b52289dc39e52f6e2f76ce568005c5ba156d2e93ba2c31f6c1bb2a8652848ef5

General

Target
b52289dc39e52f6e2f76ce568005c5ba156d2e93ba2c31f6c1bb2a8652848ef5
Size 4.2MB
Sample240418-qcewjsfa8t
SHA256 b52289dc39e52f6e2f76ce568005c5ba156d2e93ba2c31f6c1bb2a8652848ef5
MD5 0c8c393f2cfeae9ad1cbdae39f7a2733
SHA1 71b582546b5b7019442fd1aad32c207c0c94d302
SHA512 076f5b1b9e0605c41639885baf5adb869f9a6e04ec033476fb78c7d0a4d3c817e653b3aa2e11170c6f4e535fe6436802a0e430bf29900fed00aaac03f50658b2
SSDEEP 98304:v+Aa2fy0ZnosWTV9iqGMS2x9Jaw4XzuCQ45SJR+t3gnv:v+AZfy0FoqWJ6Y3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b52289dc39e52f6e2f76ce568005c5ba156d2e93ba2c31f6c1bb2a8652848ef5

.exe 4.2MB

b52289dc39e52f6e2f76ce568005c5ba156d2e93ba2c31f6c1bb2a8652848ef5

IMPHASH a3bcd63b4625806669079c8d90149399
SHA256 b52289dc39e52f6e2f76ce568005c5ba156d2e93ba2c31f6c1bb2a8652848ef5
MD5 0c8c393f2cfeae9ad1cbdae39f7a2733
SHA1 71b582546b5b7019442fd1aad32c207c0c94d302
SHA512 076f5b1b9e0605c41639885baf5adb869f9a6e04ec033476fb78c7d0a4d3c817e653b3aa2e11170c6f4e535fe6436802a0e430bf29900fed00aaac03f50658b2
SSDEEP 98304:v+Aa2fy0ZnosWTV9iqGMS2x9Jaw4XzuCQ45SJR+t3gnv:v+AZfy0FoqWJ6Y3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

65:b2:e5:45:e8:9b:c1:ea:9d:c7:97:a7:ca:3f:b5:8a:f4:af:a1:dd:ae:7d:43:ea:aa:48:d8:4d:fc:01:39:89

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b0300053323224d0036132e0352222e2216260b17250f343c151c22001a3b0d00,POSTALCODE=10809,ST=0b1c1115005f5c4e130a09061b01101e15030d1400004d071702+ST=0b1c1115494a5c0a405601000f17134502120d431112025a0d5102560055050452040c11020709125303081f0a5b1f1d400c1808040a15195a101d060a1a055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

0

Major OS version

5

Entry point

5710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GetDateFormatW EnumCalendarInfoA GetConsoleAliasesLengthW GetLocaleInfoA GetConsoleAliasExesLengthA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA UnlockFile FreeEnvironmentStringsA GetModuleHandleW CreateNamedPipeW IsBadReadPtr EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW FindNextVolumeW GetModuleFileNameW SetConsoleTitleA GetProcAddress GetProcessHeaps GetConsoleDisplayMode LoadLibraryA SetCalendarInfoW SetCurrentDirectoryW WaitForMultipleObjects BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW LocalFileTimeToFileTime GetStartupInfoW RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess EnterCriticalSection LeaveCriticalSection WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

b52289dc39e52f6e2f76ce568005c5ba156d2e93ba2c31f6c1bb2a8652848ef5

PE Signature issue

kernel32

generic