cb32e6dcd6c66c565fbe16d777921daee97420eb3b750dadfa90ac13842a9082

General

Target
cb32e6dcd6c66c565fbe16d777921daee97420eb3b750dadfa90ac13842a9082
Size 2.5MB
Sample240613-qws8aavfpj
SHA256 cb32e6dcd6c66c565fbe16d777921daee97420eb3b750dadfa90ac13842a9082
MD5 5e112e1ab755fb66d6abc197fb4cafbb
SHA1 817e49e9b2353a9d9a2ef80e07e47d5852265396
SHA512 8974765c277471d57648ea68a313317207031b5efa0f643d4885a4c632775cf1c830d4cd05bfbebf96e643b1a5024609153256633d1702c5bedca6e4feace04f
SSDEEP 49152:6udNz2fZHghOpzzU0esw7LPtJ0WyKaNxBqHcTxaIF7cYc+T5vGn1v0Ax851:6gNz8zzUDswdJyTxaIJlcve1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

cb32e6dcd6c66c565fbe16d777921daee97420eb3b750dadfa90ac13842a9082

.dll 2.5MB

cb32e6dcd6c66c565fbe16d777921daee97420eb3b750dadfa90ac13842a9082

IMPHASH f56a75f05f1be6a6342e56ffbf0af976
SHA256 cb32e6dcd6c66c565fbe16d777921daee97420eb3b750dadfa90ac13842a9082
MD5 5e112e1ab755fb66d6abc197fb4cafbb
SHA1 817e49e9b2353a9d9a2ef80e07e47d5852265396
SHA512 8974765c277471d57648ea68a313317207031b5efa0f643d4885a4c632775cf1c830d4cd05bfbebf96e643b1a5024609153256633d1702c5bedca6e4feace04f
SSDEEP 49152:6udNz2fZHghOpzzU0esw7LPtJ0WyKaNxBqHcTxaIF7cYc+T5vGn1v0Ax851:6gNz8zzUDswdJyTxaIJlcve1
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

b6:ef:03:0c:aa:4f:6f:8a:7d:cf:7a:5d:27:02:52:03:c3:53:aa:56:5b:56:1d:8c:e8:77:51:70:6f:e5:45:aa

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 12, 2024

Minor OS version

1

Major OS version

5

Entry point

1382055

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msedgeupdate_unsigned.pdb

kernel32

SizeofResource HeapFree InitializeCriticalSectionAndSpinCount HeapSize GetLastError LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy DeleteCriticalSection GetProcessHeap QueryDepthSList GetModuleHandleA GetThreadTimes UnregisterWait SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber ChangeTimerQueueTimer GetLogicalProcessorInformation SignalObjectAndWait SetLastError lstrlenW WriteFile GetShortPathNameW GetPrivateProfileIntW OutputDebugStringA SetFilePointer WaitForSingleObject CreateFileW GetCurrentThreadId ReleaseMutex Sleep GetFileInformationByHandle OutputDebugStringW CloseHandle GetLocalTime GetCurrentProcessId lstrcmpiW lstrcmpW CreateDirectoryW FindFirstFileW FindNextFileW GetCurrentProcess RemoveDirectoryW WaitForMultipleObjects GetEnvironmentVariableW FindClose GetFileAttributesW DuplicateHandle FormatMessageW DeleteFileW LoadLibraryW GetCurrentDirectoryW GetProcAddress LocalFree GetModuleHandleW FreeLibrary GetTempFileNameW OpenMutexW GetTickCount LoadLibraryExW GetExitCodeProcess ReadFile CompareFileTime SetEndOfFile SetFileAttributesW MultiByteToWideChar GetFileAttributesExW FileTimeToSystemTime MoveFileExW GetFileSize CopyFileW GetSystemTimeAsFileTime GetFileTime FlushFileBuffers lstrcpynW ExitProcess IsDebuggerPresent WideCharToMultiByte GetTimeZoneInformation FileTimeToLocalFileTime SystemTimeToFileTime SystemTimeToTzSpecificLocalTime GetStringTypeExW GetModuleFileNameW GetTempPathW GetSystemDirectoryW GetCurrentThread GetWindowsDirectoryW VirtualQuery GetModuleHandleExW TryEnterCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CreateMutexW CreateEventW SetEvent ResetEvent GetProductInfo GetVersionExW VerSetConditionMask VerifyVersionInfoW IsWow64Process GetLongPathNameW LocalAlloc OpenProcess HeapSetInformation SetPriorityClass TerminateProcess K32GetModuleFileNameExW WaitForMultipleObjectsEx K32GetProcessImageFileNameW CreateToolhelp32Snapshot ProcessIdToSessionId Process32NextW WaitForSingleObjectEx Process32FirstW K32EnumProcesses ReadProcessMemory K32EnumProcessModules SetHandleInformation DeviceIoControl CreatePipe GetSystemPowerStatus GlobalMemoryStatusEx CreateProcessW SetProcessWorkingSetSize GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetStdHandle QueryDosDeviceW GetLogicalDriveStringsW InitOnceExecuteOnce GetComputerNameExW SetEnvironmentVariableW OpenEventW GetPrivateProfileStringW CreateThread SetCurrentDirectoryW OpenThread QueryPerformanceCounter GetCommandLineW CreateHardLinkW GetThreadLocale lstrcmpA QueueUserWorkItem GetTickCount64 GetStringTypeExA SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead FormatMessageA GetStringTypeW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer GetCPInfo CompareStringW LCMapStringW GetLocaleInfoW RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetSystemInfo VirtualAlloc VirtualProtect GetFileType GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetFileSizeEx SetStdHandle GetConsoleOutputCP GetConsoleMode ReadConsoleW WriteConsoleW LoadLibraryExA GetProcessShutdownParameters SetProcessShutdownParameters GetProcessId Thread32Next Thread32First RegisterWaitForSingleObject UnregisterWaitEx QueryPerformanceFrequency GetSystemTime SetThreadPriority GetThreadPriority GetUserDefaultLangID GetSystemDefaultLangID QueryUnbiasedInterruptTime DeleteTimerQueueEx CreateTimerQueue GetNativeSystemInfo GetModuleFileNameA AreFileApisANSI HeapCreate GetFullPathNameW GetDiskFreeSpaceW LockFile GetFullPathNameA UnlockFileEx UnmapViewOfFile HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA FlushViewOfFile CreateFileA LoadLibraryA GetVersionExA DeleteFileA HeapCompact UnlockFile CreateFileMappingA LockFileEx CreateFileMappingW MapViewOfFile GlobalHandle MulDiv FreeResource InterlockedPopEntrySList FlushInstructionCache VirtualFree GetExitCodeThread ExitThread FreeLibraryAndExitThread CreateTimerQueueTimer DeleteTimerQueueTimer ReleaseSemaphore

netapi32

NetApiBufferFree NetWkstaUserGetInfo NetGetJoinInformation

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

wtsapi32

WTSQuerySessionInformationW WTSEnumerateSessionsW WTSFreeMemory WTSQueryUserToken

Sharing

General

Malware Config

Signatures

File Explorer

cb32e6dcd6c66c565fbe16d777921daee97420eb3b750dadfa90ac13842a9082

PE Signature issue

kernel32

netapi32

version

wtsapi32

generic