005c1f4a8b482aa2de3b67b80f5576228ef54299893cf0b8e0ff9568e4f80426

General

Target
005c1f4a8b482aa2de3b67b80f5576228ef54299893cf0b8e0ff9568e4f80426
Size 4.1MB
Sample240519-ractvabb6s
SHA256 005c1f4a8b482aa2de3b67b80f5576228ef54299893cf0b8e0ff9568e4f80426
MD5 d25b389db8f808c07fcbbbd50528a119
SHA1 d0d769fb925948461cd76eaa92d830a3d180bcd4
SHA512 e6961d9f2e2d23bda0c2641a8f4b2adfd188e1150d61463a55d07cfa880808b279b815c6dabd1d71f90d8e4a70197e7cbad65aaf01ce4729d3b41f65b4af89d9
SSDEEP 98304:8NaXJU8AJvaro5mDbVFqT6QhicqJuM7BOvJODhfBAiYJAl59Wr:8qU8A9EamDpImBOY9f2Nr
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

005c1f4a8b482aa2de3b67b80f5576228ef54299893cf0b8e0ff9568e4f80426

.exe 4.1MB

005c1f4a8b482aa2de3b67b80f5576228ef54299893cf0b8e0ff9568e4f80426

IMPHASH cb5987421c9ba8a0e2694f1a6da3d644
SHA256 005c1f4a8b482aa2de3b67b80f5576228ef54299893cf0b8e0ff9568e4f80426
MD5 d25b389db8f808c07fcbbbd50528a119
SHA1 d0d769fb925948461cd76eaa92d830a3d180bcd4
SHA512 e6961d9f2e2d23bda0c2641a8f4b2adfd188e1150d61463a55d07cfa880808b279b815c6dabd1d71f90d8e4a70197e7cbad65aaf01ce4729d3b41f65b4af89d9
SSDEEP 98304:8NaXJU8AJvaro5mDbVFqT6QhicqJuM7BOvJODhfBAiYJAl59Wr:8qU8A9EamDpImBOY9f2Nr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

e6:5d:c6:1c:0c:4a:7c:e6:16:2f:78:8b:7d:10:ad:02:c6:8e:d3:9e:ae:c5:f0:14:64:aa:de:9c:71:ae:4b:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=5225102f0434382d242811523e2627225c0650271700133f52163721402002312055,POSTALCODE=10835,ST=0b1c1115005f5c4e110211020a04161610030607020106461710+ST=0b1c1115494a5c041c1150080c17090704050e005006511f0214001f1518010656090d0252450d0309185403131b5207441f1b0d41130a081a5013450802055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlCaptureContext CommConfigDialogA CallNamedPipeA WriteConsoleOutputW InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer SetCommBreak FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetProcessHeap GetConsoleAliasesA LoadLibraryW Sleep GetConsoleAliasesLengthW CompareStringW VirtualUnlock FindFirstFileExA GetLongPathNameW SetLastError GetProcAddress VerLanguageNameW LoadLibraryA OpenJobObjectW SetConsoleTitleW BuildCommDCBA GetCurrentDirectoryA DeleteCriticalSection WriteConsoleW EnumCalendarInfoA HeapAlloc GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

UpdateWindow

advapi32

EnumDependentServicesW

Sharing

General

Malware Config

Signatures

File Explorer

005c1f4a8b482aa2de3b67b80f5576228ef54299893cf0b8e0ff9568e4f80426

PE Signature issue

kernel32

user32

advapi32

generic