e76a08acd7b9b3f8622643510764ca0f4a210367773af7cb49db481afe9f9544

General

Target
e76a08acd7b9b3f8622643510764ca0f4a210367773af7cb49db481afe9f9544
Size 4.1MB
Sample240519-rbrdmabb81
SHA256 e76a08acd7b9b3f8622643510764ca0f4a210367773af7cb49db481afe9f9544
MD5 942f7c485442d3a15b5a2da757a79b1c
SHA1 34f9eb3fb6870a36f92da0e1575e5962a86e8901
SHA512 b312626ceae03a65085afbf3fc60b4ac01bb16c7165df6b69a6d0c477adc54e48181446b9d9f35d09ae86b3181828a6a95c9f1e08a886094870c24a9deba7fba
SSDEEP 98304:UNaXJU8AJvaro5mDbVFqT6QhicqJuM7BOvJODhfBAiYJAl59WO:UqU8A9EamDpImBOY9f2NO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

e76a08acd7b9b3f8622643510764ca0f4a210367773af7cb49db481afe9f9544

.exe 4.1MB

e76a08acd7b9b3f8622643510764ca0f4a210367773af7cb49db481afe9f9544

IMPHASH cb5987421c9ba8a0e2694f1a6da3d644
SHA256 e76a08acd7b9b3f8622643510764ca0f4a210367773af7cb49db481afe9f9544
MD5 942f7c485442d3a15b5a2da757a79b1c
SHA1 34f9eb3fb6870a36f92da0e1575e5962a86e8901
SHA512 b312626ceae03a65085afbf3fc60b4ac01bb16c7165df6b69a6d0c477adc54e48181446b9d9f35d09ae86b3181828a6a95c9f1e08a886094870c24a9deba7fba
SSDEEP 98304:UNaXJU8AJvaro5mDbVFqT6QhicqJuM7BOvJODhfBAiYJAl59WO:UqU8A9EamDpImBOY9f2NO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

e6:5d:c6:1c:0c:4a:7c:e6:16:2f:78:8b:7d:10:ad:02:c6:8e:d3:9e:ae:c5:f0:14:64:aa:de:9c:71:ae:4b:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522a143c46533d0e442f37555c2422100a1455182550573d31351d0f013134332d19,POSTALCODE=10815,ST=0b1c1115005f5c4e161100021c001003011215104d0a110f+ST=0b1c1115494a5c05125116195f151d00521f0d135111515d03161110070d03151709010f5103081c0b00040b545d06080b0b050e060b08091d5301090612055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlCaptureContext CommConfigDialogA CallNamedPipeA WriteConsoleOutputW InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer SetCommBreak FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetProcessHeap GetConsoleAliasesA LoadLibraryW Sleep GetConsoleAliasesLengthW CompareStringW VirtualUnlock FindFirstFileExA GetLongPathNameW SetLastError GetProcAddress VerLanguageNameW LoadLibraryA OpenJobObjectW SetConsoleTitleW BuildCommDCBA GetCurrentDirectoryA DeleteCriticalSection WriteConsoleW EnumCalendarInfoA HeapAlloc GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

UpdateWindow

advapi32

EnumDependentServicesW

Sharing

General

Malware Config

Signatures

File Explorer

e76a08acd7b9b3f8622643510764ca0f4a210367773af7cb49db481afe9f9544

PE Signature issue

kernel32

user32

advapi32

generic