b3a56bbef3080f1c3fbefbd4f2a4f597dc4df9712269d674f5373f85e939b344

General

Target
b3a56bbef3080f1c3fbefbd4f2a4f597dc4df9712269d674f5373f85e939b344
Size 4.2MB
Sample240426-v97p2she81
SHA256 b3a56bbef3080f1c3fbefbd4f2a4f597dc4df9712269d674f5373f85e939b344
MD5 cd78c2d5ee3ba4844a380ada5f0abb76
SHA1 3353acb08ef2cd1862b535ec69ba2801e98f9f5c
SHA512 cdb7a55a55440990e1cb87ca9160527ca0a68e8e7e1992a803d6bc5e146dd81c527f766162a260ebeda4046d519eea01b334ae5c9cf1a1b2cbdd69bda93ec962
SSDEEP 49152:ECifvx7B+7FOLxQ63IeExjZRrV5rQg00XFP5L9XkQs+hWJEWJawvScCFBuiQf8KO:ECk8+Qet2rTQI1P5Je65g2FBuWsCvPbb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b3a56bbef3080f1c3fbefbd4f2a4f597dc4df9712269d674f5373f85e939b344

.exe 4.2MB

b3a56bbef3080f1c3fbefbd4f2a4f597dc4df9712269d674f5373f85e939b344

IMPHASH 6fabd72c588ac688751259448a0191b3
SHA256 b3a56bbef3080f1c3fbefbd4f2a4f597dc4df9712269d674f5373f85e939b344
MD5 cd78c2d5ee3ba4844a380ada5f0abb76
SHA1 3353acb08ef2cd1862b535ec69ba2801e98f9f5c
SHA512 cdb7a55a55440990e1cb87ca9160527ca0a68e8e7e1992a803d6bc5e146dd81c527f766162a260ebeda4046d519eea01b334ae5c9cf1a1b2cbdd69bda93ec962
SSDEEP 49152:ECifvx7B+7FOLxQ63IeExjZRrV5rQg00XFP5L9XkQs+hWJEWJawvScCFBuiQf8KO:ECk8+Qet2rTQI1P5Je65g2FBuWsCvPbb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

d4:ba:c5:40:62:c3:9c:94:f7:28:b7:41:b3:d0:74:ce:36:dc:d2:dc:99:da:c0:06:c5:c9:a8:0a:0b:28:57:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b1f00070a2734475a3201002b1c42301c1b0732151b1d231030330b0713013107,POSTALCODE=10835,ST=0b1c1115005f5c4e140f090709110417101e115b0c1704+ST=0b1c1115494a5c141b55031011521200011110175651021a0c0100080654181701000b110407101e081204565401155144530712111a57090e5304000602055b0c0b0a070b

Chains

Apr 26, 2024

Minor OS version

1

Major OS version

5

Entry point

17456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tovesoni\johihigizup27\hunowefohomuk\johesekecijaki_99.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus GetLocaleInfoA InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc LoadLibraryW LocalShrink ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA LoadLibraryA SetCalendarInfoW CreateHardLinkW GetExitCodeThread AddAtomW CreateEventW GlobalFindAtomW GetOEMCP LoadLibraryExA BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap IsValidCodePage GetACP GetCPInfo GetCurrentThreadId EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW OutputDebugStringW GetStringTypeW LCMapStringW SetStdHandle SetFilePointerEx HeapReAlloc CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

b3a56bbef3080f1c3fbefbd4f2a4f597dc4df9712269d674f5373f85e939b344

PE Signature issue

kernel32

generic