76fae6be17e2107655365bdb20fa4da2650f820c09c4cbabd75dc7c43d017ebb

General

Target
76fae6be17e2107655365bdb20fa4da2650f820c09c4cbabd75dc7c43d017ebb
Size 4.2MB
Sample240425-dggjqaeb34
SHA256 76fae6be17e2107655365bdb20fa4da2650f820c09c4cbabd75dc7c43d017ebb
MD5 47e5c668e84b6e00022a0daf1d2504dc
SHA1 f22de24a80776e337ed51f47b6fb8a0dff3f9a65
SHA512 c221820d271d4d9bdeb92b46a91f13fb31b9b1577897277600a7d16e004924efa5bff30101ae98deae45d35cb89eab7bd8e18ef7bc331f060f3c8b7c55cda48f
SSDEEP 98304:XjT6pm/2P1EIedoyrrZXBhSyarnWHeLg8t+TS4+Tk4:Xv6U2PmIStrrdSyAWH+g8n
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

76fae6be17e2107655365bdb20fa4da2650f820c09c4cbabd75dc7c43d017ebb

.exe 4.2MB

76fae6be17e2107655365bdb20fa4da2650f820c09c4cbabd75dc7c43d017ebb

IMPHASH d10268a82f0ec0b09c4d5e18431c41e9
SHA256 76fae6be17e2107655365bdb20fa4da2650f820c09c4cbabd75dc7c43d017ebb
MD5 47e5c668e84b6e00022a0daf1d2504dc
SHA1 f22de24a80776e337ed51f47b6fb8a0dff3f9a65
SHA512 c221820d271d4d9bdeb92b46a91f13fb31b9b1577897277600a7d16e004924efa5bff30101ae98deae45d35cb89eab7bd8e18ef7bc331f060f3c8b7c55cda48f
SSDEEP 98304:XjT6pm/2P1EIedoyrrZXBhSyarnWHeLg8t+TS4+Tk4:Xv6U2PmIStrrdSyAWH+g8n
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

fd:9f:37:bc:20:02:07:b0:42:af:bc:d6:8c:f0:14:8b:03:8d:25:b4:47:14:0b:46:00:f2:c4:1f:79:65:88:24

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5225102f0434382d242811523e2627225c0650271700133f52163721402002312055,POSTALCODE=10700,ST=0b1c1115005f5c4e110211020a04161610030607020106461710+ST=0b1c1115494a5c041c1150080c17090704050e005006511f0214001f1518010656090d0252450d0309185403131b5207441f1b0d41130a081a5013450802055b0c0b0a070b

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

5

Entry point

5552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA GetConsoleAliasExesLengthA SetFirmwareEnvironmentVariableA GetComputerNameW UnlockFile GetModuleHandleW GetConsoleAliasesLengthA GetDateFormatA SetCommState GlobalAlloc LoadLibraryW IsValidLocale HeapDestroy FindNextVolumeW IsBadWritePtr GlobalUnfix EnumCalendarInfoA GetProcessHeaps LoadLibraryA SetCalendarInfoW SetConsoleDisplayMode SetCurrentDirectoryW WaitForMultipleObjects GetModuleFileNameA SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW SetFileAttributesW GetVolumeInformationW LocalFileTimeToFileTime GetProcAddress GetFileSize GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

76fae6be17e2107655365bdb20fa4da2650f820c09c4cbabd75dc7c43d017ebb

PE Signature issue

kernel32

advapi32

generic