6b0801f293f48c47ae247d807e8b4369f0e4fdb2a60f7535d3193a38b492a6c9

General

Target
6b0801f293f48c47ae247d807e8b4369f0e4fdb2a60f7535d3193a38b492a6c9
Size 4.1MB
Sample240404-v2v2aadf2z
SHA256 6b0801f293f48c47ae247d807e8b4369f0e4fdb2a60f7535d3193a38b492a6c9
MD5 724c1ea556e8b35de744e16dd95d8073
SHA1 0225b7941de3659e23593b705cad5bf347cf1be0
SHA512 0beddb282e11e61fb711ecb3f33d00d56754885124e293949220c883ab21bc51f8ac3153a10dfa7490ff1cdae8184da278f8bc7cb92518c01f9778cbe9fe8b46
SSDEEP 98304:LH5J7CzszSbiwn7GrcYbqmT2oxXGbns7pL8WqJWTgf5R:1MU4iw7Yx2bns7pLfTgf/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

6b0801f293f48c47ae247d807e8b4369f0e4fdb2a60f7535d3193a38b492a6c9

.exe 4.1MB

6b0801f293f48c47ae247d807e8b4369f0e4fdb2a60f7535d3193a38b492a6c9

IMPHASH fa56d943dc82f953e906a16af5c62c5b
SHA256 6b0801f293f48c47ae247d807e8b4369f0e4fdb2a60f7535d3193a38b492a6c9
MD5 724c1ea556e8b35de744e16dd95d8073
SHA1 0225b7941de3659e23593b705cad5bf347cf1be0
SHA512 0beddb282e11e61fb711ecb3f33d00d56754885124e293949220c883ab21bc51f8ac3153a10dfa7490ff1cdae8184da278f8bc7cb92518c01f9778cbe9fe8b46
SSDEEP 98304:LH5J7CzszSbiwn7GrcYbqmT2oxXGbns7pL8WqJWTgf5R:1MU4iw7Yx2bns7pLfTgf/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

63:81:c0:60:93:af:b4:7a:22:34:7c:7e:07:bf:dc:92:41:b9:f6:e7:3d:a6:fe:de:c6:0b:f2:0e:cb:bd:7a:80

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52263d520931235736570a2402571c4021122b211102515e242235323619033a0b11,POSTALCODE=10815,ST=0b1c1115005f5c4e061704171b111712031508164d0a110f+ST=0b1c1115494a5c5305080e17100e0340021d1116090d510a0d0c455712130f510c06110f020b0a100346090b065b0e06410b06530c151c1b191457400b12055b0c0b0a070b

Chains

Apr 4, 2024

Minor OS version

1

Major OS version

5

Entry point

8895

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalUnlock GetDateFormatW HeapReAlloc HeapCompact GetConsoleAliasesLengthW HeapFree SetComputerNameW GetModuleHandleW GetUserDefaultLangID GlobalAlloc LoadLibraryW GetLocaleInfoW GetConsoleAliasExesLengthW WriteConsoleOutputA SetConsoleCP GetAtomNameW CreateFileW SetConsoleTitleA WritePrivateProfileStringW GetThreadLocale GetProcAddress GetLongPathNameA LoadLibraryA SetCalendarInfoW CreateHardLinkW FindFirstVolumeMountPointW HeapWalk FindAtomA GlobalFindAtomW CreatePipe GetModuleFileNameA GetCurrentDirectoryA DeleteCriticalSection SetFileAttributesW HeapAlloc GetLastError ExitProcess DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer IsProcessorFeaturePresent WriteFile GetStdHandle GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep RtlUnwind MultiByteToWideChar HeapSize SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers ReadFile CloseHandle

user32

GetMonitorInfoW LoadIconA

Sharing

General

Malware Config

Signatures

File Explorer

6b0801f293f48c47ae247d807e8b4369f0e4fdb2a60f7535d3193a38b492a6c9

PE Signature issue

kernel32

user32

generic