2b2ac834ce580b63ad8eae3e117dca50ea605e64dd2d9a8c1cfd8fd2ba204bd9

General

Target
2b2ac834ce580b63ad8eae3e117dca50ea605e64dd2d9a8c1cfd8fd2ba204bd9
Size 747KB
Sample240516-2s8pcacf92
SHA256 2b2ac834ce580b63ad8eae3e117dca50ea605e64dd2d9a8c1cfd8fd2ba204bd9
MD5 66d66dbeff38b323bc8993d947731a57
SHA1 90870ab86e7a590eba00df04efa9679580931e33
SHA512 eeb3bf0e0844f231e902c28d16eec130a27845e4ffa9abee4230ce0bd78e0116d509d537e4fa5589c50c5056a990506e3a03a86c43d67f1859d59e72c21209ef
SSDEEP 12288:1BbNOGvBdkAX5oKi07Uygt6WoOOu6hrwvZZXTALei9RJGtDmDP:1BVk0riZdUzfu6UycmL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2b2ac834ce580b63ad8eae3e117dca50ea605e64dd2d9a8c1cfd8fd2ba204bd9

.exe 747KB

2b2ac834ce580b63ad8eae3e117dca50ea605e64dd2d9a8c1cfd8fd2ba204bd9

IMPHASH ee763a326b5b863d42237611dc07ebef
SHA256 2b2ac834ce580b63ad8eae3e117dca50ea605e64dd2d9a8c1cfd8fd2ba204bd9
MD5 66d66dbeff38b323bc8993d947731a57
SHA1 90870ab86e7a590eba00df04efa9679580931e33
SHA512 eeb3bf0e0844f231e902c28d16eec130a27845e4ffa9abee4230ce0bd78e0116d509d537e4fa5589c50c5056a990506e3a03a86c43d67f1859d59e72c21209ef
SSDEEP 12288:1BbNOGvBdkAX5oKi07Uygt6WoOOu6hrwvZZXTALei9RJGtDmDP:1BVk0riZdUzfu6UycmL
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

e0:c6:dc:e6:91:1a:80:7e:be:40:3c:2e:b9:4e:83:34:a4:b9:ac:0a:47:f5:ac:e0:2d:ea:6e:e1:76:b1:e2:c8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 14, 2024

Minor OS version

0

Major OS version

6

Entry point

86972

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle GetLastError WaitForSingleObject CreateProcessA AllocConsole FreeConsole WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetEndOfFile RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap CreateFileW HeapSize WriteConsoleW RtlUnwind

Sharing

General

Malware Config

Signatures

File Explorer

2b2ac834ce580b63ad8eae3e117dca50ea605e64dd2d9a8c1cfd8fd2ba204bd9

PE Signature issue

kernel32

generic