89af5bbf64eb2506c1a20e883912d560ca51c10369e22629b9a89e60e1c4e7f1

General

Target
89af5bbf64eb2506c1a20e883912d560ca51c10369e22629b9a89e60e1c4e7f1
Size 4.1MB
Sample240517-qa9cdaad48
SHA256 89af5bbf64eb2506c1a20e883912d560ca51c10369e22629b9a89e60e1c4e7f1
MD5 9d5fe265466ca046380943ee174943c6
SHA1 590ea483ca98c5cba23c7bd35a7e09350c09c1f7
SHA512 9d12bc52e5bfc267e13e36c877d76d2e5ad2b6291d5bfe7aa8038e9bf0ddf01a83700ba56f290e596781cb55e7d95631074df98101ddb8f57d2993b5f2e4838a
SSDEEP 98304:PhzlfCz+ccJ0CpUiRHjJlGcG1klIkRd3fLKEvx:5z9CiccJ0CpfGcGG1DfLP
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

89af5bbf64eb2506c1a20e883912d560ca51c10369e22629b9a89e60e1c4e7f1

.exe 4.1MB

89af5bbf64eb2506c1a20e883912d560ca51c10369e22629b9a89e60e1c4e7f1

IMPHASH 0b2c4d8551cd34263204e77032e85b2b
SHA256 89af5bbf64eb2506c1a20e883912d560ca51c10369e22629b9a89e60e1c4e7f1
MD5 9d5fe265466ca046380943ee174943c6
SHA1 590ea483ca98c5cba23c7bd35a7e09350c09c1f7
SHA512 9d12bc52e5bfc267e13e36c877d76d2e5ad2b6291d5bfe7aa8038e9bf0ddf01a83700ba56f290e596781cb55e7d95631074df98101ddb8f57d2993b5f2e4838a
SSDEEP 98304:PhzlfCz+ccJ0CpUiRHjJlGcG1klIkRd3fLKEvx:5z9CiccJ0CpfGcGG1DfLP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

03:f1:e3:ce:a9:41:2d:78:2c:2d:21:22:16:17:e0:10:e4:bb:45:f1:14:2b:b0:24:38:ec:7a:ef:1c:6f:d0:d4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a1720000d011b430433013e102d3427142b4024102b2a13264116170e10372429,POSTALCODE=10820,ST=0b1c1115005f5c4e0706040f1d15011211164f0716+ST=0b1c1115494a5c53171153050a060e05131d031c1702195d090014094753050d0f011f15150b1f1c100c1507545c1d0e011f070501080c0e5e0b0e450c12055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA CommConfigDialogA InterlockedIncrement SetDefaultCommConfigW SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer SetCommBreak GetModuleHandleW GetTickCount GetProcessHeap GetSystemTimes GetPriorityClass GlobalAlloc Sleep GetFileAttributesA lstrcpynW CompareStringW SetConsoleTitleA FindFirstFileExA SetLastError GetProcAddress GetLongPathNameA LoadLibraryA WriteConsoleA SetCurrentDirectoryW VirtualLock GlobalGetAtomNameW OpenJobObjectW FindAtomA EnumDateFormatsA FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA SetCalendarInfoA GetSystemTime AreFileApisANSI GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile HeapSize CreateFileA CloseHandle

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

89af5bbf64eb2506c1a20e883912d560ca51c10369e22629b9a89e60e1c4e7f1

PE Signature issue

kernel32

user32

generic