f61ea31ba042cb4b9640ed853b792cf3a5984c56bac9f937fd638bb6e1efbe30[.]exe

General

Target
f61ea31ba042cb4b9640ed853b792cf3a5984c56bac9f937fd638bb6e1efbe30.exe
Size 4.1MB
Sample240516-ccwbmsff23
SHA256 f61ea31ba042cb4b9640ed853b792cf3a5984c56bac9f937fd638bb6e1efbe30
MD5 5a1dcf56e56203dfbd69334ced1811a9
SHA1 8f3e4f5662f95e339f6610bb48507f5f79c7ae3a
SHA512 0374c95df772c0e62e9d9ca8de9284f38541aa323f2d9f86a37907ace4073b80a49816cf82ae7a24652979898d67dfbf061e173a325e6688b8202dc0a493e002
SSDEEP 98304:DrCNiB8ow0tjGRwMUUAJnC6DPNgwm1X3ykRpk8yR82N6G:DrCy8l0I4UGC6Dg3yk88npG
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

f61ea31ba042cb4b9640ed853b792cf3a5984c56bac9f937fd638bb6e1efbe30.exe

.exe 4.1MB

f61ea31ba042cb4b9640ed853b792cf3a5984c56bac9f937fd638bb6e1efbe30.exe

IMPHASH 65e7deb99d6bc15cc39d03afce1d8023
SHA256 f61ea31ba042cb4b9640ed853b792cf3a5984c56bac9f937fd638bb6e1efbe30
MD5 5a1dcf56e56203dfbd69334ced1811a9
SHA1 8f3e4f5662f95e339f6610bb48507f5f79c7ae3a
SHA512 0374c95df772c0e62e9d9ca8de9284f38541aa323f2d9f86a37907ace4073b80a49816cf82ae7a24652979898d67dfbf061e173a325e6688b8202dc0a493e002
SSDEEP 98304:DrCNiB8ow0tjGRwMUUAJnC6DPNgwm1X3ykRpk8yR82N6G:DrCy8l0I4UGC6Dg3yk88npG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

c8:72:4d:c8:a2:fc:47:11:9c:af:31:2f:92:e4:00:4f:ce:1e:97:90:d0:43:cf:5d:90:84:e7:bf:36:77:97:9c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10820,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

Chains

May 15, 2024

Minor OS version

0

Major OS version

5

Entry point

6288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA InterlockedIncrement SetDefaultCommConfigW SetConsoleScreenBufferSize GetModuleHandleW GetProcessHeap IsBadReadPtr GetSystemTimes GlobalAlloc Sleep GetFileAttributesA lstrcpynW CompareStringW SetConsoleTitleA SetCurrentDirectoryA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress GetConsoleDisplayMode BuildCommDCBW LoadLibraryA WriteConsoleA SetCalendarInfoW AddAtomW FindNextChangeNotification OpenJobObjectW FindAtomA FreeEnvironmentStringsW BuildCommDCBA PurgeComm EnumDateFormatsW GetSystemTime AreFileApisANSI GetLastError HeapReAlloc HeapAlloc ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar HeapSize GetLocaleInfoA SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

UpdateWindow

Sharing