8c34a6f876190e08672e1b886b86be82f7fec94378e85d787c9980e2756b6501

General

Target
8c34a6f876190e08672e1b886b86be82f7fec94378e85d787c9980e2756b6501
Size 4.1MB
Sample240519-rbslpaba64
SHA256 8c34a6f876190e08672e1b886b86be82f7fec94378e85d787c9980e2756b6501
MD5 d1d665f061f612842c5980585f7c5353
SHA1 f952aff90ffcf50edd0f0d5e5c90864a861989ce
SHA512 1ba8f127644498d96434ee55b28e2989ee06973db9463f3db5d41a0ec313f669ccd74aa8366e70626c4c02b844c1a72d77c6b6e8aba222b2d76511b4ff098c0c
SSDEEP 98304:8NaXJU8AJvaro5mDbVFqT6QhicqJuM7BOvJODhfBAiYJAl59Wu:8qU8A9EamDpImBOY9f2Nu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

8c34a6f876190e08672e1b886b86be82f7fec94378e85d787c9980e2756b6501

.exe 4.1MB

8c34a6f876190e08672e1b886b86be82f7fec94378e85d787c9980e2756b6501

IMPHASH cb5987421c9ba8a0e2694f1a6da3d644
SHA256 8c34a6f876190e08672e1b886b86be82f7fec94378e85d787c9980e2756b6501
MD5 d1d665f061f612842c5980585f7c5353
SHA1 f952aff90ffcf50edd0f0d5e5c90864a861989ce
SHA512 1ba8f127644498d96434ee55b28e2989ee06973db9463f3db5d41a0ec313f669ccd74aa8366e70626c4c02b844c1a72d77c6b6e8aba222b2d76511b4ff098c0c
SSDEEP 98304:8NaXJU8AJvaro5mDbVFqT6QhicqJuM7BOvJODhfBAiYJAl59Wu:8qU8A9EamDpImBOY9f2Nu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

e6:5d:c6:1c:0c:4a:7c:e6:16:2f:78:8b:7d:10:ad:02:c6:8e:d3:9e:ae:c5:f0:14:64:aa:de:9c:71:ae:4b:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522b0300053323224d0036132e0352222e2216260b17250f343c151c22001a3b0d00,POSTALCODE=10805,ST=0b1c1115005f5c4e130a09061b01101e15030d1400004d071702+ST=0b1c1115494a5c0a405601000f17134502120d431112025a0d5102560055050452040c11020709125303081f0a5b1f1d400c1808040a15195a101d060a1a055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlCaptureContext CommConfigDialogA CallNamedPipeA WriteConsoleOutputW InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA FlushConsoleInputBuffer SetCommBreak FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetProcessHeap GetConsoleAliasesA LoadLibraryW Sleep GetConsoleAliasesLengthW CompareStringW VirtualUnlock FindFirstFileExA GetLongPathNameW SetLastError GetProcAddress VerLanguageNameW LoadLibraryA OpenJobObjectW SetConsoleTitleW BuildCommDCBA GetCurrentDirectoryA DeleteCriticalSection WriteConsoleW EnumCalendarInfoA HeapAlloc GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

UpdateWindow

advapi32

EnumDependentServicesW

Sharing

General

Malware Config

Signatures

File Explorer

8c34a6f876190e08672e1b886b86be82f7fec94378e85d787c9980e2756b6501

PE Signature issue

kernel32

user32

advapi32

generic