aeee6c8b711783647d26fc58daeef0a3927e0dc611bf14300ed75ca16f772f90

Sharing

Copy URL Twitter E-mail

General

Target
aeee6c8b711783647d26fc58daeef0a3927e0dc611bf14300ed75ca16f772f90
Size 4.1MB
Sample240516-pllvsacc8s
SHA256 aeee6c8b711783647d26fc58daeef0a3927e0dc611bf14300ed75ca16f772f90
MD5 7265cf8743bdb57794cac01203b98da7
SHA1 65f2853ec106f7864a2307b2628c9637ad1a8b94
SHA512 a030f4eca8f2054bf3a8b2040f41f22f539342aab0d1128808e81196fe1b02ee7d5c0b4af460782bc251a2390988e582ee4067b0abb3a1c98146ea8af39093ce
SSDEEP 98304:l/lx2VB4FLDQS1OmkYbRsTncIxTvyO2P5x7YbDUU85:VlgkYS1OmbburVLyO2P5x7Yb4D
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

aeee6c8b711783647d26fc58daeef0a3927e0dc611bf14300ed75ca16f772f90

.exe 4.1MB

aeee6c8b711783647d26fc58daeef0a3927e0dc611bf14300ed75ca16f772f90

IMPHASH 7a24ebc8d21d9874ab36ca893f3f773d
SHA256 aeee6c8b711783647d26fc58daeef0a3927e0dc611bf14300ed75ca16f772f90
MD5 7265cf8743bdb57794cac01203b98da7
SHA1 65f2853ec106f7864a2307b2628c9637ad1a8b94
SHA512 a030f4eca8f2054bf3a8b2040f41f22f539342aab0d1128808e81196fe1b02ee7d5c0b4af460782bc251a2390988e582ee4067b0abb3a1c98146ea8af39093ce
SSDEEP 98304:l/lx2VB4FLDQS1OmkYbRsTncIxTvyO2P5x7YbDUU85:VlgkYS1OmbburVLyO2P5x7Yb4D
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

a1:0c:44:e7:21:45:87:8c:49:16:51:a2:d1:1d:26:59:33:4e:6b:9e:f3:08:bb:8b:a2:40:6b:8c:83:19:68:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a29533d3f200e2d1728300c141021081631313626321023042b113f2d26353224,POSTALCODE=10809,ST=0b1c1115005f5c4e140f09101c0411000c1d4f0716+ST=0b1c1115494a5c17161151151d135100034653465007170e1c520b071c040f0f5216050f1244171f0b110e04061211081e0347124308570a1e0c0b19560a055b0c0b0a070b

Chains

May 15, 2024

Minor OS version

Major OS version

Entry point

16371

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SystemTimeToTzSpecificLocalTime GetConsoleAliasA GetTickCount GetSystemDirectoryW WriteConsoleW SetComputerNameExW GetLastError SetLastError GetProcAddress RemoveDirectoryA LoadLibraryA IsBadStringPtrW WriteConsoleA LocalAlloc GetNumberFormatW CreateEventW GetModuleFileNameA LoadLibraryExA BuildCommDCBA VirtualProtect PurgeComm GetVolumeInformationW CloseHandle CreateFileW GetStringTypeW OpenMutexA GetComputerNameA OutputDebugStringW FlushFileBuffers GetConsoleCP IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection ReadFile GetConsoleMode ReadConsoleW HeapFree GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile GetModuleFileNameW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc SetStdHandle LCMapStringW SetEndOfFile

user32

GetMenuItemID SetCaretPos

gdi32

GetCharWidthI

ole32

CoMarshalHresult

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

aeee6c8b711783647d26fc58daeef0a3927e0dc611bf14300ed75ca16f772f90

PE Signature issue

kernel32

user32

gdi32

ole32

msimg32

generic