07fbfbcdfa1245c2d00a8f2ea22e428204e5d88be1bc4311278f4f0f6e2b1d1e

General

Target
07fbfbcdfa1245c2d00a8f2ea22e428204e5d88be1bc4311278f4f0f6e2b1d1e
Size 286KB
Sample240601-w2ly2sbf97
SHA256 07fbfbcdfa1245c2d00a8f2ea22e428204e5d88be1bc4311278f4f0f6e2b1d1e
MD5 372bf1738ad84b772da34a7ca65fdcb5
SHA1 11f506921da1ddc07e87cc96d48580f1bf6467be
SHA512 b87190750af3b03e3a480126f564af0d1e6e75c7d5d31b575af0a772b077325a5c6692befb62481dc2f0bb06fc85fae8ed12c127c35290a21d33d26db7384ee8
SSDEEP 6144:m7gKNkhSR/UJuyXnZhB+h8WHlBV+UdvrEFp7hKFF:m7gKNkhm/UJuyXnPB+h8WHlBjvrEH7sF
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

07fbfbcdfa1245c2d00a8f2ea22e428204e5d88be1bc4311278f4f0f6e2b1d1e

.exe 286KB

07fbfbcdfa1245c2d00a8f2ea22e428204e5d88be1bc4311278f4f0f6e2b1d1e

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 07fbfbcdfa1245c2d00a8f2ea22e428204e5d88be1bc4311278f4f0f6e2b1d1e
MD5 372bf1738ad84b772da34a7ca65fdcb5
SHA1 11f506921da1ddc07e87cc96d48580f1bf6467be
SHA512 b87190750af3b03e3a480126f564af0d1e6e75c7d5d31b575af0a772b077325a5c6692befb62481dc2f0bb06fc85fae8ed12c127c35290a21d33d26db7384ee8
SSDEEP 6144:m7gKNkhSR/UJuyXnZhB+h8WHlBV+UdvrEFp7hKFF:m7gKNkhm/UJuyXnPB+h8WHlBjvrEH7sF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

47:e8:09:cb:66:b1:71:00:0e:03:96:35:99:bf:6e:5c:49:84:05:9e:8d:47:5c:8b:46:00:f3:0a:c9:f0:cd:63

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 23, 2024

Minor OS version

1

Major OS version

5

Entry point

46610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

07fbfbcdfa1245c2d00a8f2ea22e428204e5d88be1bc4311278f4f0f6e2b1d1e

PE Signature issue

kernel32

ole32

generic