99e29c8a9edaba5f4b8eaf36e8c453596255100fdea06ea2c9f889197e2e52c1

General

Target
99e29c8a9edaba5f4b8eaf36e8c453596255100fdea06ea2c9f889197e2e52c1
Size 4.2MB
Sample240418-etvgsaaf66
SHA256 99e29c8a9edaba5f4b8eaf36e8c453596255100fdea06ea2c9f889197e2e52c1
MD5 a109edba528eb2b70329eab8c2b56470
SHA1 4c56da25c85b08dcf4a7489c2ec58de4409e1de9
SHA512 f65a16bfa8d6e58c555e08c5a6ad939d4461e6a963b01100c196658d85dff43e107d67dac1b748fce496db63ea2a451dc5d243deeaa2580a3d0f3384d3fbe929
SSDEEP 98304:IT1SD+NjNicufM6G6X/c15iBJGRJ32bm3jabJCAFawk6ewJALv1rR:01pZicuZdXO5iBYRJmbmmbJCLwkQKLdR
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

99e29c8a9edaba5f4b8eaf36e8c453596255100fdea06ea2c9f889197e2e52c1

.exe 4.2MB

99e29c8a9edaba5f4b8eaf36e8c453596255100fdea06ea2c9f889197e2e52c1

IMPHASH 65be91c3b2a0d3e7469e85b784deac5f
SHA256 99e29c8a9edaba5f4b8eaf36e8c453596255100fdea06ea2c9f889197e2e52c1
MD5 a109edba528eb2b70329eab8c2b56470
SHA1 4c56da25c85b08dcf4a7489c2ec58de4409e1de9
SHA512 f65a16bfa8d6e58c555e08c5a6ad939d4461e6a963b01100c196658d85dff43e107d67dac1b748fce496db63ea2a451dc5d243deeaa2580a3d0f3384d3fbe929
SSDEEP 98304:IT1SD+NjNicufM6G6X/c15iBJGRJ32bm3jabJCAFawk6ewJALv1rR:01pZicuZdXO5iBYRJmbmmbJCLwkQKLdR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

7d:3c:4c:d0:31:a8:a4:e0:e2:6f:30:ef:f9:27:62:7b:59:2c:b5:7b:2c:c7:a6:54:f6:c1:7a:b7:09:05:54:7b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5225102f0434382d242811523e2627225c0650271700133f52163721402002312055,POSTALCODE=10826,ST=0b1c1115005f5c4e110211020a04161610030607020106461710+ST=0b1c1115494a5c041c1150080c17090704050e005006511f0214001f1518010656090d0252450d0309185403131b5207441f1b0d41130a081a5013450802055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

1

Major OS version

5

Entry point

25514

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vivusoxaveyu\zom.pdb

kernel32

GetNumaProcessorNode GetLocaleInfoA LoadLibraryExW GetUserDefaultLCID CreateHardLinkA GetNumberFormatA GlobalFindAtomA LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetCompressedFileSizeA SetThreadLocale GetLastError FindVolumeMountPointClose VirtualAlloc CreateTimerQueueTimer CopyFileA FindFirstChangeNotificationW LocalAlloc GetExitCodeThread AddAtomW RemoveDirectoryW SetCommMask GetOEMCP VirtualProtect SetCalendarInfoA GetWindowsDirectoryW GetCurrentProcessId AddConsoleAliasA GetTempPathA WriteProcessMemory SetFileAttributesW GetVolumeInformationW CreateThread CreateFileW SetStdHandle DebugActiveProcess OutputDebugStringW FlushFileBuffers EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WideCharToMultiByte MultiByteToWideChar GetStringTypeW HeapFree GetCommandLineA RaiseException RtlUnwind HeapAlloc GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW IsValidLocale EnumSystemLocalesW IsValidCodePage GetACP GetCurrentThreadId IsDebuggerPresent GetProcessHeap ExitProcess GetModuleHandleExW HeapSize GetStdHandle GetFileType CloseHandle GetModuleFileNameA WriteFile QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc ReadFile SetFilePointerEx GetConsoleCP GetConsoleMode

user32

GetMenuItemID

gdi32

GetCharacterPlacementW

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

99e29c8a9edaba5f4b8eaf36e8c453596255100fdea06ea2c9f889197e2e52c1

PE Signature issue

kernel32

user32

gdi32

winhttp

generic