Overview

overview

10

Static

static

10

new.exe

windows10-2004_x64

Sharing

Copy URL Twitter E-mail

Errors

Reason
config extraction: CfgExtr crashed: runtime error: slice bounds out of range [:65457] with capacity 32736

General

  • Target
    new.exe
  • Size 419KB
  • Sample220511-ctyhbsdde3
  • SHA256 b7c6450fdba4fb0c1bf53b946474a99ad5e6006e0a9c4cddca494625c83116ed
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
sodinokibi

Malware Config

Signatures

  • Sodinokibi family
    sodinokibi
  • Sodinokibi/Revil sample 1 IoCs

File Explorer

  • new.exe
    .exe 419KB

new.exe

  • SHA256 b7c6450fdba4fb0c1bf53b946474a99ad5e6006e0a9c4cddca494625c83116ed
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Sodinokibi/Revil sample

PE Signature issue

Digest
a0:d9:9a:a1:0b:ce:ab:fb:18:22:7c:68:96:40:bf:9c:d8:49:1d:eb:79:95:4c:95:c3:89:dd:cb:01:d7:98:36
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Minor OS version
Major OS version
Entry point
12276
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NO_BIND IMAGE_DLLCHARACTERISTICS_WDM_DRIVER IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_SYSTEM
PDB paths