1c7309b63d999c4b28006f68afc184895c59614c61e2eab16b13b7f398f50d77

General

Target
1c7309b63d999c4b28006f68afc184895c59614c61e2eab16b13b7f398f50d77
Size 993KB
Sample260824-q643jayepf
SHA256 1c7309b63d999c4b28006f68afc184895c59614c61e2eab16b13b7f398f50d77
MD5 4ad8008d65d74d14688576d4d23aa9ad
SHA1 47e86e33e23be7d4acad0fb7315bb883c0dbd047
SHA512 8adf85663c88840064acba4ec9ab7f4823610b7629af76b36e559765f282ed9308677edd4bc947fafcfa3bdc73a4bc01d17c59490c287378df759c74193006e8
SSDEEP 24576:x7wsUOFsC+vhFHdTcEuAb9mU7t7odmSa3Q:x7wsUtvhVqgbEU7t7GmG
TLSH
T1AE25DF96CF92CA67C9520430C5E957D22934CF785D22CAC36EC56C2D3D72BC09AE6F1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
1c7309b63d999c4b28006f68afc184895c59614c61e2eab16b13b7f398f50d77

File Explorer

1c7309b63d999c4b28006f68afc184895c59614c61e2eab16b13b7f398f50d77

.exe 993KB

1c7309b63d999c4b28006f68afc184895c59614c61e2eab16b13b7f398f50d77

IMPHASH 47fd2d7f1dbc5f0b8f1acdb6078d2f75
SHA256 1c7309b63d999c4b28006f68afc184895c59614c61e2eab16b13b7f398f50d77
MD5 4ad8008d65d74d14688576d4d23aa9ad
SHA1 47e86e33e23be7d4acad0fb7315bb883c0dbd047
SHA512 8adf85663c88840064acba4ec9ab7f4823610b7629af76b36e559765f282ed9308677edd4bc947fafcfa3bdc73a4bc01d17c59490c287378df759c74193006e8
SSDEEP 24576:x7wsUOFsC+vhFHdTcEuAb9mU7t7odmSa3Q:x7wsUtvhVqgbEU7t7GmG
TLSH
T1AE25DF96CF92CA67C9520430C5E957D22934CF785D22CAC36EC56C2D3D72BC09AE6F1A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c4:74:50:8a:bd:34:45:17:62:bf:94:42:10:00:86:6d:9a:5d:3a:70

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Andrey Hmelnikov,O=Andrey Hmelnikov,C=RU,1.2.840.113549.1.9.1=#0c1c416e647265792e486d656c6e696b6f7640686f746d61696c2e636f6d

Chains

Aug 21, 2026

CN=Andrey Hmelnikov,O=Andrey Hmelnikov,C=RU,1.2.840.113549.1.9.1=#0c1c416e647265792e486d656c6e696b6f7640686f746d61696c2e636f6d

Minor OS version

1

Major OS version

5

Entry point

283911

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LeaveCriticalSection GetCurrentThreadId ExitProcess CreateThread WaitForSingleObject CloseHandle DeleteCriticalSection FreeLibrary VirtualAlloc VirtualProtect EnterCriticalSection CreateEventA Sleep SetEvent GetCurrentProcess CreateEventW GetLastError GetFullPathNameW CopyFileW DeleteFileW GetProcAddress InitializeCriticalSection GetModuleFileNameW GetCurrentProcessId LoadLibraryA GetModuleHandleA VirtualFree GetCommandLineW IsBadReadPtr HeapFree GetCommandLineA GetSystemTimeAsFileTime HeapAlloc IsProcessorFeaturePresent GetProcessHeap IsDebuggerPresent EncodePointer DecodePointer InitializeCriticalSectionAndSpinCount RtlUnwind WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode SetLastError InterlockedIncrement InterlockedDecrement GetModuleHandleExW AreFileApisANSI MultiByteToWideChar GetStdHandle GetFileType GetStartupInfoW GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetOEMCP GetCPInfo SetFilePointerEx SetStdHandle WriteConsoleW FlushFileBuffers LoadLibraryExW OutputDebugStringW LoadLibraryW GetStringTypeW LCMapStringW HeapReAlloc CreateFileW HeapSize SetEndOfFile ReadFile ReadConsoleW

advapi32

BuildSecurityDescriptorW AddAccessAllowedAceEx BuildExplicitAccessWithNameW

comctl32

ImageList_SetImageCount PropertySheetW ImageList_DragMove

Sharing

General

Malware Config

Signatures

File Explorer

1c7309b63d999c4b28006f68afc184895c59614c61e2eab16b13b7f398f50d77

PE Signature issue

kernel32

advapi32

comctl32

generic