d572f3813daff0da2347ccdfdfc46000ba79f5e97e804be09fdfa6fe26b50218

General

Target
d572f3813daff0da2347ccdfdfc46000ba79f5e97e804be09fdfa6fe26b50218
Size 4.2MB
Sample240418-lpx6faag2s
SHA256 d572f3813daff0da2347ccdfdfc46000ba79f5e97e804be09fdfa6fe26b50218
MD5 dd6f01b06dbd7b9c8042f762fb9a9027
SHA1 fb800e7c368c049b930e041c0714894315e8f771
SHA512 b03bf8fc8a99ae420d13ffa5d1c6ccad9a3ad88bf2c48aeefbcf12fe2c95711cc536e39921c4dbcdfe218ff7d1c90b865364bbdec4f6b43c556c6c91faf432c5
SSDEEP 98304:8CPl518CIueKP5d7oVK7H7yJZnHQCD3+yubJ0gajSy:p518Ue6qZnwCDRsJZVy
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

d572f3813daff0da2347ccdfdfc46000ba79f5e97e804be09fdfa6fe26b50218

.exe 4.2MB

d572f3813daff0da2347ccdfdfc46000ba79f5e97e804be09fdfa6fe26b50218

IMPHASH 96d5e40a6f183914c8bf0374fa1144d1
SHA256 d572f3813daff0da2347ccdfdfc46000ba79f5e97e804be09fdfa6fe26b50218
MD5 dd6f01b06dbd7b9c8042f762fb9a9027
SHA1 fb800e7c368c049b930e041c0714894315e8f771
SHA512 b03bf8fc8a99ae420d13ffa5d1c6ccad9a3ad88bf2c48aeefbcf12fe2c95711cc536e39921c4dbcdfe218ff7d1c90b865364bbdec4f6b43c556c6c91faf432c5
SSDEEP 98304:8CPl518CIueKP5d7oVK7H7yJZnHQCD3+yubJ0gajSy:p518Ue6qZnwCDRsJZVy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

8a:ca:c4:fd:93:a9:b5:0b:6b:70:bd:54:ca:d7:7a:2e:ec:b2:5a:15:69:45:ee:99:a1:c1:5f:84:ab:fd:f8:c3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=525d0b323423120e110456060e332e32311412140236333d57310b361108382b0633,POSTALCODE=10823,ST=0b1c1115005f5c4e181a03021b111003011215104d0a110f+ST=0b1c1115494a5c0c14061615180a130112020714120f145c5107110011530255570b5e0b52161c1c1217060c175f1703011717030c091c0e19041d15170a055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6249

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW GetConsoleAliasesLengthW GetLocaleInfoA GetConsoleAliasExesLengthA EnumCalendarInfoW SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetComputerNameW LockFile FreeEnvironmentStringsA GetModuleHandleW IsBadReadPtr EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW FindNextVolumeW GetAtomNameW SetConsoleTitleA GetProcAddress GetProcessHeaps CreateNamedPipeA GetConsoleDisplayMode BuildCommDCBW LoadLibraryA SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA BuildCommDCBA VirtualProtect GetCurrentDirectoryA SetCalendarInfoA FindAtomW LocalFileTimeToFileTime GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

d572f3813daff0da2347ccdfdfc46000ba79f5e97e804be09fdfa6fe26b50218

PE Signature issue

kernel32

generic