932db7cb197efc149a33b42d050e0bdb5eb9cac0a9e8068f86d871107f4df0a8

General

Target
932db7cb197efc149a33b42d050e0bdb5eb9cac0a9e8068f86d871107f4df0a8
Size 4.2MB
Sample240502-ylcfsaef31
SHA256 932db7cb197efc149a33b42d050e0bdb5eb9cac0a9e8068f86d871107f4df0a8
MD5 fdd7b1cd92d30ca858a0a14e7271a599
SHA1 be925b7129168b8b0511d09c218a63d519abab17
SHA512 620a7d9e2383e57d0851d0dc6d317bfaa5354a173661e73c5e18cff8e5c64417b169738f6c0f0522a6c0df7a5931953df1efcca829b3e02f3ca3a6bc1bc26ba5
SSDEEP 98304:7wI55FRIfsmtYhw63zMBnKz9mF45iI1/hY:7n55zQC3zMBnKzsIxG
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

932db7cb197efc149a33b42d050e0bdb5eb9cac0a9e8068f86d871107f4df0a8

.exe 4.2MB

932db7cb197efc149a33b42d050e0bdb5eb9cac0a9e8068f86d871107f4df0a8

IMPHASH 20a6a1c56501f5fd78f9b0e0618fa18b
SHA256 932db7cb197efc149a33b42d050e0bdb5eb9cac0a9e8068f86d871107f4df0a8
MD5 fdd7b1cd92d30ca858a0a14e7271a599
SHA1 be925b7129168b8b0511d09c218a63d519abab17
SHA512 620a7d9e2383e57d0851d0dc6d317bfaa5354a173661e73c5e18cff8e5c64417b169738f6c0f0522a6c0df7a5931953df1efcca829b3e02f3ca3a6bc1bc26ba5
SSDEEP 98304:7wI55FRIfsmtYhw63zMBnKz9mF45iI1/hY:7n55zQC3zMBnKzsIxG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

8d:6c:a5:b4:6e:bf:70:24:10:50:44:13:e8:24:3e:60:7b:42:d0:61:ec:75:12:06:ff:fa:39:5c:db:8a:71:43

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19,POSTALCODE=10826,ST=0b1c1115005f5c4e161100021c001003011215104d0a110f+ST=0b1c1115494a5c05125116195f151d00521f0d135111515d03161110070d03151709010f5103081c0b00040b545d06080b0b050e060b08091d5301090612055b0c0b0a070b

Chains

May 2, 2024

Minor OS version

0

Major OS version

5

Entry point

5636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState SetDefaultCommConfigW SetConsoleScreenBufferSize FreeEnvironmentStringsA GetModuleHandleW GetProcessHeap GetConsoleAliasesLengthA GetSystemTimes GetVolumeInformationA LoadLibraryW IsBadCodePtr GetConsoleAliasExesLengthW lstrcpynW WriteConsoleW SetConsoleTitleA GetLocaleInfoA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA GetConsoleDisplayMode SetFileAttributesA BuildCommDCBW SetFileApisToOEM LoadLibraryA LocalAlloc FindAtomA WaitForMultipleObjects GetCurrentDirectoryA EnumDateFormatsW GetSystemTime SetCurrentDirectoryA EnumCalendarInfoA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage VirtualAlloc HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle FlushFileBuffers

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

932db7cb197efc149a33b42d050e0bdb5eb9cac0a9e8068f86d871107f4df0a8

PE Signature issue

kernel32

advapi32

generic