32a14ff5e71f7370ae246f27c87a811140dee7f6176421f33b4c01014093473e

General

Target
32a14ff5e71f7370ae246f27c87a811140dee7f6176421f33b4c01014093473e
Size 4.1MB
Sample240516-2v8gcsch22
SHA256 32a14ff5e71f7370ae246f27c87a811140dee7f6176421f33b4c01014093473e
MD5 cf8e8fb6bcb50891cc9db0107dda2f91
SHA1 84f9b4e02670dbc7e0a6890b32875771353e5a1a
SHA512 68e463623cf0aa9cf3bef0d9d32b4a279a3ce9c594d09b25ce064835d4c7ce38a7b966cf041a7719038e98cd4c504eb0022fe55ade2ff0c68a58284ee3df0758
SSDEEP 98304:WPFu/y1+yoTqcgb4Drvh1MQFUVtbPVcs2Idg/v1:J6QywU4f51MQWVtbdHxSv1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

32a14ff5e71f7370ae246f27c87a811140dee7f6176421f33b4c01014093473e

.exe 4.1MB

32a14ff5e71f7370ae246f27c87a811140dee7f6176421f33b4c01014093473e

IMPHASH 222df6760c72229bb20ae504765973be
SHA256 32a14ff5e71f7370ae246f27c87a811140dee7f6176421f33b4c01014093473e
MD5 cf8e8fb6bcb50891cc9db0107dda2f91
SHA1 84f9b4e02670dbc7e0a6890b32875771353e5a1a
SHA512 68e463623cf0aa9cf3bef0d9d32b4a279a3ce9c594d09b25ce064835d4c7ce38a7b966cf041a7719038e98cd4c504eb0022fe55ade2ff0c68a58284ee3df0758
SSDEEP 98304:WPFu/y1+yoTqcgb4Drvh1MQFUVtbPVcs2Idg/v1:J6QywU4f51MQWVtbdHxSv1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

83:34:ce:9c:6a:7e:51:92:1f:26:67:ad:ce:3e:4f:d8:4e:0c:cf:56:d6:c7:09:50:1c:09:bd:0b:88:72:8b:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522910322628070b250c52200b542f1a57031b422732351e332f4620190820022d0b,POSTALCODE=10700,ST=0b1c1115005f5c4e010b00101c041100031a0d10104b111d+ST=0b1c1115494a5c18101602500b53081d121c021c1b120f07110e12511d161a5003091c030c1053460e4113160e181d130101060d401252070f0f08001312055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

1

Major OS version

5

Entry point

16989

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA GlobalMemoryStatus SetFilePointer SetComputerNameExA LoadLibraryExW GetConsoleAliasA InterlockedDecrement SetComputerNameW SetCommBreak CreateHardLinkA LockFile GetModuleHandleW GetTickCount GetWindowsDirectoryA EnumTimeFormatsA SetCommState GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA GetACP InterlockedExchange OpenMutexW GetLastError SetLastError BackupRead GetProcAddress RemoveDirectoryA WriteConsoleA LocalAlloc SetConsoleOutputCP CreateEventW AddAtomA BuildCommDCBA VirtualProtect GetTempPathA SetFileAttributesW CloseHandle CreateFileW WriteConsoleW GetStringTypeW HeapFree EncodePointer DecodePointer IsProcessorFeaturePresent ReadFile ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapAlloc EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetProcessHeap HeapSize SetFilePointerEx GetConsoleMode ReadConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree WriteFile GetModuleFileNameW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetConsoleCP HeapReAlloc LCMapStringW SetStdHandle FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

GetSysColorBrush SetMessageExtraInfo SetMenu

Sharing

General

Malware Config

Signatures

File Explorer

32a14ff5e71f7370ae246f27c87a811140dee7f6176421f33b4c01014093473e

PE Signature issue

kernel32

user32

generic