4600ef23af85e97c644a027c52acec8e23eb179453e06d7c435a503145cd57db

General

Target
4600ef23af85e97c644a027c52acec8e23eb179453e06d7c435a503145cd57db
Size 632KB
Sample240613-dkwstawblk
SHA256 4600ef23af85e97c644a027c52acec8e23eb179453e06d7c435a503145cd57db
MD5 42b4f328f4cf9e4e87c7f5e83f83b5d5
SHA1 f9942c2449bac233bdaab82ac8c2730f80f27071
SHA512 01cc30bd6c33562a01257646c5a9b37cef9ae8c73be672469a6e067b25e641d98b1416e6b57645d1156ac027c65971dbe6b5064a408d8a4dba265ca6d1631736
SSDEEP 12288:pSsEULKtpZqTBtwSgvtOvct0GWuBe4BqIhcMdG7wR:QUuDqjBgFYcGF4YcDdb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4600ef23af85e97c644a027c52acec8e23eb179453e06d7c435a503145cd57db

.zip 632KB
RFQ_IN24009357-OC-00132524-PI0888?f?d?p?..exe

.exe 3.5MB

4600ef23af85e97c644a027c52acec8e23eb179453e06d7c435a503145cd57db

SHA256 4600ef23af85e97c644a027c52acec8e23eb179453e06d7c435a503145cd57db
MD5 42b4f328f4cf9e4e87c7f5e83f83b5d5
SHA1 f9942c2449bac233bdaab82ac8c2730f80f27071
SHA512 01cc30bd6c33562a01257646c5a9b37cef9ae8c73be672469a6e067b25e641d98b1416e6b57645d1156ac027c65971dbe6b5064a408d8a4dba265ca6d1631736
SSDEEP 12288:pSsEULKtpZqTBtwSgvtOvct0GWuBe4BqIhcMdG7wR:QUuDqjBgFYcGF4YcDdb
MD5 SHA1 SHA512 SSDEEP

RFQ_IN24009357-OC-00132524-PI0888?f?d?p?..exe

SHA256 6ade58a42483fe328cae6494298313869d3610c81c0774d4c35f23f51046ba73
MD5 c4d83bb5ff4a158d979a359c7968bd55
SHA1 b6e58bb23d4ef83de5b2f4b6c509676f6c22b9ef
SHA512 12090c3e9213b3170451ad681089002e21b3b537ac1344b0f97e95788d36f9347d0f62b0ec5c32deb5ebc262d9a7ebe5f08655557f4951f1a57769b8afeddf67
SSDEEP 12288:f9c/uZKfplyTBt+SgxtO9cJ0OW4reYBq4jc64:FQjyjfg7scq7YYY/4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

PE Signature issue

Digest

32:f7:c1:21:e5:99:1f:3f:31:1f:8b:1a:32:fa:94:af:b8:63:8b:87:cd:fc:37:01:af:9f:f9:d4:d2:1f:8d:54

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Code Signing PCA 2011,OU=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 12, 2024

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

4600ef23af85e97c644a027c52acec8e23eb179453e06d7c435a503145cd57db

RFQ_IN24009357-OC-00132524-PI0888?f?d?p?..exe

PE Signature issue

generic