3a5c13236435bda7fab6a3d620f43ed177a3ee025ef939052fa2522cb498f74f

General

Target
3a5c13236435bda7fab6a3d620f43ed177a3ee025ef939052fa2522cb498f74f
Size 4.1MB
Sample240515-3hybashg3z
SHA256 3a5c13236435bda7fab6a3d620f43ed177a3ee025ef939052fa2522cb498f74f
MD5 c7322e07da3446de25d2c0d2aaf0be31
SHA1 3bf66312122519f06337bddd55823e6c894390a9
SHA512 da57d9206a8e7978b163231af375df6086545bb723d5759cd4f1e5778c9540e7a8bfe124b7aa181ea91e27c42ef80cc934be5626e0fbdd5faa9822c97571a475
SSDEEP 98304:8CrMvuyR1RyPQdAJHItu4QbOo8ZPCtSlOjuAz5n6hmlDmbf2:85vuu/yDHItfIOpPCSgB5tCK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

3a5c13236435bda7fab6a3d620f43ed177a3ee025ef939052fa2522cb498f74f

.exe 4.1MB

3a5c13236435bda7fab6a3d620f43ed177a3ee025ef939052fa2522cb498f74f

IMPHASH 6028c52dd078bfee47d95b02da34304e
SHA256 3a5c13236435bda7fab6a3d620f43ed177a3ee025ef939052fa2522cb498f74f
MD5 c7322e07da3446de25d2c0d2aaf0be31
SHA1 3bf66312122519f06337bddd55823e6c894390a9
SHA512 da57d9206a8e7978b163231af375df6086545bb723d5759cd4f1e5778c9540e7a8bfe124b7aa181ea91e27c42ef80cc934be5626e0fbdd5faa9822c97571a475
SSDEEP 98304:8CrMvuyR1RyPQdAJHItu4QbOo8ZPCtSlOjuAz5n6hmlDmbf2:85vuu/yDHItfIOpPCSgB5tCK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

6a:0f:66:5c:e8:51:29:fc:72:3e:85:11:cb:10:3e:3b:d2:10:e5:1e:23:9d:be:ce:5f:fa:c6:7d:89:68:de:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522036264b3c07530c0910253d36220330152b1b14292e1a512d092b0b3746071333,POSTALCODE=10805,ST=0b1c1115005f5c4e010b00161801040700070818064b0c1a02+ST=0b1c1115494a5c031c0b02081a1750475310151f070b57051217441d47031d1512195d501615110b570d0a17550b1209150a45131d1315075a001044160a055b0c0b0a070b

Chains

May 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA InterlockedIncrement SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap IsBadReadPtr GetSystemTimes GlobalAlloc Sleep GetFileAttributesA lstrcpynW CompareStringW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress GetConsoleDisplayMode BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA AddAtomW FindNextChangeNotification OpenJobObjectW FindAtomA FreeEnvironmentStringsW BuildCommDCBA PurgeComm EnumDateFormatsW SetCalendarInfoA GetSystemTime HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

SetActiveWindow

Sharing

General

Malware Config

Signatures

File Explorer

3a5c13236435bda7fab6a3d620f43ed177a3ee025ef939052fa2522cb498f74f

PE Signature issue

kernel32

user32

generic