d640334471b714de448040f0303679a0add8b5f9d978411f7f7fc7d807c07b78

General

Target
d640334471b714de448040f0303679a0add8b5f9d978411f7f7fc7d807c07b78
Size 4.1MB
Sample240404-pn2c9afc2w
SHA256 d640334471b714de448040f0303679a0add8b5f9d978411f7f7fc7d807c07b78
MD5 3255c28836c09b16c9f990036de122f1
SHA1 e882e2c81676fe309c9723192e192e5e0bbfdc97
SHA512 d94d71d38b06f7f8be8809ee7c08d64b9e4c30d2647548dbd95848abe526e2dcac9e83a5c6d010d2ca4f764236f7cb3a33588373934ad562d07c70207179d7bb
SSDEEP 98304:u5uGUxyGNHvR+rg+uWcdiM0F3ZjLTFnqJK2M+8rkIIZEcf9:lNJ+k+OSKRkoZEcl
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

d640334471b714de448040f0303679a0add8b5f9d978411f7f7fc7d807c07b78

.exe 4.1MB

d640334471b714de448040f0303679a0add8b5f9d978411f7f7fc7d807c07b78

IMPHASH ec3abec3d94db3f742ac97930ba3d6d5
SHA256 d640334471b714de448040f0303679a0add8b5f9d978411f7f7fc7d807c07b78
MD5 3255c28836c09b16c9f990036de122f1
SHA1 e882e2c81676fe309c9723192e192e5e0bbfdc97
SHA512 d94d71d38b06f7f8be8809ee7c08d64b9e4c30d2647548dbd95848abe526e2dcac9e83a5c6d010d2ca4f764236f7cb3a33588373934ad562d07c70207179d7bb
SSDEEP 98304:u5uGUxyGNHvR+rg+uWcdiM0F3ZjLTFnqJK2M+8rkIIZEcf9:lNJ+k+OSKRkoZEcl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c3:41:a1:c7:c1:14:de:9a:a6:0e:05:b8:4e:42:43:61:46:01:39:1e:bd:cc:a3:18:d1:1d:64:00:45:07:2e:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522303292b2005041027200a5d5d12051031230d161c143d24542553452740323d28,POSTALCODE=10802,ST=0b1c1115005f5c4e061704171b0617160407045b0c1704+ST=0b1c1115494a5c11101704105c1f07410b17550d0e1c0c5a070a090e025212541c510f17091909155406121d141b0850180d0a16140e53100100171b1d12055b0c0b0a070b

Chains

Mar 29, 2024

Minor OS version

1

Major OS version

5

Entry point

8895

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalUnlock GetDateFormatW HeapReAlloc GetConsoleAliasesLengthW HeapFree SetComputerNameW GetModuleHandleW GetUserDefaultLangID GlobalAlloc LoadLibraryW GetLocaleInfoW GetConsoleAliasExesLengthW WriteConsoleOutputA GetAtomNameW CreateFileW WritePrivateProfileStringW GetThreadLocale GetProcAddress GetLongPathNameA HeapSize LoadLibraryA CreateHardLinkW FindFirstVolumeMountPointW SetConsoleOutputCP FindAtomA GlobalFindAtomW CreatePipe GetModuleFileNameA SetConsoleTitleW HeapSetInformation GetCurrentDirectoryA DeleteCriticalSection SetCalendarInfoA SetFileAttributesW HeapAlloc GetLastError ExitProcess DecodePointer GetCommandLineW GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers ReadFile CloseHandle

user32

GetMonitorInfoW LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

d640334471b714de448040f0303679a0add8b5f9d978411f7f7fc7d807c07b78

PE Signature issue

kernel32

user32

generic