6bb45785cd75804e7cea0d53eb71c13a5130f4c4eb87e026cb3c3feabc5a43c6

General

Target
6bb45785cd75804e7cea0d53eb71c13a5130f4c4eb87e026cb3c3feabc5a43c6
Size 286KB
Sample240820-hd4x3axgpg
SHA256 6bb45785cd75804e7cea0d53eb71c13a5130f4c4eb87e026cb3c3feabc5a43c6
MD5 30d963183c21031ba4dc5a923d20673f
SHA1 eac78ebcd90bbad31a83bf8ca20c7bf62371816b
SHA512 eb24fabceca51877691fb3edb3c351423f2b82be8117a8aff19af1a96d2a94c95a80022e61a84cff015bfb1a9b232b593d435b7f16a074d1caadc3b4ada74586
SSDEEP 6144:pQ7gKNkhSR/5kHouyXnZhB+h8WHlBV+UdvrEFp7hKn6kqh:pQ7gKNkhm/JuyXnPB+h8WHlBjvrEH7C+
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

6bb45785cd75804e7cea0d53eb71c13a5130f4c4eb87e026cb3c3feabc5a43c6

.exe 286KB

6bb45785cd75804e7cea0d53eb71c13a5130f4c4eb87e026cb3c3feabc5a43c6

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 6bb45785cd75804e7cea0d53eb71c13a5130f4c4eb87e026cb3c3feabc5a43c6
MD5 30d963183c21031ba4dc5a923d20673f
SHA1 eac78ebcd90bbad31a83bf8ca20c7bf62371816b
SHA512 eb24fabceca51877691fb3edb3c351423f2b82be8117a8aff19af1a96d2a94c95a80022e61a84cff015bfb1a9b232b593d435b7f16a074d1caadc3b4ada74586
SSDEEP 6144:pQ7gKNkhSR/5kHouyXnZhB+h8WHlBV+UdvrEFp7hKn6kqh:pQ7gKNkhm/JuyXnPB+h8WHlBjvrEH7C+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

6b:19:0b:74:74:11:d9:5e:4d:6e:66:ac:f4:79:f2:64:21:32:2c:d5:92:0a:a6:cd:cb:ad:33:a4:5c:3d:01:0f

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 17, 2024

Minor OS version

1

Major OS version

5

Entry point

46610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

6bb45785cd75804e7cea0d53eb71c13a5130f4c4eb87e026cb3c3feabc5a43c6

PE Signature issue

kernel32

ole32

generic