Unconfirmed 995639[.]crdownload

Sharing

Copy URL Twitter E-mail

General

Target
Unconfirmed 995639.crdownload
Size 268KB
Sample260724-prdflaek3v
SHA256 461ee6ccc5d00c864d096824a6cabeb1eb5f8309f2019d28ce7b9b1b2f24cfc2
MD5 9b1d069153a6aaf684d1845a76bfaa18
SHA1 21585c286b4a36503b5e9b2a67530f5408acb0d0
SHA512 dd87c2174f3556624b65a4b4f4ad05fb76c442d30e4874235d170f1cea24b0be777f96f0f1a21b1a83309a3fd4c05becea950ec39c4f533c438664c9fdeebf43
SSDEEP 3072:EvZY6xuHfh3afmcAt8guApy58q4nLm17nkLs1RlTilLzDV3adtl1MGlJ2oDME6RK:2YHfh3ifaLm17Jkat1ERM4Wb
TLSH
T10744B61FEAE618E1D9B6C0389153B13FF8B174A6437197D7A7815A070B62BE4E83E740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
Unconfirmed 995639.crdownload

File Explorer

Unconfirmed 995639.crdownload

.exe 268KB

Unconfirmed 995639.crdownload

IMPHASH 239f206745613d6354d2cb298831d7a3
SHA256 461ee6ccc5d00c864d096824a6cabeb1eb5f8309f2019d28ce7b9b1b2f24cfc2
MD5 9b1d069153a6aaf684d1845a76bfaa18
SHA1 21585c286b4a36503b5e9b2a67530f5408acb0d0
SHA512 dd87c2174f3556624b65a4b4f4ad05fb76c442d30e4874235d170f1cea24b0be777f96f0f1a21b1a83309a3fd4c05becea950ec39c4f533c438664c9fdeebf43
SSDEEP 3072:EvZY6xuHfh3afmcAt8guApy58q4nLm17nkLs1RlTilLzDV3adtl1MGlJ2oDME6RK:2YHfh3ifaLm17Jkat1ERM4Wb
TLSH
T10744B61FEAE618E1D9B6C0389153B13FF8B174A6437197D7A7815A070B62BE4E83E740
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

92:af:a8:0f:5c:62:af:1d:ce:37:7a:34:17:ae:cd:a7:38:95:01:ec:5b:19:21:8a:95:be:db:eb:f2:f0:a8:15

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=dave

Chains

Jul 23, 2026

CN=dave

Minor OS version

Major OS version

Entry point

205636

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

shell32

ShellExecuteA Shell_NotifyIconW

user32

MessageBoxA GetClientRect GetWindowTextLengthA GetWindowTextA SetWindowTextA SetForegroundWindow UpdateWindow EnableWindow ShowWindow LoadCursorA CreateWindowExA RegisterClassW PostQuitMessage DefWindowProcA SendMessageW SendMessageA DispatchMessageA TranslateMessage GetMessageA FillRect LoadIconA CreateWindowExW

gdi32

SetBkColor GetStockObject DeleteObject CreateSolidBrush SetTextColor

comdlg32

GetOpenFileNameA GetSaveFileNameA

msvcp140

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??Bios_base@std@@QEBA_NXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Xbad_alloc@std@@YAXXZ ??0_Lockit@std@@QEAA@H@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ??1_Lockit@std@@QEAA@XZ ?_Xout_of_range@std@@YAXPEBD@Z

kernel32

WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive Process32Next Process32First CreateToolhelp32Snapshot K32GetModuleInformation GetCurrentThreadId SleepConditionVariableSRW MultiByteToWideChar GetModuleHandleA GetModuleFileNameA WriteProcessMemory ReadProcessMemory VirtualProtectEx GetTickCount GetLocalTime SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter WideCharToMultiByte GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead K32EnumProcessModules OpenProcess CreateThread Sleep CloseHandle

vcruntime140

_purecall memchr memcmp memcpy memmove memset strrchr strstr __std_exception_copy __std_exception_destroy _CxxThrowException __C_specific_handler __current_exception __current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

isdigit strncpy strlen tolower _stricmp strcmp wcscpy_s strcpy

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit terminate _errno exit _initterm_e _initterm _get_narrow_winmain_command_line _exit _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _wassert

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode free malloc realloc

api-ms-win-crt-convert-l1-1-0

strtol atoi strtoull

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf _get_stream_buffer_pointers fopen_s __stdio_common_vsprintf_s fgetpos ungetc setvbuf fwrite ftell _fseeki64 fseek fsetpos fread fputs fputc __stdio_common_vfprintf _set_fmode fgetc fflush fclose __p__commode

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-locale-l1-1-0

_configthreadlocale