4f9226c5fd2b6cdfa82cde7be4019c7fcab1c838a352a766b9d47de8f3f9526d

General

Target
4f9226c5fd2b6cdfa82cde7be4019c7fcab1c838a352a766b9d47de8f3f9526d
Size 4.1MB
Sample240518-nmt24shc75
SHA256 4f9226c5fd2b6cdfa82cde7be4019c7fcab1c838a352a766b9d47de8f3f9526d
MD5 2389a9e9bcb688f5d8d0a5b5e3f226d0
SHA1 c9e218555305b5d6a765b2a954f68644743761ca
SHA512 201bbdd9ca0eddba8ab41f671721d52cab591892532668c5fa3d8eee3db137c87d85ba78b529bcdb5dc4b66c8fe0e273a3288b435feda10a1091d4da901ed0ec
SSDEEP 98304:4Z9bi3QNEOtUId2petU9sYIhWVMAA4+HC:R303UIApyYIhWVMEf
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4f9226c5fd2b6cdfa82cde7be4019c7fcab1c838a352a766b9d47de8f3f9526d

.exe 4.1MB

4f9226c5fd2b6cdfa82cde7be4019c7fcab1c838a352a766b9d47de8f3f9526d

IMPHASH cf91da47476a24bbeab40a3519253808
SHA256 4f9226c5fd2b6cdfa82cde7be4019c7fcab1c838a352a766b9d47de8f3f9526d
MD5 2389a9e9bcb688f5d8d0a5b5e3f226d0
SHA1 c9e218555305b5d6a765b2a954f68644743761ca
SHA512 201bbdd9ca0eddba8ab41f671721d52cab591892532668c5fa3d8eee3db137c87d85ba78b529bcdb5dc4b66c8fe0e273a3288b435feda10a1091d4da901ed0ec
SSDEEP 98304:4Z9bi3QNEOtUId2petU9sYIhWVMAA4+HC:R303UIApyYIhWVMEf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

cc:f3:e3:19:03:73:a7:84:0d:a3:e4:20:e6:d5:a3:2e:9a:7a:a8:29:54:13:5d:ce:32:f0:81:7d:ba:dd:ee:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522303292b2005041027200a5d5d12051031230d161c143d24542553452740323d28,POSTALCODE=10810,ST=0b1c1115005f5c4e061704171b0617160407045b0c1704+ST=0b1c1115494a5c11101704105c1f07410b17550d0e1c0c5a070a090e025212541c510f17091909155406121d141b0850180d0a16140e53100100171b1d12055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5353

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumCalendarInfoA RtlCaptureContext CommConfigDialogA WriteConsoleOutputW InterlockedDecrement FlushConsoleInputBuffer FindFirstFileExW SetCommBreak FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetProcessHeap GetConsoleAliasesA GetConsoleAliasesLengthA LoadLibraryW Sleep ReadFileScatter WriteConsoleW CompareStringW GetLongPathNameW SetLastError GetProcAddress VerLanguageNameA SetFirmwareEnvironmentVariableW LoadLibraryA VirtualLock OpenJobObjectW SetConsoleTitleW BuildCommDCBA GetCurrentDirectoryA DeleteCriticalSection GetLastError HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

UpdateWindow

Sharing

General

Malware Config

Signatures

File Explorer

4f9226c5fd2b6cdfa82cde7be4019c7fcab1c838a352a766b9d47de8f3f9526d

PE Signature issue

kernel32

user32

generic