97ea96520a58d340a465d76dec5004d709582273d07a4f5eb529993db2bb5394

General

Target
97ea96520a58d340a465d76dec5004d709582273d07a4f5eb529993db2bb5394
Size 4.1MB
Sample240515-xv4e7aff84
SHA256 97ea96520a58d340a465d76dec5004d709582273d07a4f5eb529993db2bb5394
MD5 9caa03dea74e5bf8837dc8e9c8fcb463
SHA1 77a71cbc15a6a090d7d260409d09eecbbc980d5b
SHA512 b47d3331ddc1a7614db41e6cc80891e063537923ea0c73415fae0c14ecdd98f402996f6662a0d9ed43b73108f7ffc35195bc489055f7418a66fd60483d582986
SSDEEP 98304:PvKhyQu49tHH7DRYDff1lXFitQcJyMhd8Y1v:Pv8u49ZH7eDfxu9yMsEv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

97ea96520a58d340a465d76dec5004d709582273d07a4f5eb529993db2bb5394

.exe 4.1MB

97ea96520a58d340a465d76dec5004d709582273d07a4f5eb529993db2bb5394

IMPHASH a2acb5ca17c091b2cf1bb128938cbf30
SHA256 97ea96520a58d340a465d76dec5004d709582273d07a4f5eb529993db2bb5394
MD5 9caa03dea74e5bf8837dc8e9c8fcb463
SHA1 77a71cbc15a6a090d7d260409d09eecbbc980d5b
SHA512 b47d3331ddc1a7614db41e6cc80891e063537923ea0c73415fae0c14ecdd98f402996f6662a0d9ed43b73108f7ffc35195bc489055f7418a66fd60483d582986
SSDEEP 98304:PvKhyQu49tHH7DRYDff1lXFitQcJyMhd8Y1v:Pv8u49ZH7eDfxu9yMsEv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

7a:ad:c0:8a:b8:ff:06:98:d2:14:89:ad:05:ed:cf:11:e6:e5:40:00:09:79:d8:56:3f:a5:e8:b2:1e:58:66:33

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10809,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

Chains

May 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA InterlockedIncrement SetDefaultCommConfigW SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap IsBadReadPtr GetSystemTimes GlobalAlloc Sleep GetFileAttributesA lstrcpynW CompareStringW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress GetConsoleDisplayMode BuildCommDCBW SetFileApisToOEM LoadLibraryA WriteConsoleA AddAtomW FindNextChangeNotification OpenJobObjectW FindAtomA FreeEnvironmentStringsW BuildCommDCBA PurgeComm EnumDateFormatsW SetCalendarInfoA GetSystemTime HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

SetActiveWindow

Sharing

General

Malware Config

Signatures

File Explorer

97ea96520a58d340a465d76dec5004d709582273d07a4f5eb529993db2bb5394

PE Signature issue

kernel32

user32

generic