26df6a3c515d9e9c0f3a1911864b8a8931e955f4abe948fc95114566e73b3d86

General

Target
26df6a3c515d9e9c0f3a1911864b8a8931e955f4abe948fc95114566e73b3d86
Size 4.1MB
Sample240515-3qfffsac2v
SHA256 26df6a3c515d9e9c0f3a1911864b8a8931e955f4abe948fc95114566e73b3d86
MD5 d224c01165136763824cb4cf0144493f
SHA1 9bc66aac34d81bbfb85e9f7e2e02d2c25d8d0394
SHA512 fd908bf6b893bd367f35e4c7b4bbf2cc92634479fa56d825b5495931284e52cf120e52ae74c79d10e872a71f92e446df5b0e74c89d735106790e23da4f5827d2
SSDEEP 98304:3sj80k8u7e4te7QNzi5j0edbbHwu+w5lmM0XQn0:3g9u7eueIzil0SbrHmM0J
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

26df6a3c515d9e9c0f3a1911864b8a8931e955f4abe948fc95114566e73b3d86

.exe 4.1MB

26df6a3c515d9e9c0f3a1911864b8a8931e955f4abe948fc95114566e73b3d86

IMPHASH 41372d3ed97f25fbd101f5b163419e20
SHA256 26df6a3c515d9e9c0f3a1911864b8a8931e955f4abe948fc95114566e73b3d86
MD5 d224c01165136763824cb4cf0144493f
SHA1 9bc66aac34d81bbfb85e9f7e2e02d2c25d8d0394
SHA512 fd908bf6b893bd367f35e4c7b4bbf2cc92634479fa56d825b5495931284e52cf120e52ae74c79d10e872a71f92e446df5b0e74c89d735106790e23da4f5827d2
SSDEEP 98304:3sj80k8u7e4te7QNzi5j0edbbHwu+w5lmM0XQn0:3g9u7eueIzil0SbrHmM0J
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

3d:d3:4f:45:ca:24:25:39:e4:ba:ee:36:0e:f0:ec:dd:19:fb:9a:d9:29:c5:34:a4:11:a3:19:26:2c:c7:a2:fc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52263d520931235736570a2402571c4021122b211102515e242235323619033a0b11,POSTALCODE=10802,ST=0b1c1115005f5c4e061704171b111712031508164d0a110f+ST=0b1c1115494a5c5305080e17100e0340021d1116090d510a0d0c455712130f510c06110f020b0a100346090b065b0e06410b06530c151c1b191457400b12055b0c0b0a070b

Chains

May 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA CommConfigDialogA InterlockedIncrement FlushConsoleInputBuffer GetModuleHandleW GetProcessHeap GetSystemTimes GetPriorityClass GlobalAlloc Sleep GetFileAttributesA lstrcpynW CompareStringW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress GetConsoleDisplayMode SetFileApisToOEM LoadLibraryA WriteConsoleA AddAtomW FindNextChangeNotification OpenJobObjectW FindAtomA EnumDateFormatsA FreeEnvironmentStringsW BuildCommDCBA PurgeComm SetCalendarInfoA GetSystemTime HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

SetActiveWindow

Sharing

General

Malware Config

Signatures

File Explorer

26df6a3c515d9e9c0f3a1911864b8a8931e955f4abe948fc95114566e73b3d86

PE Signature issue

kernel32

user32

generic