c4c2ba967c8c2953674b8384cb112c7e1076091b085a00acabfad95d29d96f93

General

Target
c4c2ba967c8c2953674b8384cb112c7e1076091b085a00acabfad95d29d96f93
Size 286KB
Sample260831-cpppmatdkg
SHA256 c4c2ba967c8c2953674b8384cb112c7e1076091b085a00acabfad95d29d96f93
MD5 65e380978546a9b48a1cf91469047a5b
SHA1 b1782c2d7ee8ac4d7e4c7d98fab1476e4d366ea7
SHA512 016145f423e3660ffd59c3dfa0dadebdd51958e4c9e287b7d38ce2750437e84bd748e01f516fc131ed1255dc8531e318d054b07e4f03c4cdb239cc8bca4b5908
SSDEEP 6144:x7gKNkhSR/BmxuyXnZhB+h8WHUBV+UdvrEFp7hKr:x7gKNkhm/BouyXnPB+h8WHUBjvrEH7M
TLSH
T15A54D31233F80BA9F4F36E3068349F25D9BABC399D39E76E1641218D1D39A019D61B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
c4c2ba967c8c2953674b8384cb112c7e1076091b085a00acabfad95d29d96f93

File Explorer

c4c2ba967c8c2953674b8384cb112c7e1076091b085a00acabfad95d29d96f93

.exe 286KB

c4c2ba967c8c2953674b8384cb112c7e1076091b085a00acabfad95d29d96f93

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 c4c2ba967c8c2953674b8384cb112c7e1076091b085a00acabfad95d29d96f93
MD5 65e380978546a9b48a1cf91469047a5b
SHA1 b1782c2d7ee8ac4d7e4c7d98fab1476e4d366ea7
SHA512 016145f423e3660ffd59c3dfa0dadebdd51958e4c9e287b7d38ce2750437e84bd748e01f516fc131ed1255dc8531e318d054b07e4f03c4cdb239cc8bca4b5908
SSDEEP 6144:x7gKNkhSR/BmxuyXnZhB+h8WHUBV+UdvrEFp7hKr:x7gKNkhm/BouyXnPB+h8WHUBjvrEH7M
TLSH
T15A54D31233F80BA9F4F36E3068349F25D9BABC399D39E76E1641218D1D39A019D61B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

74:51:49:47:eb:ff:63:57:4d:82:c0:46:50:52:d0:40:3c:ec:73:eb:a2:5c:17:69:0f:9e:43:c9:3a:48:c2:90

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 24, 2021

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

1

Major OS version

5

Entry point

46610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MicrosoftEdgeUpdate_unsigned.pdb

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

c4c2ba967c8c2953674b8384cb112c7e1076091b085a00acabfad95d29d96f93

PE Signature issue

kernel32

ole32

generic