32144afe2f1eed5830db36a119df61b1a9b610ede5c15acae277e51ebd75e430

General

Target
32144afe2f1eed5830db36a119df61b1a9b610ede5c15acae277e51ebd75e430
Size 4.1MB
Sample240518-kcja3sbf99
SHA256 32144afe2f1eed5830db36a119df61b1a9b610ede5c15acae277e51ebd75e430
MD5 66d70e5f88d34091c21978f0bf70930b
SHA1 4f9ed440c66a6da03fadab9b90441fa7f014e331
SHA512 3dd1eedbe61e3b63589cf82715e31149422c418a5cb9430f2dc3e3fa2392cc2863920854b492cc8be6ae545b63f59e3d0fdc5947857f81a9a87618576e237f9b
SSDEEP 98304:YcO3d23DP4WvcTQUVFyLidGODnX7vlp0fAiBu1UOo5GU75c1WMsxMj:YcO3d2wQ4Q8FyLwnXJ+AxvtU75c1jsa
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

32144afe2f1eed5830db36a119df61b1a9b610ede5c15acae277e51ebd75e430

.exe 4.1MB

32144afe2f1eed5830db36a119df61b1a9b610ede5c15acae277e51ebd75e430

IMPHASH 9829042bca3a8c115c0a73f566a64185
SHA256 32144afe2f1eed5830db36a119df61b1a9b610ede5c15acae277e51ebd75e430
MD5 66d70e5f88d34091c21978f0bf70930b
SHA1 4f9ed440c66a6da03fadab9b90441fa7f014e331
SHA512 3dd1eedbe61e3b63589cf82715e31149422c418a5cb9430f2dc3e3fa2392cc2863920854b492cc8be6ae545b63f59e3d0fdc5947857f81a9a87618576e237f9b
SSDEEP 98304:YcO3d23DP4WvcTQUVFyLidGODnX7vlp0fAiBu1UOo5GU75c1WMsxMj:YcO3d2wQ4Q8FyLwnXJ+AxvtU75c1jsa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

ac:07:6c:b9:e8:55:4e:55:8f:c0:65:0a:a5:25:fe:54:4e:67:a8:c8:2d:c2:7a:7f:38:e8:76:4e:52:00:3f:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a29533d3f200e2d1728300c141021081631313626321023042b113f2d26353224,POSTALCODE=10805,ST=0b1c1115005f5c4e140f09101c0411000c1d4f0716+ST=0b1c1115494a5c17161151151d135100034653465007170e1c520b071c040f0f5216050f1244171f0b110e04061211081e0347124308570a1e0c0b19560a055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5353

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA RtlCaptureContext CommConfigDialogA WriteConsoleOutputW InterlockedIncrement FlushConsoleInputBuffer FindFirstFileExW SetCommBreak GetModuleHandleW GetTickCount GetProcessHeap GetConsoleAliasesA GetConsoleAliasesLengthA LoadLibraryW Sleep ReadFileScatter WriteConsoleW CompareStringW SetLastError GetProcAddress GetLongPathNameA VerLanguageNameA SetFirmwareEnvironmentVariableW LoadLibraryA VirtualLock OpenJobObjectW SetConsoleTitleW FreeEnvironmentStringsW BuildCommDCBA GetCurrentDirectoryA DeleteCriticalSection GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

32144afe2f1eed5830db36a119df61b1a9b610ede5c15acae277e51ebd75e430

PE Signature issue

kernel32

user32

generic