5555a8e1068ec667137bd32406eaa67f1022a7609e838c6d09968fcbc61376f1

General

Target
5555a8e1068ec667137bd32406eaa67f1022a7609e838c6d09968fcbc61376f1
Size 4.1MB
Sample240516-2547pade88
SHA256 5555a8e1068ec667137bd32406eaa67f1022a7609e838c6d09968fcbc61376f1
MD5 bd5f0e78687f4fa2653c66bfe4d8527a
SHA1 ca3195b3087ff8ff379a315516dcd5eae49521d7
SHA512 9b92c758b5470d5b070092b318d7e43fe35281e91827dcc1e5b156a6079c7b07f162f2b603d75e358637e70c1e939b4a7371ccd5b208c2829e087829d3e87faf
SSDEEP 49152:NusMcn8CcimaK+RGz/zlt4bISp3DCHxBfUEIk/TW2I851K9FoR0Q4A8QpOl6wIkI:PMhq0P/4bNpqfeTcPxPwIZSKEVtlBQ60
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

5555a8e1068ec667137bd32406eaa67f1022a7609e838c6d09968fcbc61376f1

.exe 4.1MB

5555a8e1068ec667137bd32406eaa67f1022a7609e838c6d09968fcbc61376f1

IMPHASH ab8b07a5adb6c3411132a8f229f73c1a
SHA256 5555a8e1068ec667137bd32406eaa67f1022a7609e838c6d09968fcbc61376f1
MD5 bd5f0e78687f4fa2653c66bfe4d8527a
SHA1 ca3195b3087ff8ff379a315516dcd5eae49521d7
SHA512 9b92c758b5470d5b070092b318d7e43fe35281e91827dcc1e5b156a6079c7b07f162f2b603d75e358637e70c1e939b4a7371ccd5b208c2829e087829d3e87faf
SSDEEP 49152:NusMcn8CcimaK+RGz/zlt4bISp3DCHxBfUEIk/TW2I851K9FoR0Q4A8QpOl6wIkI:PMhq0P/4bNpqfeTcPxPwIZSKEVtlBQ60
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

bc:c3:16:2b:a7:45:25:16:0b:0d:25:bb:fa:1e:bb:c8:3f:bb:fd:c7:23:dd:fe:72:6e:6d:78:f6:72:dd:b2:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19,POSTALCODE=10815,ST=0b1c1115005f5c4e161100021c001003011215104d0a110f+ST=0b1c1115494a5c05125116195f151d00521f0d135111515d03161110070d03151709010f5103081c0b00040b545d06080b0b050e060b08091d5301090612055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

1

Major OS version

5

Entry point

16951

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsBadStringPtrW LoadLibraryExW GetConsoleAliasA InterlockedDecrement SetCommBreak CreateHardLinkA LockFile GetTickCount ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsA TzSpecificLocalTimeToSystemTime GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW ReadConsoleInputA CreateEventA WriteConsoleW SetFilePointer GetTempPathW InterlockedExchange GetLastError SetLastError BackupRead GetProcAddress BuildCommDCBW LoadModule OpenMutexA LocalAlloc GetNumberFormatW AddAtomW RemoveDirectoryW VirtualProtect CloseHandle CreateFileW SetComputerNameExW GetComputerNameA IsProcessorFeaturePresent EncodePointer DecodePointer ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW SetEndOfFile

user32

SetCaretPos

gdi32

GetCharABCWidthsI

Sharing

General

Malware Config

Signatures

File Explorer

5555a8e1068ec667137bd32406eaa67f1022a7609e838c6d09968fcbc61376f1

PE Signature issue

kernel32

user32

gdi32

generic