4a8bc5a61328da91f515b2ecea545285424ddc9fb8e221fafa3a3191f88efd69

General

Target
4a8bc5a61328da91f515b2ecea545285424ddc9fb8e221fafa3a3191f88efd69
Size 4.2MB
Sample240425-lrfdeahe69
SHA256 4a8bc5a61328da91f515b2ecea545285424ddc9fb8e221fafa3a3191f88efd69
MD5 1bba3946d2b33f29fce0f697c710cddb
SHA1 94626d31e5024c9ad34d8e7e1fa6836ac925118c
SHA512 037d9ad6a70d27b94b0851d47ea975c643e6716acc6a27dd7754125ff3e66876d421f09a21328eeb48befb006c7e275d7e47e5bfca4fdeddbf24834839479465
SSDEEP 98304:CHpMxDemVqIpADKfdGpiZF6VsUJaz5bqFpk/eZ:gpKDzpjf8c3q/fZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4a8bc5a61328da91f515b2ecea545285424ddc9fb8e221fafa3a3191f88efd69

.exe 4.2MB

4a8bc5a61328da91f515b2ecea545285424ddc9fb8e221fafa3a3191f88efd69

IMPHASH 954261c9cff65161a03be3d46077b75e
SHA256 4a8bc5a61328da91f515b2ecea545285424ddc9fb8e221fafa3a3191f88efd69
MD5 1bba3946d2b33f29fce0f697c710cddb
SHA1 94626d31e5024c9ad34d8e7e1fa6836ac925118c
SHA512 037d9ad6a70d27b94b0851d47ea975c643e6716acc6a27dd7754125ff3e66876d421f09a21328eeb48befb006c7e275d7e47e5bfca4fdeddbf24834839479465
SSDEEP 98304:CHpMxDemVqIpADKfdGpiZF6VsUJaz5bqFpk/eZ:gpKDzpjf8c3q/fZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

1c:e9:c9:46:30:23:90:87:45:e1:6a:4c:47:55:c0:75:06:a4:28:4d:a7:dd:ba:fe:26:45:50:ab:2c:7b:88:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b0300053323224d0036132e0352222e2216260b17250f343c151c22001a3b0d00,POSTALCODE=10815,ST=0b1c1115005f5c4e130a09061b01101e15030d1400004d071702+ST=0b1c1115494a5c0a405601000f17134502120d431112025a0d5102560055050452040c11020709125303081f0a5b1f1d400c1808040a15195a101d060a1a055b0c0b0a070b

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

5

Entry point

5708

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA GetCommState GetModuleHandleW GetProcessHeap GetDateFormatA GlobalAlloc LoadLibraryW HeapDestroy IsBadWritePtr GetModuleFileNameW GlobalUnfix GetProcAddress SetFirmwareEnvironmentVariableW GetLocaleInfoA GetFileType SetConsoleDisplayMode SetCurrentDirectoryW WaitForMultipleObjects SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW GetVolumeInformationW LoadLibraryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

4a8bc5a61328da91f515b2ecea545285424ddc9fb8e221fafa3a3191f88efd69

PE Signature issue

kernel32

advapi32

generic