acdf6c7192708a388f9f767ffb9a7a12386e7eefb0302dc37ccf097348138b2c

General

Target
acdf6c7192708a388f9f767ffb9a7a12386e7eefb0302dc37ccf097348138b2c
Size 4.2MB
Sample240418-212wrsae2v
SHA256 acdf6c7192708a388f9f767ffb9a7a12386e7eefb0302dc37ccf097348138b2c
MD5 49a9dd02764bfa2e7b291ead697ee2ad
SHA1 81586bd3beb9d9b0f39031294069baf101b82be6
SHA512 a073ebcb32135740e37c1fbc0d76acf514a80df356a4a2ba791d6cc6646fc8854ee3ca9d16b305859b36b963751fb943dd4f802eaedb038ccf28a3e657d728c0
SSDEEP 98304:+2SaIQvbQwPoUoX+ssXpcUgoav4xR/Dl9wlfOsN9GV/e3k:+79+Q+oUS+DcUdQ4xVluxNd3k
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

acdf6c7192708a388f9f767ffb9a7a12386e7eefb0302dc37ccf097348138b2c

.exe 4.2MB

acdf6c7192708a388f9f767ffb9a7a12386e7eefb0302dc37ccf097348138b2c

IMPHASH bb932f22c2276e59bc42407b6728e8ec
SHA256 acdf6c7192708a388f9f767ffb9a7a12386e7eefb0302dc37ccf097348138b2c
MD5 49a9dd02764bfa2e7b291ead697ee2ad
SHA1 81586bd3beb9d9b0f39031294069baf101b82be6
SHA512 a073ebcb32135740e37c1fbc0d76acf514a80df356a4a2ba791d6cc6646fc8854ee3ca9d16b305859b36b963751fb943dd4f802eaedb038ccf28a3e657d728c0
SSDEEP 98304:+2SaIQvbQwPoUoX+ssXpcUgoav4xR/Dl9wlfOsN9GV/e3k:+79+Q+oUS+DcUdQ4xVluxNd3k
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c5:ef:8d:65:e2:9a:ed:f9:b0:34:37:78:ee:21:56:3e:cc:ca:3f:e1:ad:52:9a:23:3f:d5:4f:58:14:4f:42:be

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19,POSTALCODE=10700,ST=0b1c1115005f5c4e161100021c001003011215104d0a110f+ST=0b1c1115494a5c05125116195f151d00521f0d135111515d03161110070d03151709010f5103081c0b00040b545d06080b0b050e060b08091d5301090612055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

0

Major OS version

5

Entry point

5952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW SetDefaultCommConfigA FindVolumeClose GetLocaleInfoA EnumCalendarInfoW SetFirmwareEnvironmentVariableA GetComputerNameW GetModuleHandleW IsBadReadPtr GetConsoleAliasesLengthA EnumTimeFormatsA SetCommTimeouts GlobalAlloc LoadLibraryW GetAtomNameW GetProcAddress GetProcessHeaps CreateNamedPipeA GetConsoleDisplayMode BuildCommDCBW LoadLibraryA SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA SetConsoleTitleW FreeEnvironmentStringsW VirtualProtect GetCurrentDirectoryA SetCalendarInfoA FindAtomW FileTimeToLocalFileTime GetFileInformationByHandle HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

acdf6c7192708a388f9f767ffb9a7a12386e7eefb0302dc37ccf097348138b2c

PE Signature issue

kernel32

generic