9e33d9fe5d34544a13e338f9b7f6dc3f2f8faa48e7c66b42b6fe806e8329fd52

General

Target
9e33d9fe5d34544a13e338f9b7f6dc3f2f8faa48e7c66b42b6fe806e8329fd52
Size 4.2MB
Sample240418-lsdk7she65
SHA256 9e33d9fe5d34544a13e338f9b7f6dc3f2f8faa48e7c66b42b6fe806e8329fd52
MD5 63d420d9b632b24dcc1f38c5b05b6423
SHA1 ebf2533717d83762e355f34b7d8dcefbcde193f1
SHA512 ba45a686f608f558364b371cc7c4c6b6c275031fd7e4a3faf1deac50b207e08a299e3574b558a1abea6325184748ca2f522e90b310cba96e211414bfe1ebe2e1
SSDEEP 98304:cCPl518CIueKP5d7oVK7H7yJZnHQCD3+yubJ0gajS9:J518Ue6qZnwCDRsJZV9
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9e33d9fe5d34544a13e338f9b7f6dc3f2f8faa48e7c66b42b6fe806e8329fd52

.exe 4.2MB

9e33d9fe5d34544a13e338f9b7f6dc3f2f8faa48e7c66b42b6fe806e8329fd52

IMPHASH 96d5e40a6f183914c8bf0374fa1144d1
SHA256 9e33d9fe5d34544a13e338f9b7f6dc3f2f8faa48e7c66b42b6fe806e8329fd52
MD5 63d420d9b632b24dcc1f38c5b05b6423
SHA1 ebf2533717d83762e355f34b7d8dcefbcde193f1
SHA512 ba45a686f608f558364b371cc7c4c6b6c275031fd7e4a3faf1deac50b207e08a299e3574b558a1abea6325184748ca2f522e90b310cba96e211414bfe1ebe2e1
SSDEEP 98304:cCPl518CIueKP5d7oVK7H7yJZnHQCD3+yubJ0gajS9:J518Ue6qZnwCDRsJZV9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

8a:ca:c4:fd:93:a9:b5:0b:6b:70:bd:54:ca:d7:7a:2e:ec:b2:5a:15:69:45:ee:99:a1:c1:5f:84:ab:fd:f8:c3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522434573635311625120101053d123d53210e113336571014061e5d361525000421,POSTALCODE=10826,ST=0b1c1115005f5c4e11160813180402164b1c1312+ST=0b1c1115494a5c111413080004511740571216140506085f501c465147571b51505119141402511b5716571c511b0904121c030e061111050a0600110102055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6249

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDateFormatW GetConsoleAliasesLengthW GetLocaleInfoA GetConsoleAliasExesLengthA EnumCalendarInfoW SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetComputerNameW LockFile FreeEnvironmentStringsA GetModuleHandleW IsBadReadPtr EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW FindNextVolumeW GetAtomNameW SetConsoleTitleA GetProcAddress GetProcessHeaps CreateNamedPipeA GetConsoleDisplayMode BuildCommDCBW LoadLibraryA SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA BuildCommDCBA VirtualProtect GetCurrentDirectoryA SetCalendarInfoA FindAtomW LocalFileTimeToFileTime GetLastError HeapReAlloc HeapAlloc GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

9e33d9fe5d34544a13e338f9b7f6dc3f2f8faa48e7c66b42b6fe806e8329fd52

PE Signature issue

kernel32

generic