236f4b0d753ceec77a521e36e6c1ce9495261eaf563a62e96447ddbf2313c42c

General

Target
236f4b0d753ceec77a521e36e6c1ce9495261eaf563a62e96447ddbf2313c42c
Size 4.1MB
Sample240520-enj4vsbe31
SHA256 236f4b0d753ceec77a521e36e6c1ce9495261eaf563a62e96447ddbf2313c42c
MD5 8d11584a0f9ddf018dfe251b4056f0c5
SHA1 003c96af85b43ad078ace55f6599749f5b00e90e
SHA512 637a3426631575283546e95ba2214d4bdbb7746f647f38d5027d960f9835f5e00f33e9fdf0c9031bae17b0d424ffd0b34f7a97751d0ec4762b46cd3a17d72d3f
SSDEEP 98304:uQAQcsa3GhfWYEvpb4LdECaqY+VYhFzXw/u5g9cAd9nO:uQAQcDPYxuCJe7X5ghfO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

236f4b0d753ceec77a521e36e6c1ce9495261eaf563a62e96447ddbf2313c42c

.exe 4.1MB

236f4b0d753ceec77a521e36e6c1ce9495261eaf563a62e96447ddbf2313c42c

IMPHASH e5b5c8048fc29a01c78e25f92b16c10c
SHA256 236f4b0d753ceec77a521e36e6c1ce9495261eaf563a62e96447ddbf2313c42c
MD5 8d11584a0f9ddf018dfe251b4056f0c5
SHA1 003c96af85b43ad078ace55f6599749f5b00e90e
SHA512 637a3426631575283546e95ba2214d4bdbb7746f647f38d5027d960f9835f5e00f33e9fdf0c9031bae17b0d424ffd0b34f7a97751d0ec4762b46cd3a17d72d3f
SSDEEP 98304:uQAQcsa3GhfWYEvpb4LdECaqY+VYhFzXw/u5g9cAd9nO:uQAQcDPYxuCJe7X5ghfO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

a5:83:2c:4c:5f:61:38:38:3b:11:fa:e1:44:6b:61:81:04:3f:5e:0e:04:e8:34:5f:d7:dc:c6:16:4f:03:13:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=522303292b2005041027200a5d5d12051031230d161c143d24542553452740323d28,POSTALCODE=10805,ST=0b1c1115005f5c4e061704171b0617160407045b0c1704+ST=0b1c1115494a5c11101704105c1f07410b17550d0e1c0c5a070a090e025212541c510f17091909155406121d141b0850180d0a16140e53100100171b1d12055b0c0b0a070b

Chains

May 16, 2024

Minor OS version

0

Major OS version

5

Entry point

5634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaProcessorNode CommConfigDialogA SetErrorMode InterlockedDecrement ZombifyActCtx SetConsoleScreenBufferSize SetCommBreak FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetProcessHeap GetConsoleAliasesA EnumTimeFormatsW LoadLibraryW Sleep WriteConsoleOutputA GetConsoleAliasesLengthW CompareStringW SetConsoleTitleA VirtualUnlock GetConsoleAliasesW SetLastError GetProcAddress GetLongPathNameA VerLanguageNameW BuildCommDCBW LoadLibraryA GetCurrentDirectoryA DeleteCriticalSection SetCalendarInfoA GlobalReAlloc WriteConsoleW SetLocaleInfoA HeapAlloc GetLastError HeapReAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree VirtualAlloc HeapCreate ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA CloseHandle FlushFileBuffers

user32

UpdateWindow

advapi32

EnumDependentServicesW

Sharing

General

Malware Config

Signatures

File Explorer

236f4b0d753ceec77a521e36e6c1ce9495261eaf563a62e96447ddbf2313c42c

PE Signature issue

kernel32

user32

advapi32

generic