747d0a36b0c50e13560f6c0e8df17fb071f442619077a4b7fa2e13365ea68d5b

General

Target
747d0a36b0c50e13560f6c0e8df17fb071f442619077a4b7fa2e13365ea68d5b
Size 4.2MB
Sample240502-y768aaha25
SHA256 747d0a36b0c50e13560f6c0e8df17fb071f442619077a4b7fa2e13365ea68d5b
MD5 1ff3ee3f47f4a59092796c1b81a9ec6b
SHA1 d44bacd7f4b07121636ca71ddc7f11e234fb95c0
SHA512 cb69aa4a6edf0a40cb92f6eea773f51d73fd923023d60b28ae320b894321e156147df5467599d83039b210256c1eee3c0395ea647db0bfbd1c6c57601f75d50a
SSDEEP 98304:Z6SrQKkBQC4PnHNiNLk7n0q6bsVEgqWgwUIwD+toyYlM5LNuO/:Xvwh4PnHck7nOsVEgAwH9tZh5LP
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

747d0a36b0c50e13560f6c0e8df17fb071f442619077a4b7fa2e13365ea68d5b

.exe 4.2MB

747d0a36b0c50e13560f6c0e8df17fb071f442619077a4b7fa2e13365ea68d5b

IMPHASH 20a6a1c56501f5fd78f9b0e0618fa18b
SHA256 747d0a36b0c50e13560f6c0e8df17fb071f442619077a4b7fa2e13365ea68d5b
MD5 1ff3ee3f47f4a59092796c1b81a9ec6b
SHA1 d44bacd7f4b07121636ca71ddc7f11e234fb95c0
SHA512 cb69aa4a6edf0a40cb92f6eea773f51d73fd923023d60b28ae320b894321e156147df5467599d83039b210256c1eee3c0395ea647db0bfbd1c6c57601f75d50a
SSDEEP 98304:Z6SrQKkBQC4PnHNiNLk7n0q6bsVEgqWgwUIwD+toyYlM5LNuO/:Xvwh4PnHck7nOsVEgAwH9tZh5LP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

eb:e4:70:e7:1a:6a:5c:1a:17:0a:2d:ba:e7:87:88:3a:54:99:04:12:1d:ff:d4:98:e4:0b:45:f6:4a:ed:be:ed

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a1720000d011b430433013e102d3427142b4024102b2a13264116170e10372429,POSTALCODE=10831,ST=0b1c1115005f5c4e0706040f1d15011211164f0716+ST=0b1c1115494a5c53171153050a060e05131d031c1702195d090014094753050d0f011f15150b1f1c100c1507545c1d0e011f070501080c0e5e0b0e450c12055b0c0b0a070b

Chains

May 2, 2024

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

747d0a36b0c50e13560f6c0e8df17fb071f442619077a4b7fa2e13365ea68d5b

PE Signature issue

kernel32

advapi32

generic