19b2b49460bea45273c5bc6b1b959b0771ca4bed21c94a2f0895f940a6a20ac9

General

Target
19b2b49460bea45273c5bc6b1b959b0771ca4bed21c94a2f0895f940a6a20ac9
Size 4.1MB
Sample240517-xxwhcsec4w
SHA256 19b2b49460bea45273c5bc6b1b959b0771ca4bed21c94a2f0895f940a6a20ac9
MD5 81e378ac318044313f5c4a42abec4932
SHA1 5504fc7a9133003de50ea58d11672647a07bee33
SHA512 f9609f914be828516cb1d16940ae5c553e3dda7f5232a3a46518fe932c94887098de16b4c082436ce23f66ef7871964fde88a42d2077e29a017a9dc8bb3b1775
SSDEEP 98304:aZ3eWnmCP3Day+MGMrrH7Rp/OOmeNALbhxcJ3GFuqO9B+e2R0FJz:AufQJ+wrvRp/OL3LVxY3GFuq2BkwJz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

19b2b49460bea45273c5bc6b1b959b0771ca4bed21c94a2f0895f940a6a20ac9

.exe 4.1MB

19b2b49460bea45273c5bc6b1b959b0771ca4bed21c94a2f0895f940a6a20ac9

IMPHASH ec40394918724dd285b714cae2e02abb
SHA256 19b2b49460bea45273c5bc6b1b959b0771ca4bed21c94a2f0895f940a6a20ac9
MD5 81e378ac318044313f5c4a42abec4932
SHA1 5504fc7a9133003de50ea58d11672647a07bee33
SHA512 f9609f914be828516cb1d16940ae5c553e3dda7f5232a3a46518fe932c94887098de16b4c082436ce23f66ef7871964fde88a42d2077e29a017a9dc8bb3b1775
SSDEEP 98304:aZ3eWnmCP3Day+MGMrrH7Rp/OOmeNALbhxcJ3GFuqO9B+e2R0FJz:AufQJ+wrvRp/OL3LVxY3GFuq2BkwJz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

d9:c0:01:37:a5:07:ac:16:11:7b:2b:ef:f8:91:2c:cf:42:ea:12:07:16:f3:fb:5c:a3:e7:29:2c:2f:76:3d:8f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10820,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5510

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA CommConfigDialogA InterlockedIncrement SetDefaultCommConfigW SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer FindFirstFileExW SetCommBreak GetModuleHandleW GetTickCount GetProcessHeap GetPriorityClass Sleep GetFileAttributesA WriteConsoleW CompareStringW SetConsoleTitleA GetConsoleAliasesW SetLastError GetProcAddress GetLongPathNameA LoadLibraryA SetCurrentDirectoryW VirtualLock GlobalGetAtomNameW OpenJobObjectW FindAtomA SetSystemTime EnumDateFormatsA FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA SetCalendarInfoA AreFileApisANSI GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers ReadFile HeapSize CreateFileA CloseHandle

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

19b2b49460bea45273c5bc6b1b959b0771ca4bed21c94a2f0895f940a6a20ac9

PE Signature issue

kernel32

user32

generic