ee8de65185430eb8113760020a693429d659f58ec116e0eb57da73f0de1487e5

General

Target
ee8de65185430eb8113760020a693429d659f58ec116e0eb57da73f0de1487e5
Size 4.2MB
Sample240404-21198sdf44
SHA256 ee8de65185430eb8113760020a693429d659f58ec116e0eb57da73f0de1487e5
MD5 6fa3b711579c743f8f3c91803fc0aac6
SHA1 1c37b1dff10a443831dd9b4f61a6e3a4a89006cd
SHA512 5e84f92b1484c14ed4d7a37c3a80744711682927d2161d31c7a016f681607a741000b0b0f28baa58a1b3cca9bb0fffabab191eea629d46b1d0d49ffcddcf1015
SSDEEP 98304:zVQJ2ZY4uiKZg04mgLnQ7YSzOAwl4UEW+z25MLAPf/hkNBhqZmZE:SJ9mKGLQvKZzgNLQHSNBhqZD
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ee8de65185430eb8113760020a693429d659f58ec116e0eb57da73f0de1487e5

.exe 4.2MB

ee8de65185430eb8113760020a693429d659f58ec116e0eb57da73f0de1487e5

IMPHASH 6c17cd221979c51b4b1f1bc0b7dc863e
SHA256 ee8de65185430eb8113760020a693429d659f58ec116e0eb57da73f0de1487e5
MD5 6fa3b711579c743f8f3c91803fc0aac6
SHA1 1c37b1dff10a443831dd9b4f61a6e3a4a89006cd
SHA512 5e84f92b1484c14ed4d7a37c3a80744711682927d2161d31c7a016f681607a741000b0b0f28baa58a1b3cca9bb0fffabab191eea629d46b1d0d49ffcddcf1015
SSDEEP 98304:zVQJ2ZY4uiKZg04mgLnQ7YSzOAwl4UEW+z25MLAPf/hkNBhqZmZE:SJ9mKGLQvKZzgNLQHSNBhqZD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

77:e8:1d:28:29:70:69:7d:49:31:da:b6:f3:ef:d5:f2:8d:ea:76:7a:ac:10:6d:a6:ba:d8:a2:aa:fb:a4:cc:05

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b0300053323224d0036132e0352222e2216260b17250f343c151c22001a3b0d00,POSTALCODE=10815,ST=0b1c1115005f5c4e130a09061b01101e15030d1400004d071702+ST=0b1c1115494a5c0a405601000f17134502120d431112025a0d5102560055050452040c11020709125303081f0a5b1f1d400c1808040a15195a101d060a1a055b0c0b0a070b

Chains

Apr 4, 2024

Minor OS version

1

Major OS version

5

Entry point

14675

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wofitul\hano.pdb

kernel32

SetThreadContext GetConsoleAliasesLengthW GetLocaleInfoA GlobalAddAtomA GetConsoleAliasA QueryDosDeviceA _lcreat MoveFileWithProgressA GetNumberFormatA ReadConsoleW GetConsoleCP GetVolumeInformationA GlobalFindAtomA InitializeCriticalSectionAndSpinCount ReadConsoleInputA FindNextVolumeW WriteConsoleW FileTimeToSystemTime FindResourceA GetTempPathW GetLastError ChangeTimerQueueTimer SetLastError GetProcAddress LoadLibraryA InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW RemoveDirectoryW VirtualLock GetModuleFileNameA GetCurrentDirectoryA GetWindowsDirectoryW GetStringTypeW OutputDebugStringW FlushFileBuffers CreateFileA GetNumaNodeProcessorMask ExitThread GetEnvironmentVariableW IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapSize HeapFree GetCurrentThreadId EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapAlloc GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleMode SetFilePointerEx SetStdHandle CreateFileW

user32

CharUpperBuffA DrawCaption

gdi32

SetTextColor

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

ee8de65185430eb8113760020a693429d659f58ec116e0eb57da73f0de1487e5

PE Signature issue

kernel32

user32

gdi32

advapi32

generic