6d135c24c7f6fb368c7c4c9ace8745b0N

General

Target
6d135c24c7f6fb368c7c4c9ace8745b0N
Size 4.4MB
Sample240826-kw4fcsxcpl
SHA256 55ff77d4170d7df86ef7e47be35d593aed689b8f6eaba32eaeca295d7ec72932
MD5 6d135c24c7f6fb368c7c4c9ace8745b0
SHA1 064ffa7b9544f0da5b38574996c3dc31259a7305
SHA512 63d43d40be87a117dd9cea4270a5da0b15b15225441775552feda11a335a9831335ae3eebd1f0e7d417192b672bc7641b17763de9d7d9346eee8c69523372f2f
SSDEEP 98304:fFyL7FeiGGvcNRXeOvUFRT9G+PMImTQEOl8iYkBiDUq1Cy4bdubEUOlSmT:fFURGG6EysKp5zMO74bduFOld
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

6d135c24c7f6fb368c7c4c9ace8745b0N

.exe 4.4MB

6d135c24c7f6fb368c7c4c9ace8745b0N

IMPHASH 97bf1f0575aad20ea6d291ede0d6d0ff
SHA256 55ff77d4170d7df86ef7e47be35d593aed689b8f6eaba32eaeca295d7ec72932
MD5 6d135c24c7f6fb368c7c4c9ace8745b0
SHA1 064ffa7b9544f0da5b38574996c3dc31259a7305
SHA512 63d43d40be87a117dd9cea4270a5da0b15b15225441775552feda11a335a9831335ae3eebd1f0e7d417192b672bc7641b17763de9d7d9346eee8c69523372f2f
SSDEEP 98304:fFyL7FeiGGvcNRXeOvUFRT9G+PMImTQEOl8iYkBiDUq1Cy4bdubEUOlSmT:fFURGG6EysKp5zMO74bduFOld
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

e6:12:6f:54:64:a4:13:3c:da:24:fc:1d:7f:b4:cc:30:7f:a6:7d:f0:37:bf:6d:a3:9a:8d:11:bd:78:35:cb:46

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

POSTALCODE=10051

Chains

Aug 22, 2024

Minor OS version

0

Major OS version

5

Entry point

4453815

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wok17_tejos-gazojatu19\fajifo\porasibec6.pdb

kernel32

GetSystemDefaultLCID AddRefActCtx GetCPInfoExA WriteConsoleInputW ReadConsoleInputW GetTapeParameters WaitCommEvent GetNumaProcessorNode GetConsoleCP VerifyVersionInfoA WaitNamedPipeW CreateMutexA WriteConsoleW GetLastError CreateFileA DeleteFileW WritePrivateProfileSectionA GetPrivateProfileSectionW GetLongPathNameW SetStdHandle LoadLibraryW IsDebuggerPresent FindFirstVolumeW WriteFile BuildCommDCBW FindActCtxSectionStringW VerLanguageNameW SetFileShortNameA WriteProcessMemory GetFileAttributesW SetEvent IsBadReadPtr SleepEx GetLongPathNameA LoadResource GetProfileIntA SetConsoleCtrlHandler SetConsoleTitleW GenerateConsoleCtrlEvent GetCurrentConsoleFont SetConsoleTextAttribute AttachConsole GetConsoleAliasesLengthW ReadConsoleA ReadConsoleOutputW BuildCommDCBAndTimeoutsA GetGeoInfoW GetCurrentProcess GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetACP WaitForMultipleObjects VerifyVersionInfoW SetCalendarInfoA CommConfigDialogA GetConsoleWindow FindAtomW SetFileApisToOEM GetStringTypeA HeapSize GetDiskFreeSpaceA GetTapePosition GetConsoleAliasesLengthA InterlockedPopEntrySList EnumDateFormatsW WaitForSingleObject GetCommandLineA GetStartupInfoA HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement ReadFile TerminateProcess SetFilePointer EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage RtlUnwind MultiByteToWideChar GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount LoadLibraryA GetLocaleInfoA GetStringTypeW LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP CloseHandle

user32

GetAltTabInfoW

advapi32

AdjustTokenPrivileges AdjustTokenGroups MapGenericMask AreAllAccessesGranted

Sharing

General

Malware Config

Signatures

File Explorer

6d135c24c7f6fb368c7c4c9ace8745b0N

PE Signature issue

kernel32

user32

advapi32

generic