8d8677dd0b68f84b7a39965011c6513ab6030b4a89dcc352b26d3f27d64491af

General

Target
8d8677dd0b68f84b7a39965011c6513ab6030b4a89dcc352b26d3f27d64491af
Size 4.1MB
Sample240425-1lay3afd98
SHA256 8d8677dd0b68f84b7a39965011c6513ab6030b4a89dcc352b26d3f27d64491af
MD5 f9b8fd50ea81386e2d0d9c027146e78b
SHA1 816a112656ff2713fef2e0fb85bd75ef2c28c917
SHA512 9af0546dfeeae130ae6edacdeb078b322435c1fb90a88f9af862efe5fad211db8f14dc622591d19ff8b08053e836bcb283c913f1d564fa4a677590380c89f569
SSDEEP 98304:ML1CWDKzOLOwEVDen+CvoiqvVh9u6jAYgUqt:MeQWDA+EohruNUC
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

8d8677dd0b68f84b7a39965011c6513ab6030b4a89dcc352b26d3f27d64491af

.exe 4.1MB

8d8677dd0b68f84b7a39965011c6513ab6030b4a89dcc352b26d3f27d64491af

IMPHASH d5f0d499555b858d082e1c08d41fa450
SHA256 8d8677dd0b68f84b7a39965011c6513ab6030b4a89dcc352b26d3f27d64491af
MD5 f9b8fd50ea81386e2d0d9c027146e78b
SHA1 816a112656ff2713fef2e0fb85bd75ef2c28c917
SHA512 9af0546dfeeae130ae6edacdeb078b322435c1fb90a88f9af862efe5fad211db8f14dc622591d19ff8b08053e836bcb283c913f1d564fa4a677590380c89f569
SSDEEP 98304:ML1CWDKzOLOwEVDen+CvoiqvVh9u6jAYgUqt:MeQWDA+EohruNUC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

f3:f3:84:9b:aa:7e:f7:23:39:bc:a4:0a:c9:0c:5c:a2:cb:47:67:4d:13:62:c8:5b:31:5b:4f:3a:71:24:36:7d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5251371f362b4011042b13043a2d223e0f19152c2014093e313d075d110f3d082e50,POSTALCODE=10809,ST=0b1c1115005f5c4e061704171b001d03091c1310114b0c1a02+ST=0b1c1115494a5c52100110515d52141b57170d14161d12025206141340084056005707170746501e16121203571c1452160c10121450010500175112041a055b0c0b0a070b

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

5

Entry point

6539

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetProcessHeap GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW HeapDestroy GetModuleFileNameW SetConsoleTitleA GlobalUnfix SetCurrentDirectoryA EnumCalendarInfoW SetFirmwareEnvironmentVariableW BuildCommDCBW LoadLibraryA GetFileType SetConsoleDisplayMode WaitForMultipleObjects FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW GetProcAddress GetLocaleInfoA HeapAlloc GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

8d8677dd0b68f84b7a39965011c6513ab6030b4a89dcc352b26d3f27d64491af

PE Signature issue

kernel32

advapi32

generic