93ea8007f890c0e162321b3f011027a84be573e3d187bffdd3f5e9eb2c666f46

General

Target
93ea8007f890c0e162321b3f011027a84be573e3d187bffdd3f5e9eb2c666f46
Size 4.1MB
Sample240424-txvz2sdb87
SHA256 93ea8007f890c0e162321b3f011027a84be573e3d187bffdd3f5e9eb2c666f46
MD5 649bb407bb45d20f214885a190c2acc3
SHA1 d9c894b98ecac233da00950632b1ad786598ba62
SHA512 5cac9f72775996e22d97987cb6a723787740818a7070983227de6c2e46c9eab328cbca080579418b14caa8ce2aee16dc4b38d7c2e63d7cd32fdb63cb7dbc84e7
SSDEEP 98304:1FddrpuoRE7tl1yJ8vae/QmLpm2XHwIZYQzHZc5g5rp30lCUu:fLdBQ1yJ8Sedm2XHUQNc5XgH
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

93ea8007f890c0e162321b3f011027a84be573e3d187bffdd3f5e9eb2c666f46

.exe 4.1MB

93ea8007f890c0e162321b3f011027a84be573e3d187bffdd3f5e9eb2c666f46

IMPHASH dbc480346b6d3d9e89c5339bb11a03d5
SHA256 93ea8007f890c0e162321b3f011027a84be573e3d187bffdd3f5e9eb2c666f46
MD5 649bb407bb45d20f214885a190c2acc3
SHA1 d9c894b98ecac233da00950632b1ad786598ba62
SHA512 5cac9f72775996e22d97987cb6a723787740818a7070983227de6c2e46c9eab328cbca080579418b14caa8ce2aee16dc4b38d7c2e63d7cd32fdb63cb7dbc84e7
SSDEEP 98304:1FddrpuoRE7tl1yJ8vae/QmLpm2XHwIZYQzHZc5g5rp30lCUu:fLdBQ1yJ8Sedm2XHUQNc5XgH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

a7:86:f5:07:30:22:1f:c3:85:dd:94:6a:d7:3b:ba:3b:b2:9d:08:b4:b0:8b:86:40:d7:18:3d:d2:23:3a:15:22

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52251f5711571c0f0d0d243a002f3139341c263d07362111531206573b1100053331,POSTALCODE=10810,ST=0b1c1115005f5c4e110211020c100803061f0e00074b0c1a02+ST=0b1c1115494a5c0e46050a0d120f1645561d521a15010e0a07500703161643105207180c51000c010f1413070a07025344080a0019190c561800501c570a055b0c0b0a070b

Chains

Apr 23, 2024

Minor OS version

1

Major OS version

5

Entry point

17103

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mahikimaneked27 gana.pdb

kernel32

GetLocaleInfoA FindResourceExW LocalCompact InterlockedDecrement GetComputerNameW CreateHardLinkA BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsA GetUserDefaultLangID SetCommState LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetTempPathW GlobalMemoryStatus ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress SetFileAttributesA BuildCommDCBW LoadLibraryA LocalAlloc GetExitCodeThread AddAtomW RemoveDirectoryW GlobalFindAtomW GetOEMCP LoadLibraryExA VirtualProtect SetCalendarInfoA GetConsoleProcessList GetVolumeInformationW GetLastError GetSystemDefaultLangID GetStringTypeW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree ExitProcess GetModuleHandleExW WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetCPInfo OutputDebugStringW SetStdHandle SetFilePointerEx HeapReAlloc LCMapStringW CreateFileW

advapi32

DeregisterEventSource

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

93ea8007f890c0e162321b3f011027a84be573e3d187bffdd3f5e9eb2c666f46

PE Signature issue

kernel32

advapi32

winhttp

generic