495dd948ea1fb61fc843e2e231663cdd56a89f031f12b06364168ea8376855c3

General

Target
495dd948ea1fb61fc843e2e231663cdd56a89f031f12b06364168ea8376855c3
Size 4.2MB
Sample240502-t1a42seh23
SHA256 495dd948ea1fb61fc843e2e231663cdd56a89f031f12b06364168ea8376855c3
MD5 a018380b5e68bb331c17ba8a284a5b20
SHA1 d920c5a24d0280bce0cad9970ce24b601001d389
SHA512 e1756e1e2d77b90670b321ec4217d6ea52745f41f5252a43611dba29011dd553761e2ef17eb994422155b40734e7b7d6dd8e6155d40a77785451106acbbf706d
SSDEEP 98304:BaVsjom70ndrBFgOmll6jSga2nxCwdk+mvEBS8Kssb:B+uom74drMJBirk+iEw8a
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

495dd948ea1fb61fc843e2e231663cdd56a89f031f12b06364168ea8376855c3

.exe 4.2MB

495dd948ea1fb61fc843e2e231663cdd56a89f031f12b06364168ea8376855c3

IMPHASH 85119ecdf5a2d0eab798abf1df3585e6
SHA256 495dd948ea1fb61fc843e2e231663cdd56a89f031f12b06364168ea8376855c3
MD5 a018380b5e68bb331c17ba8a284a5b20
SHA1 d920c5a24d0280bce0cad9970ce24b601001d389
SHA512 e1756e1e2d77b90670b321ec4217d6ea52745f41f5252a43611dba29011dd553761e2ef17eb994422155b40734e7b7d6dd8e6155d40a77785451106acbbf706d
SSDEEP 98304:BaVsjom70ndrBFgOmll6jSga2nxCwdk+mvEBS8Kssb:B+uom74drMJBirk+iEw8a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

a9:7b:ed:e8:26:92:06:9c:79:ba:5d:51:62:c7:e8:1c:ea:f5:5b:c0:eb:4c:20:72:db:bb:4a:e6:d9:da:ba:34

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a1720000d011b430433013e102d3427142b4024102b2a13264116170e10372429,POSTALCODE=10820,ST=0b1c1115005f5c4e0706040f1d15011211164f0716+ST=0b1c1115494a5c53171153050a060e05131d031c1702195d090014094753050d0f011f15150b1f1c100c1507545c1d0e011f070501080c0e5e0b0e450c12055b0c0b0a070b

Chains

May 2, 2024

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW GetModuleFileNameW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc HeapWalk FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

495dd948ea1fb61fc843e2e231663cdd56a89f031f12b06364168ea8376855c3

PE Signature issue

kernel32

advapi32

generic