62d9a43f922c445d18718e78b5214a3f850822e0f99b0bd69c87496fa7681dd7

General

Target
62d9a43f922c445d18718e78b5214a3f850822e0f99b0bd69c87496fa7681dd7
Size 4.1MB
Sample240515-wrdvpada74
SHA256 62d9a43f922c445d18718e78b5214a3f850822e0f99b0bd69c87496fa7681dd7
MD5 879254e27447aa757455bfe4811f6da3
SHA1 ba82bb3d067fe30315e6b7d5dfff2dd17f7a250c
SHA512 7a3b4fabbccf5f4757e9da8a2a894f446e93b3cfd9b483afb467d8c3359aae00839b88ffe420a0228540265ee068117803c5da62832273f8463070eeb6daa3ec
SSDEEP 98304:QoKALZtLSnhBaG13jSGzI9y04m/Xf7c/d7YDSGfJg5NEka2Q+gF:QC1IraEjIw04m/Xfo4a5yka2Q+gF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

62d9a43f922c445d18718e78b5214a3f850822e0f99b0bd69c87496fa7681dd7

.exe 4.1MB

62d9a43f922c445d18718e78b5214a3f850822e0f99b0bd69c87496fa7681dd7

IMPHASH a2acb5ca17c091b2cf1bb128938cbf30
SHA256 62d9a43f922c445d18718e78b5214a3f850822e0f99b0bd69c87496fa7681dd7
MD5 879254e27447aa757455bfe4811f6da3
SHA1 ba82bb3d067fe30315e6b7d5dfff2dd17f7a250c
SHA512 7a3b4fabbccf5f4757e9da8a2a894f446e93b3cfd9b483afb467d8c3359aae00839b88ffe420a0228540265ee068117803c5da62832273f8463070eeb6daa3ec
SSDEEP 98304:QoKALZtLSnhBaG13jSGzI9y04m/Xf7c/d7YDSGfJg5NEka2Q+gF:QC1IraEjIw04m/Xfo4a5yka2Q+gF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

50:54:8f:79:7c:c7:4c:ec:0b:c9:06:50:f4:51:5c:58:cc:97:50:7e:ce:f0:33:c0:f5:06:7c:c9:5d:47:a3:0d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b1f00070a2734475a3201002b1c42301c1b0732151b1d231030330b0713013107,POSTALCODE=10826,ST=0b1c1115005f5c4e140f090709110417101e115b0c1704+ST=0b1c1115494a5c141b55031011521200011110175651021a0c0100080654181701000b110407101e081204565401155144530712111a57090e5304000602055b0c0b0a070b

Chains

May 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA InterlockedIncrement SetDefaultCommConfigW SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap IsBadReadPtr GetSystemTimes GlobalAlloc Sleep GetFileAttributesA lstrcpynW CompareStringW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress GetConsoleDisplayMode BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA AddAtomW FindNextChangeNotification OpenJobObjectW FindAtomA FreeEnvironmentStringsW BuildCommDCBA PurgeComm EnumDateFormatsW SetCalendarInfoA GetSystemTime HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

SetActiveWindow

Sharing

General

Malware Config

Signatures

File Explorer

62d9a43f922c445d18718e78b5214a3f850822e0f99b0bd69c87496fa7681dd7

PE Signature issue

kernel32

user32

generic