b72c1ab86b842a24c004171bae6a80b522c584e88b6e377c0b3df2c5b340278e

Sharing

Copy URL Twitter E-mail

General

Target
b72c1ab86b842a24c004171bae6a80b522c584e88b6e377c0b3df2c5b340278e
Size 5.3MB
Sample240614-dnmdjsxakk
SHA256 b72c1ab86b842a24c004171bae6a80b522c584e88b6e377c0b3df2c5b340278e
MD5 4c7ca1cf1f1fb26726746dc924066c81
SHA1 9583747dcf5057ffbd81cbaf41f0fc07be3b0cb3
SHA512 96c360a878c1efcc16ad8cbfab7b3b12b9f9f408f9bb713fb7f329f9941577298edcdf503899ac6814c493da0ee5e5e70f0dff671fa5b9fcbc90c637f3921a71
SSDEEP 98304:xRjPz9KDzUU8O5/B/LJ25E9SVh86sS3TRknQ3ss2MApp9meypA3cPDu7:xFKoU8O5/b2XViSjX310SeyGc7u7
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

b72c1ab86b842a24c004171bae6a80b522c584e88b6e377c0b3df2c5b340278e

.exe 5.3MB

b72c1ab86b842a24c004171bae6a80b522c584e88b6e377c0b3df2c5b340278e

IMPHASH 203d63d5d9a088e2d84cef737227986b
SHA256 b72c1ab86b842a24c004171bae6a80b522c584e88b6e377c0b3df2c5b340278e
MD5 4c7ca1cf1f1fb26726746dc924066c81
SHA1 9583747dcf5057ffbd81cbaf41f0fc07be3b0cb3
SHA512 96c360a878c1efcc16ad8cbfab7b3b12b9f9f408f9bb713fb7f329f9941577298edcdf503899ac6814c493da0ee5e5e70f0dff671fa5b9fcbc90c637f3921a71
SSDEEP 98304:xRjPz9KDzUU8O5/B/LJ25E9SVh86sS3TRknQ3ss2MApp9meypA3cPDu7:xFKoU8O5/b2XViSjX310SeyGc7u7
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

8b:8d:c9:4b:03:ff:4d:27:e4:c7:96:90:6d:d9:0f:6b:f7:3b:03:ef:bc:04:be:57:e4:89:70:be:99:c7:1b:60

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 12, 2024

Minor OS version

Major OS version

Entry point

4416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

396B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

848B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

b72c1ab86b842a24c004171bae6a80b522c584e88b6e377c0b3df2c5b340278e

PE Signature issue

msvcrt

kernel32

generic