d65ea849dff3d91df01d3913c5ed8f2db191fca1b967fbe59dff8484e7fbb58e

General

Target
d65ea849dff3d91df01d3913c5ed8f2db191fca1b967fbe59dff8484e7fbb58e
Size 4.1MB
Sample240513-lpb8zagg7s
SHA256 d65ea849dff3d91df01d3913c5ed8f2db191fca1b967fbe59dff8484e7fbb58e
MD5 1fdc1565f155c9101f82e34863167d80
SHA1 46357c44132b5cab1c2d5c5069c00e1fb008edf4
SHA512 03bfb8dac25a8b31f518c33b2dba16b95ec802b1fd951b8aa73ee467a3cbbadbce5dcb100f569b82f9a7d029d416270e422602f9e26d2ff24210590517953f33
SSDEEP 98304:lzMQ/NnoZdsmUpX1pNCwLvIEVLEuVLez1cPPhkNDJtybhr1qB7uY:lVlnybUpX1pN10kL/kNlQbhr1aL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

d65ea849dff3d91df01d3913c5ed8f2db191fca1b967fbe59dff8484e7fbb58e

.exe 4.1MB

d65ea849dff3d91df01d3913c5ed8f2db191fca1b967fbe59dff8484e7fbb58e

IMPHASH 96efaf9c60e654e665d9ec2f8fc5b1e3
SHA256 d65ea849dff3d91df01d3913c5ed8f2db191fca1b967fbe59dff8484e7fbb58e
MD5 1fdc1565f155c9101f82e34863167d80
SHA1 46357c44132b5cab1c2d5c5069c00e1fb008edf4
SHA512 03bfb8dac25a8b31f518c33b2dba16b95ec802b1fd951b8aa73ee467a3cbbadbce5dcb100f569b82f9a7d029d416270e422602f9e26d2ff24210590517953f33
SSDEEP 98304:lzMQ/NnoZdsmUpX1pNCwLvIEVLEuVLez1cPPhkNDJtybhr1qB7uY:lVlnybUpX1pN10kL/kNlQbhr1aL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

26:aa:2e:fe:c5:45:7b:f3:34:6e:b3:c7:23:69:f4:71:79:14:fe:de:77:37:2e:fc:e6:05:d1:f9:7b:4c:67:ba

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10809,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

Chains

May 13, 2024

Minor OS version

0

Major OS version

5

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoW InterlockedDecrement SetConsoleScreenBufferSize FindCloseChangeNotification FreeEnvironmentStringsA GetModuleHandleW GetSystemTimes GlobalAlloc lstrcpynW GetFileAttributesW WriteConsoleW IsBadWritePtr CompareStringW SetCurrentDirectoryA FindFirstFileExA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA GetProcessHeaps GetConsoleDisplayMode LoadLibraryA SetFileApisToANSI AddAtomA OpenJobObjectW FindAtomA WaitForMultipleObjects EnumDateFormatsA SetConsoleTitleW GetCommTimeouts BuildCommDCBA GetSystemTime GetLastError HeapReAlloc HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapSize GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

d65ea849dff3d91df01d3913c5ed8f2db191fca1b967fbe59dff8484e7fbb58e

PE Signature issue

kernel32

user32

generic