fe296b9d3e97a7b27522752d9408e2dfe3d62842eb4faf9a120622c4583ba202

General

Target
fe296b9d3e97a7b27522752d9408e2dfe3d62842eb4faf9a120622c4583ba202
Size 4.2MB
Sample240419-l56graff7v
SHA256 fe296b9d3e97a7b27522752d9408e2dfe3d62842eb4faf9a120622c4583ba202
MD5 0dba727de29b4c81a6256d3fe8917831
SHA1 4e48b11a91225cd6f91e11b4ad9c972c4cabd070
SHA512 5bf3a3d11c63b8f6bcc77decb0ded5ade62db902ecc0b433e6b7df0f8e72d9b25c8849f79edaee0d9bbb2956f5327265f59533d42178c831f7fddae39b62d079
SSDEEP 98304:ZkCzxGX67jziInOwT+p9cyq2eBMnsC4wev2TDFlm5IHuXjJ:LAXIiaT+p9uBMsCfecmJ1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

fe296b9d3e97a7b27522752d9408e2dfe3d62842eb4faf9a120622c4583ba202

.exe 4.2MB

fe296b9d3e97a7b27522752d9408e2dfe3d62842eb4faf9a120622c4583ba202

IMPHASH d35cc65e86cdb694d86d8504c3ae8b6b
SHA256 fe296b9d3e97a7b27522752d9408e2dfe3d62842eb4faf9a120622c4583ba202
MD5 0dba727de29b4c81a6256d3fe8917831
SHA1 4e48b11a91225cd6f91e11b4ad9c972c4cabd070
SHA512 5bf3a3d11c63b8f6bcc77decb0ded5ade62db902ecc0b433e6b7df0f8e72d9b25c8849f79edaee0d9bbb2956f5327265f59533d42178c831f7fddae39b62d079
SSDEEP 98304:ZkCzxGX67jziInOwT+p9cyq2eBMnsC4wev2TDFlm5IHuXjJ:LAXIiaT+p9uBMsCfecmJ1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

91:0f:6a:cb:8f:77:7e:d9:14:6d:03:76:2f:fc:83:4e:a6:ea:d3:bb:7a:96:a6:06:9d:18:09:f6:0d:6c:3a:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52263d520931235736570a2402571c4021122b211102515e242235323619033a0b11,POSTALCODE=10839,ST=0b1c1115005f5c4e061704171b111712031508164d0a110f+ST=0b1c1115494a5c5305080e17100e0340021d1116090d510a0d0c455712130f510c06110f020b0a100346090b065b0e06410b06530c151c1b191457400b12055b0c0b0a070b

Chains

Apr 15, 2024

Minor OS version

1

Major OS version

5

Entry point

26811

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\midewu-lofe\sunuyovelef_bibaha\tanokufow.pdb

kernel32

GetLocaleInfoA LoadLibraryExW GetUserDefaultLCID GetTickCount CreateRemoteThread GetWindowsDirectoryA GetVolumeInformationA LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetCompressedFileSizeA SetThreadLocale GetLastError FindVolumeMountPointClose VirtualAlloc CreateTimerQueueTimer GetNumaProcessorNode SetStdHandle SetFileAttributesA LocalAlloc SetCalendarInfoW CreateHardLinkW GetExitCodeThread GetNumberFormatW RemoveDirectoryW AddAtomA GlobalFindAtomW GetOEMCP VirtualProtect AddConsoleAliasA GetTempPathA WriteProcessMemory CreateFileW CopyFileA FindFirstChangeNotificationW OutputDebugStringW FlushFileBuffers WideCharToMultiByte MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapFree GetCommandLineA GetCPInfo RaiseException RtlUnwind HeapAlloc IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW IsValidLocale EnumSystemLocalesW IsValidCodePage GetACP GetCurrentThreadId IsDebuggerPresent GetProcessHeap ExitProcess GetModuleHandleExW HeapSize GetStdHandle GetFileType CloseHandle GetModuleFileNameA WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc ReadFile SetFilePointerEx GetConsoleCP GetConsoleMode

user32

GetMenuItemID

gdi32

GetCharacterPlacementW

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

fe296b9d3e97a7b27522752d9408e2dfe3d62842eb4faf9a120622c4583ba202

PE Signature issue

kernel32

user32

gdi32

winhttp

generic