79a13aac7f0047c34a61a44ca78d0554224451b25d9ee09cf758620ed3f2f025

General

Target
79a13aac7f0047c34a61a44ca78d0554224451b25d9ee09cf758620ed3f2f025
Size 286KB
Sample240826-jvs3kavdnn
SHA256 79a13aac7f0047c34a61a44ca78d0554224451b25d9ee09cf758620ed3f2f025
MD5 08384556b309a8480645f6d0763d4243
SHA1 568a8efd19cc0115464394fe6bbd07bd8c40a4c4
SHA512 c5a1c6b66be74d2767090edd7558bf9bcc327190f3e4c7f2e08f67590122742ddca6bdd35bc1d09a955486d09224fecf1a745e4ac20939d37e3648ba893651af
SSDEEP 6144:C7gKNkhSR2lkHouyXnZhB+h8WHlBV+UdvrEFp7hKc7:C7gKNkhm2VuyXnPB+h8WHlBjvrEH7r7
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

79a13aac7f0047c34a61a44ca78d0554224451b25d9ee09cf758620ed3f2f025

.exe 286KB

79a13aac7f0047c34a61a44ca78d0554224451b25d9ee09cf758620ed3f2f025

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 79a13aac7f0047c34a61a44ca78d0554224451b25d9ee09cf758620ed3f2f025
MD5 08384556b309a8480645f6d0763d4243
SHA1 568a8efd19cc0115464394fe6bbd07bd8c40a4c4
SHA512 c5a1c6b66be74d2767090edd7558bf9bcc327190f3e4c7f2e08f67590122742ddca6bdd35bc1d09a955486d09224fecf1a745e4ac20939d37e3648ba893651af
SSDEEP 6144:C7gKNkhSR2lkHouyXnZhB+h8WHlBV+UdvrEFp7hKc7:C7gKNkhm2VuyXnPB+h8WHlBjvrEH7r7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

00:34:52:8e:d4:af:0f:fc:06:2f:1a:77:ba:2b:16:04:86:71:48:f8:b1:0d:f2:1f:53:c6:21:e9:b0:fa:a9:40

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Aug 22, 2024

Minor OS version

1

Major OS version

5

Entry point

46610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

79a13aac7f0047c34a61a44ca78d0554224451b25d9ee09cf758620ed3f2f025

PE Signature issue

kernel32

ole32

generic