4bcd0230283b2e7929d4bea5e6542a3657d7aa5a465ca0c60604a1782e1e40b2

General

Target
4bcd0230283b2e7929d4bea5e6542a3657d7aa5a465ca0c60604a1782e1e40b2
Size 4.1MB
Sample240517-tmvxasff72
SHA256 4bcd0230283b2e7929d4bea5e6542a3657d7aa5a465ca0c60604a1782e1e40b2
MD5 9109f702528e7b30f907446ed7d5ca6d
SHA1 dd0e84176b542a02a8138fe854b6e34a296f658e
SHA512 f65504de47a957c4079dbc9a74170fee4643138aae35ee745fa677782b49f83abfef0855f4e19f91e0a4aa1d6de767ffd45cb922a1891d123bd8b8079db3d5d1
SSDEEP 98304:MxfL9oyIkrku4AJMBJNRxIbk0RddEjk9Pc8cg301s2mGv0:6RrVrv4XbNRWhj2o9k8f3CspGv0
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4bcd0230283b2e7929d4bea5e6542a3657d7aa5a465ca0c60604a1782e1e40b2

.exe 4.1MB

4bcd0230283b2e7929d4bea5e6542a3657d7aa5a465ca0c60604a1782e1e40b2

IMPHASH 276fe7f7a5b4fe45c81b1cd63541d955
SHA256 4bcd0230283b2e7929d4bea5e6542a3657d7aa5a465ca0c60604a1782e1e40b2
MD5 9109f702528e7b30f907446ed7d5ca6d
SHA1 dd0e84176b542a02a8138fe854b6e34a296f658e
SHA512 f65504de47a957c4079dbc9a74170fee4643138aae35ee745fa677782b49f83abfef0855f4e19f91e0a4aa1d6de767ffd45cb922a1891d123bd8b8079db3d5d1
SSDEEP 98304:MxfL9oyIkrku4AJMBJNRxIbk0RddEjk9Pc8cg301s2mGv0:6RrVrv4XbNRWhj2o9k8f3CspGv0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

21:dc:64:5f:ae:ba:1f:3d:fb:4d:f0:b8:00:dc:04:3e:80:1e:82:fa:4c:2e:f5:20:4b:ad:ab:80:f7:d1:aa:13

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b1f00070a2734475a3201002b1c42301c1b0732151b1d231030330b0713013107,POSTALCODE=10825,ST=0b1c1115005f5c4e140f090709110417101e115b0c1704+ST=0b1c1115494a5c141b55031011521200011110175651021a0c0100080654181701000b110407101e081204565401155144530712111a57090e5304000602055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA CommConfigDialogA InterlockedIncrement SetDefaultCommConfigW SetFirmwareEnvironmentVariableA GetComputerNameW FlushConsoleInputBuffer FindFirstFileExW SetCommBreak GetModuleHandleW GetTickCount GetProcessHeap GetPriorityClass Sleep GetFileAttributesA SetTimeZoneInformation WriteConsoleW CompareStringW SetConsoleTitleA GetConsoleAliasesW SetLastError GetProcAddress GetLongPathNameA LoadLibraryA SetCurrentDirectoryW VirtualLock GlobalGetAtomNameW OpenJobObjectW FindAtomA SetSystemTime EnumDateFormatsA FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA SetCalendarInfoA GetFileInformationByHandle SetFileAttributesW AreFileApisANSI GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile HeapSize CreateFileA CloseHandle

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

4bcd0230283b2e7929d4bea5e6542a3657d7aa5a465ca0c60604a1782e1e40b2

PE Signature issue

kernel32

user32

generic