6966583fd1c7d09b8b4139d22346ab7418a9e0407d08d8e01bbfce000e1ee2de

General

Target
6966583fd1c7d09b8b4139d22346ab7418a9e0407d08d8e01bbfce000e1ee2de
Size 286KB
Sample240907-pva5mswbma
SHA256 6966583fd1c7d09b8b4139d22346ab7418a9e0407d08d8e01bbfce000e1ee2de
MD5 bda8c6713cda3bff7b333e389afd7bae
SHA1 c92eba45cc8397fc5ee0d2ce8ad663a8aab788c3
SHA512 2744a0a1bc6097730141006f35da96f95063227b09919d0ab6cc7288afda0d8d1b3951f6fd186f6f846d381805de1e44e3c8a7bd1224297438071c4f23fd657a
SSDEEP 6144:F7gSx/5kHouyXnZhB+h8WHlBV+UdvrEFp7hKCZ:F7gSx/JuyXnPB+h8WHlBjvrEH7FZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

6966583fd1c7d09b8b4139d22346ab7418a9e0407d08d8e01bbfce000e1ee2de

.exe 286KB

6966583fd1c7d09b8b4139d22346ab7418a9e0407d08d8e01bbfce000e1ee2de

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 6966583fd1c7d09b8b4139d22346ab7418a9e0407d08d8e01bbfce000e1ee2de
MD5 bda8c6713cda3bff7b333e389afd7bae
SHA1 c92eba45cc8397fc5ee0d2ce8ad663a8aab788c3
SHA512 2744a0a1bc6097730141006f35da96f95063227b09919d0ab6cc7288afda0d8d1b3951f6fd186f6f846d381805de1e44e3c8a7bd1224297438071c4f23fd657a
SSDEEP 6144:F7gSx/5kHouyXnZhB+h8WHlBV+UdvrEFp7hKCZ:F7gSx/JuyXnPB+h8WHlBjvrEH7FZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

fd:28:5a:31:15:02:62:de:aa:99:19:8a:fd:58:f4:00:35:4f:7f:cc:0d:12:b1:ea:6c:7d:52:b7:89:fd:4d:45

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 6, 2024

Minor OS version

1

Major OS version

5

Entry point

46610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

6966583fd1c7d09b8b4139d22346ab7418a9e0407d08d8e01bbfce000e1ee2de

PE Signature issue

kernel32

ole32

generic