e2e57b9f45bc1374e6763413481cbf6d560f5d8baee5f5839b5f4b1326c31ca7

General

Target
e2e57b9f45bc1374e6763413481cbf6d560f5d8baee5f5839b5f4b1326c31ca7
Size 4.2MB
Sample240425-syrtcaca6z
SHA256 e2e57b9f45bc1374e6763413481cbf6d560f5d8baee5f5839b5f4b1326c31ca7
MD5 02cdf4c0add1d23c14bbdad754cd7216
SHA1 0bb23a92012d7ae03635488a674b19e45bafea27
SHA512 3b2fc3af0b1a4181f08793e0a253a8774e23abb755c996d6388ca3d29450005e6404c972664ed25ba06b9c2860298d48459a12bb7638b900142504b57f079f97
SSDEEP 98304:6+8Pj1ZT6Vr0wZqa219A2D71J0S/rwUCjvn1rKajWGkWvy/KS6wUa/M:6pTT62wIa89A2D71N/UUOgaSZKqUAM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

e2e57b9f45bc1374e6763413481cbf6d560f5d8baee5f5839b5f4b1326c31ca7

.exe 4.2MB

e2e57b9f45bc1374e6763413481cbf6d560f5d8baee5f5839b5f4b1326c31ca7

IMPHASH be0b2fc67b26807332b22624f2e2c4be
SHA256 e2e57b9f45bc1374e6763413481cbf6d560f5d8baee5f5839b5f4b1326c31ca7
MD5 02cdf4c0add1d23c14bbdad754cd7216
SHA1 0bb23a92012d7ae03635488a674b19e45bafea27
SHA512 3b2fc3af0b1a4181f08793e0a253a8774e23abb755c996d6388ca3d29450005e6404c972664ed25ba06b9c2860298d48459a12bb7638b900142504b57f079f97
SSDEEP 98304:6+8Pj1ZT6Vr0wZqa219A2D71J0S/rwUCjvn1rKajWGkWvy/KS6wUa/M:6pTT62wIa89A2D71N/UUOgaSZKqUAM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

67:fd:9a:bf:7d:34:21:0c:74:24:33:fd:de:5d:f9:b3:46:89:2a:59:4b:49:b2:60:3c:26:18:92:a1:f5:a7:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b1f00070a2734475a3201002b1c42301c1b0732151b1d231030330b0713013107,POSTALCODE=10839,ST=0b1c1115005f5c4e140f090709110417101e115b0c1704+ST=0b1c1115494a5c141b55031011521200011110175651021a0c0100080654181701000b110407101e081204565401155144530712111a57090e5304000602055b0c0b0a070b

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

5

Entry point

6000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW GetCommState GetModuleHandleW GetProcessHeap GetDateFormatA GlobalAlloc LoadLibraryW IsBadCodePtr HeapDestroy GetModuleFileNameW SetConsoleTitleA GlobalUnfix SetCurrentDirectoryA GetProcAddress GetConsoleAliasExesLengthA BuildCommDCBW LoadLibraryA GetFileType SetConsoleDisplayMode WaitForMultipleObjects FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW GetVolumeInformationW SetFirmwareEnvironmentVariableW GetLocaleInfoA HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

e2e57b9f45bc1374e6763413481cbf6d560f5d8baee5f5839b5f4b1326c31ca7

PE Signature issue

kernel32

advapi32

generic