4282d8a42f132445fb7daef5927a798e4673d2da2e8f1a2e25aae10e965cd3ed

General

Target
4282d8a42f132445fb7daef5927a798e4673d2da2e8f1a2e25aae10e965cd3ed
Size 287KB
Sample240618-qs9e4azdkm
SHA256 4282d8a42f132445fb7daef5927a798e4673d2da2e8f1a2e25aae10e965cd3ed
MD5 e2dad836b6ad911e28c23790157df7cd
SHA1 fdb4390c8b2d709a2cc067c4284fc8ea525315a3
SHA512 eedd57b5e28f407c992d14491e7ad7fae0a878d8121a3c75fae5cfd1dcbbe1eba02928fe140f427dc7c2bcad0c994b9ce493690a0464d3ab382e56e769dafe6f
SSDEEP 6144:SzTuN9afTJ5wuyXTZBB+R8WpMBV+UdvrEFp7hK8:SzTuN9abJ5wuyXTvB+R8WiBjvrEH7b
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4282d8a42f132445fb7daef5927a798e4673d2da2e8f1a2e25aae10e965cd3ed

.exe 287KB

4282d8a42f132445fb7daef5927a798e4673d2da2e8f1a2e25aae10e965cd3ed

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 4282d8a42f132445fb7daef5927a798e4673d2da2e8f1a2e25aae10e965cd3ed
MD5 e2dad836b6ad911e28c23790157df7cd
SHA1 fdb4390c8b2d709a2cc067c4284fc8ea525315a3
SHA512 eedd57b5e28f407c992d14491e7ad7fae0a878d8121a3c75fae5cfd1dcbbe1eba02928fe140f427dc7c2bcad0c994b9ce493690a0464d3ab382e56e769dafe6f
SSDEEP 6144:SzTuN9afTJ5wuyXTZBB+R8WpMBV+UdvrEFp7hK8:SzTuN9abJ5wuyXTvB+R8WiBjvrEH7b
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

da:9d:40:41:09:58:3b:53:26:69:76:63:89:f6:15:72:ec:3c:d6:19:0a:99:3f:e8:0f:3a:00:aa:f8:88:66:79

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 18, 2024

Minor OS version

1

Major OS version

5

Entry point

46770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

4282d8a42f132445fb7daef5927a798e4673d2da2e8f1a2e25aae10e965cd3ed

PE Signature issue

kernel32

ole32

generic