA VirtualProtect GetCurrentDirectoryA _lopen GetCurrentProcessId ResetWriteWatch GetVolumeInformationW OutputDebugStringW HeapReAlloc LoadLibraryExW FindResourceW MultiByteToWideChar EncodePointer DecodePointer ReadFile GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode DeleteCriticalSection ExitProcess GetModuleHandleExW HeapSize HeapFree SetFilePointerEx GetStdHandle GetFileType GetStartupInfoW HeapAlloc GetProcessHeap GetModuleFileNameW QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW LCMapStringW SetStdHandle CloseHandle

user32

ChangeMenuA DrawFrameControl CharUpperBuffW

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

cd5b18ffe74c751de1645261623dafc9c270c90e60c284d243cf348d6bdc2feb

PE Signature issue

kernel32

user32

advapi32

generic