5586970e711d7ac4472f77bbe4b25d51a150eed87c4be3b3b696d8dfa2ab6b96

Sharing

Copy URL Twitter E-mail

General

Target
5586970e711d7ac4472f77bbe4b25d51a150eed87c4be3b3b696d8dfa2ab6b96
Size 358KB
Sample240410-m41qjsdd44
SHA256 5586970e711d7ac4472f77bbe4b25d51a150eed87c4be3b3b696d8dfa2ab6b96
MD5 114c1a7d605f57752450a4985d143337
SHA1 541947ec1ff5ec2d84131fc6215658ef874c9d71
SHA512 27d931fa0adb56c9e88f87d7b54b257cc5be75a7660c4310082372d3548ee5067a18fffe929d619f6f10fb7298552b856d7e2e2d8f95df31340851b51d2542af
SSDEEP 6144:/6H3soQXrBcvt615DJfT/JnAfs2dsftzq0DpDOOlZKi8HgyP:/6IXrCvk1ZJjJM+RNOOX98tP
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

5586970e711d7ac4472f77bbe4b25d51a150eed87c4be3b3b696d8dfa2ab6b96

.exe 358KB

5586970e711d7ac4472f77bbe4b25d51a150eed87c4be3b3b696d8dfa2ab6b96

IMPHASH 3ce591975e0ea7c61e7535a3ffe86d12
SHA256 5586970e711d7ac4472f77bbe4b25d51a150eed87c4be3b3b696d8dfa2ab6b96
MD5 114c1a7d605f57752450a4985d143337
SHA1 541947ec1ff5ec2d84131fc6215658ef874c9d71
SHA512 27d931fa0adb56c9e88f87d7b54b257cc5be75a7660c4310082372d3548ee5067a18fffe929d619f6f10fb7298552b856d7e2e2d8f95df31340851b51d2542af
SSDEEP 6144:/6H3soQXrBcvt615DJfT/JnAfs2dsftzq0DpDOOlZKi8HgyP:/6IXrCvk1ZJjJM+RNOOX98tP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

92:f6:d9:9e:47:ca:03:04:de:00:3e:42:41:25:00:d0:6d:66:df:30

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=OLEH,OU=FRANKSTIEN,O=I LOVE YOU,L=FRANKING,ST=DRAKE,C=FA

Chains

Apr 8, 2024

Minor OS version

Major OS version

Entry point

4740

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.itext

Size

303KB

Virtual Size

304KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

5586970e711d7ac4472f77bbe4b25d51a150eed87c4be3b3b696d8dfa2ab6b96

PE Signature issue

kernel32

msvcrt

generic