ad186525c2bbf9952b444101c1528e929d6e8e275aa01c7001d494f9b1e9bd32

General

Target
ad186525c2bbf9952b444101c1528e929d6e8e275aa01c7001d494f9b1e9bd32
Size 4.1MB
Sample240511-1tk41aah9v
SHA256 ad186525c2bbf9952b444101c1528e929d6e8e275aa01c7001d494f9b1e9bd32
MD5 cd3e6721527b5f6ea08eba1c417e42a2
SHA1 2067f0d5431ca17646e6a9902d1dcb3837d7c6ab
SHA512 8e09cda5ca9ef4119f3da587ea40805727ef6993147fa9bbff059ca9530a629866df0fdb46f48a551bd7196cd55830d0eb8fc24dd3338f2a361a0bebde9c79d3
SSDEEP 98304:Xdk0Hms1kudhVEJR4yXNZOyu0bIMkrn4m+LTXSmyh/53S:tk0HmsddQJR4q7uiat+vSN3C
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ad186525c2bbf9952b444101c1528e929d6e8e275aa01c7001d494f9b1e9bd32

.exe 4.1MB

ad186525c2bbf9952b444101c1528e929d6e8e275aa01c7001d494f9b1e9bd32

IMPHASH b05e972c4df51432a6d0cd2c78feeff4
SHA256 ad186525c2bbf9952b444101c1528e929d6e8e275aa01c7001d494f9b1e9bd32
MD5 cd3e6721527b5f6ea08eba1c417e42a2
SHA1 2067f0d5431ca17646e6a9902d1dcb3837d7c6ab
SHA512 8e09cda5ca9ef4119f3da587ea40805727ef6993147fa9bbff059ca9530a629866df0fdb46f48a551bd7196cd55830d0eb8fc24dd3338f2a361a0bebde9c79d3
SSDEEP 98304:Xdk0Hms1kudhVEJR4yXNZOyu0bIMkrn4m+LTXSmyh/53S:tk0HmsddQJR4q7uiat+vSN3C
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

1c:ec:24:09:9c:33:ea:ba:cd:a1:c3:d4:38:ee:5a:4a:d5:19:30:e6:05:d7:0a:63:b5:f5:f0:33:9e:bc:be:49

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10835,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

Chains

May 3, 2024

Minor OS version

1

Major OS version

5

Entry point

16493

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFilePointer SetComputerNameExA LoadLibraryExW InterlockedDecrement SetCommBreak CreateHardLinkA LockFile GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA SetCommTimeouts GlobalAlloc GetSystemDirectoryW LoadLibraryW GetLocaleInfoW ReadConsoleInputA CreateEventA GetConsoleAliasW GlobalMemoryStatus InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA SetConsoleOutputCP AddAtomW GlobalFindAtomW GetOEMCP GetModuleHandleA BuildCommDCBA VirtualProtect GetTempPathA GetVolumeInformationW WriteConsoleW GetComputerNameA EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW CloseHandle SetEndOfFile

gdi32

GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

ad186525c2bbf9952b444101c1528e929d6e8e275aa01c7001d494f9b1e9bd32

PE Signature issue

kernel32

gdi32

generic