4c3f0027d2e0e9c8664bf102fc2840e4[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
4c3f0027d2e0e9c8664bf102fc2840e4.exe
Size 7.4MB
Sample240614-hmhfessgln
SHA256 5f5d2d0921c6917bd07ea44fbfef38efc470942736a13283ba4e15df051c0f38
MD5 4c3f0027d2e0e9c8664bf102fc2840e4
SHA1 1af682cc65c9a3c4f1f06fc1a698cf18bfeb3e12
SHA512 3baeaecaae645fe329eccabd4e9e05a589ee69edf3e60e16ed3987f2ecb5c874dc75858dfd71871ed4a116aac2f9b58822d0a2c35fcbf7a8e4e77357e63af238
SSDEEP 196608:w6Oakf78Ql8X6OAfiZ8AY/5iEvCidMtCVHb1QR:LOXDra6OP5OiEvCi+IaR
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4c3f0027d2e0e9c8664bf102fc2840e4.exe

.exe 7.4MB

4c3f0027d2e0e9c8664bf102fc2840e4.exe

IMPHASH 3c629f9928a51ed1038c5709d48035af
SHA256 5f5d2d0921c6917bd07ea44fbfef38efc470942736a13283ba4e15df051c0f38
MD5 4c3f0027d2e0e9c8664bf102fc2840e4
SHA1 1af682cc65c9a3c4f1f06fc1a698cf18bfeb3e12
SHA512 3baeaecaae645fe329eccabd4e9e05a589ee69edf3e60e16ed3987f2ecb5c874dc75858dfd71871ed4a116aac2f9b58822d0a2c35fcbf7a8e4e77357e63af238
SSDEEP 196608:w6Oakf78Ql8X6OAfiZ8AY/5iEvCidMtCVHb1QR:LOXDra6OP5OiEvCi+IaR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

a5:3c:c4:9f:f4:94:c2:ba:bc:12:f3:97:84:84:29:bf:f5:a3:a4:dc:6f:26:10:7d:0d:45:f4:c3:fd:8c:b7:84

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ASUS VivoBook EU 16X M3604YA-MB248 90NB11A1-M00B80

Chains

Jun 13, 2024

Minor OS version

Major OS version

Entry point

12270327

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

__CxxFrameHandler3 memcmp strlen _EH_prolog strncpy malloc _wtoi64 atexit ??_V@YAXPAX@Z memchr strcpy_s strtok_s memmove strchr memcpy strcat ??_U@YAPAXI@Z wcslen memset

kernel32

IsProcessorFeaturePresent LoadLibraryW ExitProcess GetCurrentProcess HeapAlloc GetProcessHeap lstrlenA HeapFree SetThreadContext WriteProcessMemory ResumeThread VirtualAllocEx ReadProcessMemory CreateProcessA VirtualQueryEx OpenProcess GetComputerNameA FileTimeToSystemTime CloseHandle WaitForSingleObject CreateThread GetDriveTypeA GetLogicalDriveStringsA CreateDirectoryA LoadLibraryA GetStringTypeW MultiByteToWideChar LCMapStringW WideCharToMultiByte GetModuleFileNameW GetStdHandle WriteFile Sleep GetCurrentThreadId SetLastError GetModuleHandleW GetThreadContext RaiseException EncodePointer GetLastError DecodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection RtlUnwind GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetProcAddress GetSystemTimeAsFileTime CreateEventA GetModuleHandleA TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep LoadLibraryA FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree HeapAlloc HeapFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar GetModuleHandleW LoadResource FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError GetCommandLineA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter HeapReAlloc GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteFile RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers VirtualQuery

user32

wsprintfW CharToOemA

advapi32

GetCurrentHwProfileA GetUserNameA RegOpenKeyExA RegGetValueA

shell32

SHFileOperationA

ole32

CoInitializeSecurity CoInitializeEx CoSetProxyBlanket CoCreateInstance

oleaut32

SysFreeString VariantClear VariantInit SysAllocString

shlwapi

ord155

crypt32

CryptStringToBinaryA

Name

.text

Size

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmpX.

Size

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vmpX.

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmpX.

Size

7.3MB

Virtual Size

7.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4c3f0027d2e0e9c8664bf102fc2840e4.exe

PE Signature issue

msvcrt

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

crypt32

generic