1af361618713efae3cf1ccde09e88120bcfa245127c028b9dc8d940bea1307fc

General

Target
1af361618713efae3cf1ccde09e88120bcfa245127c028b9dc8d940bea1307fc
Size 4.2MB
Sample240418-lnempsaf3v
SHA256 1af361618713efae3cf1ccde09e88120bcfa245127c028b9dc8d940bea1307fc
MD5 a4c0212edaef380158155ad8e07d198e
SHA1 84efcf3f0e50f396c205cb56c879f2437a56bc12
SHA512 cc220b49ca24bf737c467ae944ec28942bd6975ca9629814a79d2f48036397ae122158ac6f7e5ff7f9ff3a768b5e8be101434071697a94e6680dbe6f22bbc4a3
SSDEEP 98304:8CPl518CIueKP5d7oVK7H7yJZnHQCD3+yubJ0gajSm:p518Ue6qZnwCDRsJZVm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

1af361618713efae3cf1ccde09e88120bcfa245127c028b9dc8d940bea1307fc

.exe 4.2MB

1af361618713efae3cf1ccde09e88120bcfa245127c028b9dc8d940bea1307fc

IMPHASH 96d5e40a6f183914c8bf0374fa1144d1
SHA256 1af361618713efae3cf1ccde09e88120bcfa245127c028b9dc8d940bea1307fc
MD5 a4c0212edaef380158155ad8e07d198e
SHA1 84efcf3f0e50f396c205cb56c879f2437a56bc12
SHA512 cc220b49ca24bf737c467ae944ec28942bd6975ca9629814a79d2f48036397ae122158ac6f7e5ff7f9ff3a768b5e8be101434071697a94e6680dbe6f22bbc4a3
SSDEEP 98304:8CPl518CIueKP5d7oVK7H7yJZnHQCD3+yubJ0gajSm:p518Ue6qZnwCDRsJZVm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

8a:ca:c4:fd:93:a9:b5:0b:6b:70:bd:54:ca:d7:7a:2e:ec:b2:5a:15:69:45:ee:99:a1:c1:5f:84:ab:fd:f8:c3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52263d520931235736570a2402571c4021122b211102515e242235323619033a0b11,POSTALCODE=10802,ST=0b1c1115005f5c4e061704171b111712031508164d0a110f+ST=0b1c1115494a5c5305080e17100e0340021d1116090d510a0d0c455712130f510c06110f020b0a100346090b065b0e06410b06530c151c1b191457400b12055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6249

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW GetConsoleAliasesLengthW GetLocaleInfoA GetConsoleAliasExesLengthA EnumCalendarInfoW SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetComputerNameW LockFile FreeEnvironmentStringsA GetModuleHandleW IsBadReadPtr EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW FindNextVolumeW GetAtomNameW SetConsoleTitleA GetProcAddress GetProcessHeaps CreateNamedPipeA GetConsoleDisplayMode BuildCommDCBW LoadLibraryA SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA BuildCommDCBA VirtualProtect GetCurrentDirectoryA SetCalendarInfoA FindAtomW LocalFileTimeToFileTime GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

1af361618713efae3cf1ccde09e88120bcfa245127c028b9dc8d940bea1307fc

PE Signature issue

kernel32

generic