620c01b81ecd480ebdd9d48411697228466acda6a47226088602787443c6fe2f

General

Target
620c01b81ecd480ebdd9d48411697228466acda6a47226088602787443c6fe2f
Size 4.2MB
Sample240426-syb3wsfd7s
SHA256 620c01b81ecd480ebdd9d48411697228466acda6a47226088602787443c6fe2f
MD5 bdc26874d8f03d5338927112ca28002d
SHA1 ea0a0255ff3486c57774a1c034d44f0d7b40b643
SHA512 af8e599711ac44d95023d2ee78adb3a50aca05ffab07db4e508f1d923b8f6fde18ddf89617b3820b0cabd95e97e4d2c86129c4c2304e197eb4c3b074cd94f487
SSDEEP 98304:PGzsnCxKltbFvS+Z1vjUEQC5FD5MQIQIIS4sbbL4w:PG4nxAoLumFD5/IIFsL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

620c01b81ecd480ebdd9d48411697228466acda6a47226088602787443c6fe2f

.exe 4.2MB

620c01b81ecd480ebdd9d48411697228466acda6a47226088602787443c6fe2f

IMPHASH 6fabd72c588ac688751259448a0191b3
SHA256 620c01b81ecd480ebdd9d48411697228466acda6a47226088602787443c6fe2f
MD5 bdc26874d8f03d5338927112ca28002d
SHA1 ea0a0255ff3486c57774a1c034d44f0d7b40b643
SHA512 af8e599711ac44d95023d2ee78adb3a50aca05ffab07db4e508f1d923b8f6fde18ddf89617b3820b0cabd95e97e4d2c86129c4c2304e197eb4c3b074cd94f487
SSDEEP 98304:PGzsnCxKltbFvS+Z1vjUEQC5FD5MQIQIIS4sbbL4w:PG4nxAoLumFD5/IIFsL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

12:33:84:b7:12:4c:f9:ac:a3:36:f8:3d:40:78:68:be:bb:fa:83:71:50:ff:a0:93:3e:ae:08:38:10:b7:54:4f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5225102f0434382d242811523e2627225c0650271700133f52163721402002312055,POSTALCODE=10812,ST=0b1c1115005f5c4e110211020a04161610030607020106461710+ST=0b1c1115494a5c041c1150080c17090704050e005006511f0214001f1518010656090d0252450d0309185403131b5207441f1b0d41130a081a5013450802055b0c0b0a070b

Chains

Apr 26, 2024

Minor OS version

1

Major OS version

5

Entry point

17456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\disozudasama\nuciwaxos\nizuxe.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus GetLocaleInfoA InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc LoadLibraryW LocalShrink ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA LoadLibraryA SetCalendarInfoW CreateHardLinkW GetExitCodeThread AddAtomW CreateEventW GlobalFindAtomW GetOEMCP LoadLibraryExA BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap IsValidCodePage GetACP GetCPInfo GetCurrentThreadId EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW OutputDebugStringW GetStringTypeW LCMapStringW SetStdHandle SetFilePointerEx HeapReAlloc CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

620c01b81ecd480ebdd9d48411697228466acda6a47226088602787443c6fe2f

PE Signature issue

kernel32

generic