3d14e6c72351cf538fd93936575e24b19099814399d8122e89d6d1eb4b9ec6c8

Sharing

Copy URL Twitter E-mail

General

Target
3d14e6c72351cf538fd93936575e24b19099814399d8122e89d6d1eb4b9ec6c8
Size 13.4MB
Sample240511-crbwjsae23
SHA256 3d14e6c72351cf538fd93936575e24b19099814399d8122e89d6d1eb4b9ec6c8
MD5 f27996693b143cffdd7f292447d08c72
SHA1 abb3a3e356be57c93e13b9a968a00796eefd4f85
SHA512 dec063a264ead20b46afd83ebebff9432d195e35ec80d71ed7111a8867ecbfced3ca4f8acb12fb105857ddc5dc5c8719f7a976d37f58417ab5beb0530907efa1
SSDEEP 393216:I+sJZ8dis2trRxQ75JbYBZgyAKnwRAd1duF:I+sv812h0iBmyWAd1Q
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

3d14e6c72351cf538fd93936575e24b19099814399d8122e89d6d1eb4b9ec6c8

.exe 13.4MB

3d14e6c72351cf538fd93936575e24b19099814399d8122e89d6d1eb4b9ec6c8

IMPHASH 8bcfaadb0cd4b91665e50455e49ae7cb
SHA256 3d14e6c72351cf538fd93936575e24b19099814399d8122e89d6d1eb4b9ec6c8
MD5 f27996693b143cffdd7f292447d08c72
SHA1 abb3a3e356be57c93e13b9a968a00796eefd4f85
SHA512 dec063a264ead20b46afd83ebebff9432d195e35ec80d71ed7111a8867ecbfced3ca4f8acb12fb105857ddc5dc5c8719f7a976d37f58417ab5beb0530907efa1
SSDEEP 393216:I+sJZ8dis2trRxQ75JbYBZgyAKnwRAd1duF:I+sv812h0iBmyWAd1Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

01:30:a7:72:53:9b:72:c8:28:58:98:52:7c:c4:11:8c:04:03:61:d4

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=LogMeIn\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=LogMeIn\, Inc.,ST=Massachusetts,C=US

Chains

May 3, 2024

Minor OS version

Major OS version

Entry point

30523

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

wvsprintfA wsprintfA MessageBoxA

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey

shell32

ShellExecuteA SHCreateDirectoryExA SHGetFolderPathA

kernel32

SetEndOfFile ReadFile AreFileApisANSI CreateFileW WriteConsoleW FlushFileBuffers SetStdHandle SetFilePointerEx FreeResource LockResource HeapAlloc HeapFree GetProcessHeap GetShortPathNameA OpenProcess TerminateProcess GetExitCodeProcess GetLastError SetLastError WaitForSingleObject LoadResource SizeofResource WriteFile CloseHandle FormatMessageA lstrcpyA lstrcatA lstrlenA GetModuleFileNameA CreateProcessA GetEnvironmentVariableA SetEnvironmentVariableA FindResourceA GetTempPathA GetTempFileNameA GetWindowsDirectoryA SetCurrentDirectoryA CreateDirectoryA QueryDosDeviceA CreateFileA DeleteFileA MoveFileExA CreateToolhelp32Snapshot Process32First Process32Next GetLocalTime lstrcmpA GetConsoleMode GetConsoleCP GetStringTypeW EncodePointer DecodePointer ExitProcess GetModuleHandleExW GetProcAddress ReadConsoleW MultiByteToWideChar WideCharToMultiByte RaiseException RtlUnwind GetCommandLineA IsDebuggerPresent IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapSize GetCurrentThreadId GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW HeapReAlloc LCMapStringW

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

psapi

GetProcessImageFileNameA

Sharing

General

Malware Config

Signatures

File Explorer

3d14e6c72351cf538fd93936575e24b19099814399d8122e89d6d1eb4b9ec6c8

PE Signature issue

user32

advapi32

shell32

kernel32

version

psapi

generic