b362d13cc8cc661a19c2b1a1d073494d9fb7a111b9247731860f48bc325c3d4f

General

Target
b362d13cc8cc661a19c2b1a1d073494d9fb7a111b9247731860f48bc325c3d4f
Size 4.2MB
Sample240418-22l7psae31
SHA256 b362d13cc8cc661a19c2b1a1d073494d9fb7a111b9247731860f48bc325c3d4f
MD5 67158e5f04d4a64b0956a6a292f80918
SHA1 26d989ef64684c12f8608afd8d0c7f40070fc961
SHA512 e770f3e70004037ddd6d7e2bb3013b1f47a7575b71d2f6120d143718eb7ee68ae97d44450253314cc2e9e82564688e28a9e6b96fca5277f39f4de34793f47dbf
SSDEEP 98304:F1k/WfSnvYITkOuylzYhV/sfZ0qQCPoWg3E/CPQ11L:FsW6Y8HuyqUfZtQCg3DqL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b362d13cc8cc661a19c2b1a1d073494d9fb7a111b9247731860f48bc325c3d4f

.exe 4.2MB

b362d13cc8cc661a19c2b1a1d073494d9fb7a111b9247731860f48bc325c3d4f

IMPHASH 331af798bb33bd4e783ea7c89c6d7b97
SHA256 b362d13cc8cc661a19c2b1a1d073494d9fb7a111b9247731860f48bc325c3d4f
MD5 67158e5f04d4a64b0956a6a292f80918
SHA1 26d989ef64684c12f8608afd8d0c7f40070fc961
SHA512 e770f3e70004037ddd6d7e2bb3013b1f47a7575b71d2f6120d143718eb7ee68ae97d44450253314cc2e9e82564688e28a9e6b96fca5277f39f4de34793f47dbf
SSDEEP 98304:F1k/WfSnvYITkOuylzYhV/sfZ0qQCPoWg3E/CPQ11L:FsW6Y8HuyqUfZtQCg3DqL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

8d:a5:e1:d0:c7:c9:4c:df:7e:0f:7b:b9:1f:c5:a9:8d:98:c3:67:a6:f8:82:ad:c4:17:f6:25:ba:dc:aa:a8:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522910322628070b250c52200b542f1a57031b422732351e332f4620190820022d0b,POSTALCODE=10815,ST=0b1c1115005f5c4e010b00101c041100031a0d10104b111d+ST=0b1c1115494a5c18101602500b53081d121c021c1b120f07110e12511d161a5003091c030c1053460e4113160e181d130101060d401252070f0f08001312055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6447

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetDefaultCommConfigA EnumCalendarInfoA GetConsoleAliasesLengthW VirtualQuery HeapFree GetComputerNameW UnlockFile WaitForSingleObjectEx GetModuleHandleW GetProcessHeap GetDateFormatA EnumTimeFormatsW SetCommState GlobalAlloc LoadLibraryW IsValidLocale GetLocaleInfoW IsBadWritePtr GetAtomNameW FindNextVolumeMountPointW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW GetProcAddress BuildCommDCBW LoadLibraryA GetModuleFileNameA FreeEnvironmentStringsW BuildCommDCBA VirtualProtect SetCalendarInfoA FileTimeToLocalFileTime HeapAlloc Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

b362d13cc8cc661a19c2b1a1d073494d9fb7a111b9247731860f48bc325c3d4f

PE Signature issue

kernel32

generic