fbd0606b08bb98e955f5815d30cdc8e4069ec731b7dcee2c650eb4538cbfe30b

General

Target
fbd0606b08bb98e955f5815d30cdc8e4069ec731b7dcee2c650eb4538cbfe30b
Size 4.1MB
Sample240426-ejrcdahg41
SHA256 fbd0606b08bb98e955f5815d30cdc8e4069ec731b7dcee2c650eb4538cbfe30b
MD5 03531611da083e20c3131f47f5923e52
SHA1 cc4ef0b6e9524ec74d4c95bb7dbf7981590f1ee2
SHA512 11927c886935989e3a5f9c44127138b97dbc421b91986ffa5f726c6634d955060fe04b8f1daf2669ff879c6bdccde69a0ffac718247292ade19bddaf996a69f9
SSDEEP 98304:LGRQeQQeLbhY3YC8OTEShpVlj4GtGZsj8hIKq+MMI+rDxx:LGRQUIYIPOTESx5TwMMI+rr
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

fbd0606b08bb98e955f5815d30cdc8e4069ec731b7dcee2c650eb4538cbfe30b

.exe 4.1MB

fbd0606b08bb98e955f5815d30cdc8e4069ec731b7dcee2c650eb4538cbfe30b

IMPHASH ecaec964738e0d632998678ce4e20365
SHA256 fbd0606b08bb98e955f5815d30cdc8e4069ec731b7dcee2c650eb4538cbfe30b
MD5 03531611da083e20c3131f47f5923e52
SHA1 cc4ef0b6e9524ec74d4c95bb7dbf7981590f1ee2
SHA512 11927c886935989e3a5f9c44127138b97dbc421b91986ffa5f726c6634d955060fe04b8f1daf2669ff879c6bdccde69a0ffac718247292ade19bddaf996a69f9
SSDEEP 98304:LGRQeQQeLbhY3YC8OTEShpVlj4GtGZsj8hIKq+MMI+rDxx:LGRQUIYIPOTESx5TwMMI+rr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

5c:e4:aa:1e:b3:98:43:fe:55:25:e3:89:9d:ee:f3:47:41:be:d7:85:77:bc:b0:9e:7a:31:c0:8d:c6:c7:98:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522303292b2005041027200a5d5d12051031230d161c143d24542553452740323d28,POSTALCODE=10805,ST=0b1c1115005f5c4e061704171b0617160407045b0c1704+ST=0b1c1115494a5c11101704105c1f07410b17550d0e1c0c5a070a090e025212541c510f17091909155406121d141b0850180d0a16140e53100100171b1d12055b0c0b0a070b

Chains

Apr 23, 2024

Minor OS version

0

Major OS version

5

Entry point

6258

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetProcessHeap GetDateFormatA SetCommState GlobalAlloc GetVolumeInformationA IsBadCodePtr HeapDestroy GetModuleFileNameW SetConsoleTitleA GlobalUnfix EnumCalendarInfoW GetProcAddress SetFirmwareEnvironmentVariableW LoadLibraryA GetFileType SetConsoleDisplayMode FreeEnvironmentStringsW BuildCommDCBA VirtualProtect GetCurrentDirectoryA FindAtomW FileTimeToLocalFileTime SetFileAttributesW SetCurrentDirectoryA GetLocaleInfoA GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree VirtualAlloc Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar InitializeCriticalSectionAndSpinCount HeapSize GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW ReadFile SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

fbd0606b08bb98e955f5815d30cdc8e4069ec731b7dcee2c650eb4538cbfe30b

PE Signature issue

kernel32

advapi32

generic