6fbe231039a864174e870791a5ce0bd0d195410c22965574e804f03f3a7d1bb9

General

Target
6fbe231039a864174e870791a5ce0bd0d195410c22965574e804f03f3a7d1bb9
Size 4.1MB
Sample240515-e4c1gshd49
SHA256 6fbe231039a864174e870791a5ce0bd0d195410c22965574e804f03f3a7d1bb9
MD5 12fef3038882935472aa531f86e94ab2
SHA1 35dd8be70fa3bee38cd47257627a7865706ad1f8
SHA512 c4922ac46400f386f0da6e1837694d441b6d5e0465b21908714a83ac1f581dbe4f27ddf5dfbb57a5bab7de8d69ad3008beb351df43d00284e9fc4e46822833c1
SSDEEP 98304:HBdNwdIX1m95GdEY+SdNeV8DIvNeESR+qiVH7IIm3:HeIFcGdrdiVeIFy4rVH0
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

6fbe231039a864174e870791a5ce0bd0d195410c22965574e804f03f3a7d1bb9

.exe 4.1MB

6fbe231039a864174e870791a5ce0bd0d195410c22965574e804f03f3a7d1bb9

IMPHASH e6d160fbcd2a18a45e3f84ba4fe8b53c
SHA256 6fbe231039a864174e870791a5ce0bd0d195410c22965574e804f03f3a7d1bb9
MD5 12fef3038882935472aa531f86e94ab2
SHA1 35dd8be70fa3bee38cd47257627a7865706ad1f8
SHA512 c4922ac46400f386f0da6e1837694d441b6d5e0465b21908714a83ac1f581dbe4f27ddf5dfbb57a5bab7de8d69ad3008beb351df43d00284e9fc4e46822833c1
SSDEEP 98304:HBdNwdIX1m95GdEY+SdNeV8DIvNeESR+qiVH7IIm3:HeIFcGdrdiVeIFy4rVH0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

15:5d:32:b8:4b:95:69:d8:74:04:d8:f5:96:a1:ae:e0:37:72:71:8c:a3:47:16:e4:b4:e0:f2:74:a9:8e:53:ff

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b0300053323224d0036132e0352222e2216260b17250f343c151c22001a3b0d00,POSTALCODE=10700,ST=0b1c1115005f5c4e130a09061b01101e15030d1400004d071702+ST=0b1c1115494a5c0a405601000f17134502120d431112025a0d5102560055050452040c11020709125303081f0a5b1f1d400c1808040a15195a101d060a1a055b0c0b0a070b

Chains

May 13, 2024

Minor OS version

0

Major OS version

5

Entry point

6294

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA InterlockedIncrement SetDefaultCommConfigW SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap IsBadReadPtr GetSystemTimes GlobalAlloc Sleep GetFileAttributesA lstrcpynW WriteConsoleW CompareStringW SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA LoadLibraryA SetCalendarInfoW SetConsoleDisplayMode AddAtomW FindNextChangeNotification OpenJobObjectW FindAtomA SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA PurgeComm EnumDateFormatsW GetSystemTime AreFileApisANSI GetLastError HeapReAlloc HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapSize GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

6fbe231039a864174e870791a5ce0bd0d195410c22965574e804f03f3a7d1bb9

PE Signature issue

kernel32

user32

generic