54c47e636ec2bedd8fedf152f7cd19e67618d1ec4c6c9844fa7763440b0d7d7b

Sharing

Copy URL Twitter E-mail

General

Target
54c47e636ec2bedd8fedf152f7cd19e67618d1ec4c6c9844fa7763440b0d7d7b
Size 4.2MB
Sample240420-tm7wvscc92
SHA256 54c47e636ec2bedd8fedf152f7cd19e67618d1ec4c6c9844fa7763440b0d7d7b
MD5 31c124baab7f10fa38cd9eebf5459344
SHA1 8b8df64d1ce005ae36283c21ba968c9b0234736e
SHA512 868ebd6d349b6bd437570ae96accf3f5ee9b6657f77d2ed620547f7ac1abd26635c96b7fde0a8cf07d28c248902098a5a014b2ffd1f556589981258f1d594259
SSDEEP 49152:Ar1oHj0tlV0f9s8MWzX04BUpcYbKwdRAyQZQ93cNVdRbmMzimZc5ZnjMAqqwRi8e:ABcwtA9b44emOBqNRUORBLE4Ajzd
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

54c47e636ec2bedd8fedf152f7cd19e67618d1ec4c6c9844fa7763440b0d7d7b

.exe 4.2MB

54c47e636ec2bedd8fedf152f7cd19e67618d1ec4c6c9844fa7763440b0d7d7b

IMPHASH deee2f3ec985195fc99175dfed532c7c
SHA256 54c47e636ec2bedd8fedf152f7cd19e67618d1ec4c6c9844fa7763440b0d7d7b
MD5 31c124baab7f10fa38cd9eebf5459344
SHA1 8b8df64d1ce005ae36283c21ba968c9b0234736e
SHA512 868ebd6d349b6bd437570ae96accf3f5ee9b6657f77d2ed620547f7ac1abd26635c96b7fde0a8cf07d28c248902098a5a014b2ffd1f556589981258f1d594259
SSDEEP 49152:Ar1oHj0tlV0f9s8MWzX04BUpcYbKwdRAyQZQ93cNVdRbmMzimZc5ZnjMAqqwRi8e:ABcwtA9b44emOBqNRUORBLE4Ajzd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

6e:68:8e:b9:89:2b:21:bd:d7:18:16:f2:0a:72:09:09:b6:fc:5d:f3:9f:81:4b:47:52:70:01:bc:65:24:8a:e3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522303292b2005041027200a5d5d12051031230d161c143d24542553452740323d28,POSTALCODE=10825,ST=0b1c1115005f5c4e061704171b0617160407045b0c1704+ST=0b1c1115494a5c11101704105c1f07410b17550d0e1c0c5a070a090e025212541c510f17091909155406121d141b0850180d0a16140e53100100171b1d12055b0c0b0a070b

Chains

Apr 19, 2024

Minor OS version

Major OS version

Entry point

15735

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zixafulujevigu49\xur_max\labi79_kikuhofazeta\kivucawuz\dumi.pdb

kernel32

LocalCompact GetUserDefaultLCID AddConsoleAliasW CreateHardLinkA GetTickCount GetWindowsDirectoryA EnumTimeFormatsW FindResourceExA GetVolumeInformationA LoadLibraryW ReadConsoleInputA CopyFileW WriteConsoleW GetCompressedFileSizeA GetTempPathW SetThreadLocale GetLastError SetLastError GetProcAddress GetLocaleInfoA CreateTimerQueueTimer SetStdHandle SetFileAttributesA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW GetExitCodeThread RemoveDirectoryW AddAtomA GlobalFindAtomW GetModuleFileNameA GetOEMCP GlobalUnWire LoadLibraryExA AddConsoleAliasA OutputDebugStringW GetComputerNameA FindFirstChangeNotificationW GetSystemDefaultLangID FlushFileBuffers GetConsoleMode HeapFree EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsValidCodePage GetACP GetCPInfo GetCurrentThreadId IsDebuggerPresent GetProcessHeap ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle HeapAlloc WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW LoadLibraryExW HeapReAlloc ReadFile SetFilePointerEx LCMapStringW GetConsoleCP CreateFileW

user32

GetMenuItemID

gdi32

GetCharacterPlacementW

advapi32

DeregisterEventSource

winhttp

WinHttpConnect

Sharing

General

Malware Config

Signatures

File Explorer

54c47e636ec2bedd8fedf152f7cd19e67618d1ec4c6c9844fa7763440b0d7d7b

PE Signature issue

kernel32

user32

gdi32

advapi32

winhttp

generic