9e2155dea18caad2c5938673ede9152f2b2a661c6e30225d5f3648c5ae49d8e3

General

Target
9e2155dea18caad2c5938673ede9152f2b2a661c6e30225d5f3648c5ae49d8e3
Size 4.2MB
Sample240502-xvpl2agb52
SHA256 9e2155dea18caad2c5938673ede9152f2b2a661c6e30225d5f3648c5ae49d8e3
MD5 d913b35febef65d3412db818eed398db
SHA1 3e777aa71a81261694f48b7d0d22732856b37a16
SHA512 9165909009fd022beeea3f8509d8bc7143b77018bd4e1adf0469b9452a21db1e8ca261e4cca5fac003449b8084599bb7f02dc86ff21d2c1bc0248f09060adf81
SSDEEP 98304:bmEjzi/3O52sDSn2sBMneAY2gSm6lbP8XYs3iaeok9nLe:CEjzK3O2Es2eA2Alb4Rybxq
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

9e2155dea18caad2c5938673ede9152f2b2a661c6e30225d5f3648c5ae49d8e3

.exe 4.2MB

9e2155dea18caad2c5938673ede9152f2b2a661c6e30225d5f3648c5ae49d8e3

IMPHASH 20a6a1c56501f5fd78f9b0e0618fa18b
SHA256 9e2155dea18caad2c5938673ede9152f2b2a661c6e30225d5f3648c5ae49d8e3
MD5 d913b35febef65d3412db818eed398db
SHA1 3e777aa71a81261694f48b7d0d22732856b37a16
SHA512 9165909009fd022beeea3f8509d8bc7143b77018bd4e1adf0469b9452a21db1e8ca261e4cca5fac003449b8084599bb7f02dc86ff21d2c1bc0248f09060adf81
SSDEEP 98304:bmEjzi/3O52sDSn2sBMneAY2gSm6lbP8XYs3iaeok9nLe:CEjzK3O2Es2eA2Alb4Rybxq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

63:82:8e:bb:88:8e:fc:19:05:38:43:2f:fd:6c:b7:e6:b0:09:75:33:ef:1c:0c:2a:65:0f:a9:c3:d1:b1:2a:0f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522434573635311625120101053d123d53210e113336571014061e5d361525000421,POSTALCODE=10810,ST=0b1c1115005f5c4e11160813180402164b1c1312+ST=0b1c1115494a5c111413080004511740571216140506085f501c465147571b51505119141402511b5716571c511b0904121c030e061111050a0600110102055b0c0b0a070b

Chains

May 2, 2024

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

9e2155dea18caad2c5938673ede9152f2b2a661c6e30225d5f3648c5ae49d8e3

PE Signature issue

kernel32

advapi32

generic