d5caa2f203da47333f8fe8492e3c7cdb83c97491e02d4e017cbf0a3f51862dbc

General

Target
d5caa2f203da47333f8fe8492e3c7cdb83c97491e02d4e017cbf0a3f51862dbc
Size 287KB
Sample241224-gg616askc1
SHA256 d5caa2f203da47333f8fe8492e3c7cdb83c97491e02d4e017cbf0a3f51862dbc
MD5 04bfc298d91f52f972d28162b35acab8
SHA1 6191e73976797e194a952059b5d1762ae4d49db7
SHA512 e584cda94fd5a38231ea29de942e435ea726a21560575bfb6dc05122e6a968ad8621bc0b90241544a1848fbd7691a545f58dba825cc1bef45a3f45d624e8744a
SSDEEP 6144:ZzTuN9afTJUyuyXTZBB+R8WpMBV+UdvrEFp7hKae:ZzTuN9abJUyuyXTvB+R8WiBjvrEH79e
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

d5caa2f203da47333f8fe8492e3c7cdb83c97491e02d4e017cbf0a3f51862dbc

.exe 287KB

d5caa2f203da47333f8fe8492e3c7cdb83c97491e02d4e017cbf0a3f51862dbc

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 d5caa2f203da47333f8fe8492e3c7cdb83c97491e02d4e017cbf0a3f51862dbc
MD5 04bfc298d91f52f972d28162b35acab8
SHA1 6191e73976797e194a952059b5d1762ae4d49db7
SHA512 e584cda94fd5a38231ea29de942e435ea726a21560575bfb6dc05122e6a968ad8621bc0b90241544a1848fbd7691a545f58dba825cc1bef45a3f45d624e8744a
SSDEEP 6144:ZzTuN9afTJUyuyXTZBB+R8WpMBV+UdvrEFp7hKae:ZzTuN9abJUyuyXTvB+R8WiBjvrEH79e
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

72:53:b7:03:b0:68:3e:9a:b9:3d:6c:87:73:fc:45:fd:ca:08:6f:29:e4:36:69:af:fc:28:25:18:e1:9f:4b:c7

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Dec 12, 2024

Minor OS version

1

Major OS version

5

Entry point

46770

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

d5caa2f203da47333f8fe8492e3c7cdb83c97491e02d4e017cbf0a3f51862dbc

PE Signature issue

kernel32

ole32

generic