6112b0f213a4c501578ddac5db196aeccc1986b3f8e0a3d4b1e6ca60d22a87ce

General

Target
6112b0f213a4c501578ddac5db196aeccc1986b3f8e0a3d4b1e6ca60d22a87ce
Size 4.2MB
Sample240502-y2pfaaeh6s
SHA256 6112b0f213a4c501578ddac5db196aeccc1986b3f8e0a3d4b1e6ca60d22a87ce
MD5 acc747e4708b3d8cc7389631ac52d6aa
SHA1 47c150f3e0cd24df98beefc387b74b9460df13d5
SHA512 6a1f230d5f65ffbf5aed84d9b63c3910f00f569f1f9634f88023a888de28d93ce0cb4ac77af290ec4c62f9d194e2c1e1d0e03ca7e7059e5b9317ecd535fc8a3d
SSDEEP 98304:56SrQKkBQC4PnHNiNLk7n0q6bsVEgqWgwUIwD+toyYlM5LNuOZ:3vwh4PnHck7nOsVEgAwH9tZh5Lp
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

6112b0f213a4c501578ddac5db196aeccc1986b3f8e0a3d4b1e6ca60d22a87ce

.exe 4.2MB

6112b0f213a4c501578ddac5db196aeccc1986b3f8e0a3d4b1e6ca60d22a87ce

IMPHASH 20a6a1c56501f5fd78f9b0e0618fa18b
SHA256 6112b0f213a4c501578ddac5db196aeccc1986b3f8e0a3d4b1e6ca60d22a87ce
MD5 acc747e4708b3d8cc7389631ac52d6aa
SHA1 47c150f3e0cd24df98beefc387b74b9460df13d5
SHA512 6a1f230d5f65ffbf5aed84d9b63c3910f00f569f1f9634f88023a888de28d93ce0cb4ac77af290ec4c62f9d194e2c1e1d0e03ca7e7059e5b9317ecd535fc8a3d
SSDEEP 98304:56SrQKkBQC4PnHNiNLk7n0q6bsVEgqWgwUIwD+toyYlM5LNuOZ:3vwh4PnHck7nOsVEgAwH9tZh5Lp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

eb:e4:70:e7:1a:6a:5c:1a:17:0a:2d:ba:e7:87:88:3a:54:99:04:12:1d:ff:d4:98:e4:0b:45:f6:4a:ed:be:ed

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5225102f0434382d242811523e2627225c0650271700133f52163721402002312055,POSTALCODE=10812,ST=0b1c1115005f5c4e110211020a04161610030607020106461710+ST=0b1c1115494a5c041c1150080c17090704050e005006511f0214001f1518010656090d0252450d0309185403131b5207441f1b0d41130a081a5013450802055b0c0b0a070b

Chains

May 2, 2024

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

6112b0f213a4c501578ddac5db196aeccc1986b3f8e0a3d4b1e6ca60d22a87ce

PE Signature issue

kernel32

advapi32

generic