dcba639ad54390165133a203ac6151ef3e0dabb22552abff43a5bb4fce522647

General

Target
dcba639ad54390165133a203ac6151ef3e0dabb22552abff43a5bb4fce522647
Size 4.1MB
Sample240511-1rc1lsde77
SHA256 dcba639ad54390165133a203ac6151ef3e0dabb22552abff43a5bb4fce522647
MD5 d1c715fe1e07b14a0dba03bb14b2ea9c
SHA1 e590c356094d816ae678e15115403f4859f79b8d
SHA512 b3b603b7d1ebec0f09f17c4edd82964788e4f7bfd5c21f40f34e0d80d76910c819ed340036aff264d46e72ca4d84a348fe36cfb03d9d702fc79b3ba44c985975
SSDEEP 98304:ndk0Hms1kudhVEJR4yXNZOyu0bIMkrn4m+LTXSmyh/53k:dk0HmsddQJR4q7uiat+vSN30
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

dcba639ad54390165133a203ac6151ef3e0dabb22552abff43a5bb4fce522647

.exe 4.1MB

dcba639ad54390165133a203ac6151ef3e0dabb22552abff43a5bb4fce522647

IMPHASH b05e972c4df51432a6d0cd2c78feeff4
SHA256 dcba639ad54390165133a203ac6151ef3e0dabb22552abff43a5bb4fce522647
MD5 d1c715fe1e07b14a0dba03bb14b2ea9c
SHA1 e590c356094d816ae678e15115403f4859f79b8d
SHA512 b3b603b7d1ebec0f09f17c4edd82964788e4f7bfd5c21f40f34e0d80d76910c819ed340036aff264d46e72ca4d84a348fe36cfb03d9d702fc79b3ba44c985975
SSDEEP 98304:ndk0Hms1kudhVEJR4yXNZOyu0bIMkrn4m+LTXSmyh/53k:dk0HmsddQJR4q7uiat+vSN30
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

1c:ec:24:09:9c:33:ea:ba:cd:a1:c3:d4:38:ee:5a:4a:d5:19:30:e6:05:d7:0a:63:b5:f5:f0:33:9e:bc:be:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52251f5711571c0f0d0d243a002f3139341c263d07362111531206573b1100053331,POSTALCODE=10828,ST=0b1c1115005f5c4e110211020c100803061f0e00074b0c1a02+ST=0b1c1115494a5c0e46050a0d120f1645561d521a15010e0a07500703161643105207180c51000c010f1413070a07025344080a0019190c561800501c570a055b0c0b0a070b

Chains

May 3, 2024

Minor OS version

1

Major OS version

5

Entry point

16493

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer SetComputerNameExA LoadLibraryExW InterlockedDecrement SetCommBreak CreateHardLinkA LockFile GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA SetCommTimeouts GlobalAlloc GetSystemDirectoryW LoadLibraryW GetLocaleInfoW ReadConsoleInputA CreateEventA GetConsoleAliasW GlobalMemoryStatus InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA SetConsoleOutputCP AddAtomW GlobalFindAtomW GetOEMCP GetModuleHandleA BuildCommDCBA VirtualProtect GetTempPathA GetVolumeInformationW WriteConsoleW GetComputerNameA EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW CloseHandle SetEndOfFile

gdi32

GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

dcba639ad54390165133a203ac6151ef3e0dabb22552abff43a5bb4fce522647

PE Signature issue

kernel32

gdi32

generic