643beb04f9a4f5bdc7ba8f47704b9db60f7d6e9af514b96280e8744c8bfe455b

General

Target
643beb04f9a4f5bdc7ba8f47704b9db60f7d6e9af514b96280e8744c8bfe455b
Size 4.1MB
Sample240516-288dhsdg62
SHA256 643beb04f9a4f5bdc7ba8f47704b9db60f7d6e9af514b96280e8744c8bfe455b
MD5 d820c42994aeb0057a4f42f6c0d60e62
SHA1 6fbe41065cf04a3df7e4cb7a5bbe4a9466b906f5
SHA512 c9ad95e05ada9292052d484f23eda339dbe99fb26fa50a6f2692129945a5a68b6515d9c0b09a6abf4e7278b7c04db0567ab06ebc29d0d7be9f64ab5dc6e33e33
SSDEEP 98304:ePFu/y1+yoTqcgb4Drvh1MQFUVtbPVcs2Idg/vS:x6QywU4f51MQWVtbdHxSvS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

643beb04f9a4f5bdc7ba8f47704b9db60f7d6e9af514b96280e8744c8bfe455b

.exe 4.1MB

643beb04f9a4f5bdc7ba8f47704b9db60f7d6e9af514b96280e8744c8bfe455b

IMPHASH 222df6760c72229bb20ae504765973be
SHA256 643beb04f9a4f5bdc7ba8f47704b9db60f7d6e9af514b96280e8744c8bfe455b
MD5 d820c42994aeb0057a4f42f6c0d60e62
SHA1 6fbe41065cf04a3df7e4cb7a5bbe4a9466b906f5
SHA512 c9ad95e05ada9292052d484f23eda339dbe99fb26fa50a6f2692129945a5a68b6515d9c0b09a6abf4e7278b7c04db0567ab06ebc29d0d7be9f64ab5dc6e33e33
SSDEEP 98304:ePFu/y1+yoTqcgb4Drvh1MQFUVtbPVcs2Idg/vS:x6QywU4f51MQWVtbdHxSvS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

83:34:ce:9c:6a:7e:51:92:1f:26:67:ad:ce:3e:4f:d8:4e:0c:cf:56:d6:c7:09:50:1c:09:bd:0b:88:72:8b:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5251371f362b4011042b13043a2d223e0f19152c2014093e313d075d110f3d082e50,POSTALCODE=10815,ST=0b1c1115005f5c4e061704171b001d03091c1310114b0c1a02+ST=0b1c1115494a5c52100110515d52141b57170d14161d12025206141340084056005707170746501e16121203571c1452160c10121450010500175112041a055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

1

Major OS version

5

Entry point

16989

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GlobalMemoryStatus SetFilePointer SetComputerNameExA LoadLibraryExW GetConsoleAliasA InterlockedDecrement SetComputerNameW SetCommBreak CreateHardLinkA LockFile GetModuleHandleW GetTickCount GetWindowsDirectoryA EnumTimeFormatsA SetCommState GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA GetACP InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA WriteConsoleA LocalAlloc SetConsoleOutputCP CreateEventW AddAtomA BuildCommDCBA VirtualProtect GetTempPathA SetFileAttributesW CloseHandle CreateFileW WriteConsoleW GetStringTypeW HeapFree EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetProcessHeap HeapSize SetFilePointerEx GetConsoleMode ReadConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree WriteFile GetModuleFileNameW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleCP HeapReAlloc LCMapStringW SetStdHandle FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

GetSysColorBrush SetMessageExtraInfo SetMenu

Sharing

General

Malware Config

Signatures

File Explorer

643beb04f9a4f5bdc7ba8f47704b9db60f7d6e9af514b96280e8744c8bfe455b

PE Signature issue

kernel32

user32

generic