86eb4f54b68219aed3dff4edda1ef668b842a12a4a53cb97a259b830ecbe3cc1

General

Target
86eb4f54b68219aed3dff4edda1ef668b842a12a4a53cb97a259b830ecbe3cc1
Size 4.2MB
Sample240502-t1813seh38
SHA256 86eb4f54b68219aed3dff4edda1ef668b842a12a4a53cb97a259b830ecbe3cc1
MD5 3f5117ca856c53b7247799cd10efa2a9
SHA1 8f58b850386fc19cd4ffdbdc1310724ce533ad1c
SHA512 3c5ef687ecbef8316d2559793f5a602a1d7945500be9ac6fdf0fc3e081616a633de2d95e8bdd47c44c73c98f41e58b133cdfbb6ef019169888481f63e58bfba2
SSDEEP 98304:RaVsjom70ndrBFgOmll6jSga2nxCwdk+mvEBS8KssS:R+uom74drMJBirk+iEw8j
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

86eb4f54b68219aed3dff4edda1ef668b842a12a4a53cb97a259b830ecbe3cc1

.exe 4.2MB

86eb4f54b68219aed3dff4edda1ef668b842a12a4a53cb97a259b830ecbe3cc1

IMPHASH 85119ecdf5a2d0eab798abf1df3585e6
SHA256 86eb4f54b68219aed3dff4edda1ef668b842a12a4a53cb97a259b830ecbe3cc1
MD5 3f5117ca856c53b7247799cd10efa2a9
SHA1 8f58b850386fc19cd4ffdbdc1310724ce533ad1c
SHA512 3c5ef687ecbef8316d2559793f5a602a1d7945500be9ac6fdf0fc3e081616a633de2d95e8bdd47c44c73c98f41e58b133cdfbb6ef019169888481f63e58bfba2
SSDEEP 98304:RaVsjom70ndrBFgOmll6jSga2nxCwdk+mvEBS8KssS:R+uom74drMJBirk+iEw8j
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

a9:7b:ed:e8:26:92:06:9c:79:ba:5d:51:62:c7:e8:1c:ea:f5:5b:c0:eb:4c:20:72:db:bb:4a:e6:d9:da:ba:34

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=525c3d3f1b06302b310410391d3f23471542520105293b2253150610173842041410,POSTALCODE=10825,ST=0b1c1115005f5c4e111608130d1716070407125b0c1704+ST=0b1c1115494a5c024150110d05170e09031e0a1f1a0150025113451d111807075354195315000e091843540114031f0f4053060e0414150c0210571f0a0a055b0c0b0a070b

Chains

May 2, 2024

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetModuleFileNameW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc HeapWalk FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

86eb4f54b68219aed3dff4edda1ef668b842a12a4a53cb97a259b830ecbe3cc1

PE Signature issue

kernel32

advapi32

generic