c7752a20e52025e9ea49b4ce63f8a85bdc605a928692e635258abefb71ff7198

General

Target
c7752a20e52025e9ea49b4ce63f8a85bdc605a928692e635258abefb71ff7198
Size 4.2MB
Sample240418-2492jsaf2t
SHA256 c7752a20e52025e9ea49b4ce63f8a85bdc605a928692e635258abefb71ff7198
MD5 08b4b79e38098f63c2f042fd14b050ce
SHA1 b10793e6fd33bac98c854144375747006ffff1d0
SHA512 6b806ccafdadc0dc7d33e765d111e5fc6a6db496694dd3eb4d6ae980dbc8a35353629d74ff0d5270e46697a6fbf595d2cde724b0b738f23faa1b9b019437b0d6
SSDEEP 98304:+xYk/Wd4gprCGADohyqBdv1Fi5ytzZrDpDNRM:wnWmu2kBdS54nBNi
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

c7752a20e52025e9ea49b4ce63f8a85bdc605a928692e635258abefb71ff7198

.exe 4.2MB

c7752a20e52025e9ea49b4ce63f8a85bdc605a928692e635258abefb71ff7198

IMPHASH 339ef553d0ba42cadf81511b2d79315b
SHA256 c7752a20e52025e9ea49b4ce63f8a85bdc605a928692e635258abefb71ff7198
MD5 08b4b79e38098f63c2f042fd14b050ce
SHA1 b10793e6fd33bac98c854144375747006ffff1d0
SHA512 6b806ccafdadc0dc7d33e765d111e5fc6a6db496694dd3eb4d6ae980dbc8a35353629d74ff0d5270e46697a6fbf595d2cde724b0b738f23faa1b9b019437b0d6
SSDEEP 98304:+xYk/Wd4gprCGADohyqBdv1Fi5ytzZrDpDNRM:wnWmu2kBdS54nBNi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

5b:93:71:97:42:83:ff:b6:ab:a1:1e:db:eb:7e:aa:91:2f:d6:f8:85:b6:6c:24:46:61:84:ae:95:f7:73:38:b8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5251371f362b4011042b13043a2d223e0f19152c2014093e313d075d110f3d082e50,POSTALCODE=10700,ST=0b1c1115005f5c4e061704171b001d03091c1310114b0c1a02+ST=0b1c1115494a5c52100110515d52141b57170d14161d12025206141340084056005707170746501e16121203571c1452160c10121450010500175112041a055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapReAlloc SetDefaultCommConfigA TryEnterCriticalSection GetConsoleAliasesLengthW VirtualQuery GetCommState HeapFree GetComputerNameW UnlockFile FreeEnvironmentStringsA GetModuleHandleW FindNextVolumeMountPointA GetDateFormatA EnumTimeFormatsW GlobalAlloc LoadLibraryW GetLocaleInfoW IsBadWritePtr GetModuleFileNameW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW GetProcAddress FindVolumeMountPointClose GetProcessHeaps GetAtomNameA LoadLibraryA SetCalendarInfoW SetConsoleOutputCP CreatePipe BuildCommDCBA VirtualProtect HeapAlloc GetLastError Sleep ExitProcess GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

LoadIconW

Sharing

General

Malware Config

Signatures

File Explorer

c7752a20e52025e9ea49b4ce63f8a85bdc605a928692e635258abefb71ff7198

PE Signature issue

kernel32

user32

generic