4fd5347f52e67b48fcd4071a78d3cf9ba6b939a104318f2abc19f806fe78a0ae

General

Target
4fd5347f52e67b48fcd4071a78d3cf9ba6b939a104318f2abc19f806fe78a0ae
Size 4.2MB
Sample240418-lpbmfaaf6v
SHA256 4fd5347f52e67b48fcd4071a78d3cf9ba6b939a104318f2abc19f806fe78a0ae
MD5 cc768a71dab345faceff48c82bd07cec
SHA1 a1b3ca17bf81c9545c08eb499ca0c44868bcdb37
SHA512 a4f2cf98ae9477861cd6456741dadb1a8f12d03705b1521bf63004834a8ccfb186f2bf3c7efe92f119ee734ed8f1cab0485d0376e2b3f8f4bcc46a95b0a7170f
SSDEEP 98304:0CPl518CIueKP5d7oVK7H7yJZnHQCD3+yubJ0gajSU:x518Ue6qZnwCDRsJZVU
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4fd5347f52e67b48fcd4071a78d3cf9ba6b939a104318f2abc19f806fe78a0ae

.exe 4.2MB

4fd5347f52e67b48fcd4071a78d3cf9ba6b939a104318f2abc19f806fe78a0ae

IMPHASH 96d5e40a6f183914c8bf0374fa1144d1
SHA256 4fd5347f52e67b48fcd4071a78d3cf9ba6b939a104318f2abc19f806fe78a0ae
MD5 cc768a71dab345faceff48c82bd07cec
SHA1 a1b3ca17bf81c9545c08eb499ca0c44868bcdb37
SHA512 a4f2cf98ae9477861cd6456741dadb1a8f12d03705b1521bf63004834a8ccfb186f2bf3c7efe92f119ee734ed8f1cab0485d0376e2b3f8f4bcc46a95b0a7170f
SSDEEP 98304:0CPl518CIueKP5d7oVK7H7yJZnHQCD3+yubJ0gajSU:x518Ue6qZnwCDRsJZVU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

8a:ca:c4:fd:93:a9:b5:0b:6b:70:bd:54:ca:d7:7a:2e:ec:b2:5a:15:69:45:ee:99:a1:c1:5f:84:ab:fd:f8:c3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b1f00070a2734475a3201002b1c42301c1b0732151b1d231030330b0713013107,POSTALCODE=10809,ST=0b1c1115005f5c4e140f090709110417101e115b0c1704+ST=0b1c1115494a5c141b55031011521200011110175651021a0c0100080654181701000b110407101e081204565401155144530712111a57090e5304000602055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6249

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW GetConsoleAliasesLengthW GetLocaleInfoA GetConsoleAliasExesLengthA EnumCalendarInfoW SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetComputerNameW LockFile FreeEnvironmentStringsA GetModuleHandleW IsBadReadPtr EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW FindNextVolumeW GetAtomNameW SetConsoleTitleA GetProcAddress GetProcessHeaps CreateNamedPipeA GetConsoleDisplayMode BuildCommDCBW LoadLibraryA SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA BuildCommDCBA VirtualProtect GetCurrentDirectoryA SetCalendarInfoA FindAtomW LocalFileTimeToFileTime GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

4fd5347f52e67b48fcd4071a78d3cf9ba6b939a104318f2abc19f806fe78a0ae

PE Signature issue

kernel32

generic