ea22d21bbb3421876fe5fdda36dfb37333950c1bd61401bd9e80ca9aa189cdf7

General

Target
ea22d21bbb3421876fe5fdda36dfb37333950c1bd61401bd9e80ca9aa189cdf7
Size 4.1MB
Sample240425-2dr32sga45
SHA256 ea22d21bbb3421876fe5fdda36dfb37333950c1bd61401bd9e80ca9aa189cdf7
MD5 b4c933d39d547be6d05de14f75987d0e
SHA1 270444dc7aff359a0bde504cdf7b9ca3bfb2b8c9
SHA512 d76dc9477202a97a4214e54eef6cea0f31557aa9bd6bb5df271fec3823f3cc2b533119e3bd1c5c19f8f77cbaebf28b9bf857e03feefda1ee534df31c7b8a450e
SSDEEP 98304:9oa4fp94xsJrGehkJ1DdBF0TJiDxdyor/vCKqVsx:9fupiUGtp01Obgy
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ea22d21bbb3421876fe5fdda36dfb37333950c1bd61401bd9e80ca9aa189cdf7

.exe 4.1MB

ea22d21bbb3421876fe5fdda36dfb37333950c1bd61401bd9e80ca9aa189cdf7

IMPHASH 7dd08063ba15d7295e29dcfabb5e9889
SHA256 ea22d21bbb3421876fe5fdda36dfb37333950c1bd61401bd9e80ca9aa189cdf7
MD5 b4c933d39d547be6d05de14f75987d0e
SHA1 270444dc7aff359a0bde504cdf7b9ca3bfb2b8c9
SHA512 d76dc9477202a97a4214e54eef6cea0f31557aa9bd6bb5df271fec3823f3cc2b533119e3bd1c5c19f8f77cbaebf28b9bf857e03feefda1ee534df31c7b8a450e
SSDEEP 98304:9oa4fp94xsJrGehkJ1DdBF0TJiDxdyor/vCKqVsx:9fupiUGtp01Obgy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

a2:48:ac:dc:a2:0b:b2:3c:09:b8:e4:7f:0f:42:9e:5c:9c:dc:fb:7b:25:97:66:5e:43:6c:19:9e:d8:d8:2b:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19,POSTALCODE=10700,ST=0b1c1115005f5c4e161100021c001003011215104d0a110f+ST=0b1c1115494a5c05125116195f151d00521f0d135111515d03161110070d03151709010f5103081c0b00040b545d06080b0b050e060b08091d5301090612055b0c0b0a070b

Chains

Apr 23, 2024

Minor OS version

1

Major OS version

5

Entry point

16748

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\voja.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus GetLocaleInfoA FindResourceExW LocalCompact InterlockedDecrement GetComputerNameW CreateHardLinkA BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID SetCommState GlobalAlloc LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA BuildCommDCBW LoadLibraryA GetExitCodeThread AddAtomW GlobalFindAtomW GetOEMCP LoadLibraryExA VirtualProtect SetCalendarInfoA GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree ExitProcess GetModuleHandleExW WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetCPInfo OutputDebugStringW SetStdHandle SetFilePointerEx HeapReAlloc LCMapStringW GetStringTypeW CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

ea22d21bbb3421876fe5fdda36dfb37333950c1bd61401bd9e80ca9aa189cdf7

PE Signature issue

kernel32

generic