6e6ec4420bdaf62ec7f5bb5a5cdf720f763f3ce3d431ef96aab46735c323ab2a

General

Target
6e6ec4420bdaf62ec7f5bb5a5cdf720f763f3ce3d431ef96aab46735c323ab2a
Size 4.1MB
Sample240404-pzhehsga3s
SHA256 6e6ec4420bdaf62ec7f5bb5a5cdf720f763f3ce3d431ef96aab46735c323ab2a
MD5 e3879740ca9f2dd68af31bbd0919e45f
SHA1 6d02df827785e15534a25bef1ec76b617bcfbd03
SHA512 3d30e1fecacf0a3066271947939a1adbc34d52b7ed7237ac41d29667fad203db8663202d49b51fc2d743fe8907502055c946e7923bcf47ed86696df5bb6ec4c9
SSDEEP 98304:e5uGUxyGNHvR+rg+uWcdiM0F3ZjLTFnqJK2M+8rkIIZEcfA:VNJ+k+OSKRkoZEco
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

6e6ec4420bdaf62ec7f5bb5a5cdf720f763f3ce3d431ef96aab46735c323ab2a

.exe 4.1MB

6e6ec4420bdaf62ec7f5bb5a5cdf720f763f3ce3d431ef96aab46735c323ab2a

IMPHASH ec3abec3d94db3f742ac97930ba3d6d5
SHA256 6e6ec4420bdaf62ec7f5bb5a5cdf720f763f3ce3d431ef96aab46735c323ab2a
MD5 e3879740ca9f2dd68af31bbd0919e45f
SHA1 6d02df827785e15534a25bef1ec76b617bcfbd03
SHA512 3d30e1fecacf0a3066271947939a1adbc34d52b7ed7237ac41d29667fad203db8663202d49b51fc2d743fe8907502055c946e7923bcf47ed86696df5bb6ec4c9
SSDEEP 98304:e5uGUxyGNHvR+rg+uWcdiM0F3ZjLTFnqJK2M+8rkIIZEcfA:VNJ+k+OSKRkoZEco
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c3:41:a1:c7:c1:14:de:9a:a6:0e:05:b8:4e:42:43:61:46:01:39:1e:bd:cc:a3:18:d1:1d:64:00:45:07:2e:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b0300053323224d0036132e0352222e2216260b17250f343c151c22001a3b0d00,POSTALCODE=10803,ST=0b1c1115005f5c4e130a09061b01101e15030d1400004d071702+ST=0b1c1115494a5c0a405601000f17134502120d431112025a0d5102560055050452040c11020709125303081f0a5b1f1d400c1808040a15195a101d060a1a055b0c0b0a070b

Chains

Mar 29, 2024

Minor OS version

1

Major OS version

5

Entry point

8895

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalUnlock GetDateFormatW HeapReAlloc GetConsoleAliasesLengthW HeapFree SetComputerNameW GetModuleHandleW GetUserDefaultLangID GlobalAlloc LoadLibraryW GetLocaleInfoW GetConsoleAliasExesLengthW WriteConsoleOutputA GetAtomNameW CreateFileW WritePrivateProfileStringW GetThreadLocale GetProcAddress GetLongPathNameA HeapSize LoadLibraryA CreateHardLinkW FindFirstVolumeMountPointW SetConsoleOutputCP FindAtomA GlobalFindAtomW CreatePipe GetModuleFileNameA SetConsoleTitleW HeapSetInformation GetCurrentDirectoryA DeleteCriticalSection SetCalendarInfoA SetFileAttributesW HeapAlloc GetLastError ExitProcess DecodePointer GetCommandLineW GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind MultiByteToWideChar SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers ReadFile CloseHandle

user32

GetMonitorInfoW LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

6e6ec4420bdaf62ec7f5bb5a5cdf720f763f3ce3d431ef96aab46735c323ab2a

PE Signature issue

kernel32

user32

generic