4aff8a59576291865070bd0330d35b35472f438c765c143dc64f10a91ec70b84

General

Target
4aff8a59576291865070bd0330d35b35472f438c765c143dc64f10a91ec70b84
Size 4.2MB
Sample240426-stf62sed55
SHA256 4aff8a59576291865070bd0330d35b35472f438c765c143dc64f10a91ec70b84
MD5 3f3f66f995aec7817cdf6c1480e75281
SHA1 aee0e7b99de9209206d60b0f1c9b50b0714cc345
SHA512 3e4a30698d2ada5680076189af46754584cfdae6fb87a63ddf495e3ed63d61672a9597ccdb2435187518514b4c45eee4362d85ff087734a20d3f7e9b9827d807
SSDEEP 98304:fGzsnCxKltbFvS+Z1vjUEQC5FD5MQIQIIS4sbbL4w:fG4nxAoLumFD5/IIFsr
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4aff8a59576291865070bd0330d35b35472f438c765c143dc64f10a91ec70b84

.exe 4.2MB

4aff8a59576291865070bd0330d35b35472f438c765c143dc64f10a91ec70b84

IMPHASH 6fabd72c588ac688751259448a0191b3
SHA256 4aff8a59576291865070bd0330d35b35472f438c765c143dc64f10a91ec70b84
MD5 3f3f66f995aec7817cdf6c1480e75281
SHA1 aee0e7b99de9209206d60b0f1c9b50b0714cc345
SHA512 3e4a30698d2ada5680076189af46754584cfdae6fb87a63ddf495e3ed63d61672a9597ccdb2435187518514b4c45eee4362d85ff087734a20d3f7e9b9827d807
SSDEEP 98304:fGzsnCxKltbFvS+Z1vjUEQC5FD5MQIQIIS4sbbL4w:fG4nxAoLumFD5/IIFsr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

12:33:84:b7:12:4c:f9:ac:a3:36:f8:3d:40:78:68:be:bb:fa:83:71:50:ff:a0:93:3e:ae:08:38:10:b7:54:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19,POSTALCODE=10700,ST=0b1c1115005f5c4e161100021c001003011215104d0a110f+ST=0b1c1115494a5c05125116195f151d00521f0d135111515d03161110070d03151709010f5103081c0b00040b545d06080b0b050e060b08091d5301090612055b0c0b0a070b

Chains

Apr 26, 2024

Minor OS version

1

Major OS version

5

Entry point

17456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\disozudasama\nuciwaxos\nizuxe.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus GetLocaleInfoA InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc LoadLibraryW LocalShrink ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA LoadLibraryA SetCalendarInfoW CreateHardLinkW GetExitCodeThread AddAtomW CreateEventW GlobalFindAtomW GetOEMCP LoadLibraryExA BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap IsValidCodePage GetACP GetCPInfo GetCurrentThreadId EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW OutputDebugStringW GetStringTypeW LCMapStringW SetStdHandle SetFilePointerEx HeapReAlloc CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

4aff8a59576291865070bd0330d35b35472f438c765c143dc64f10a91ec70b84

PE Signature issue

kernel32

generic