54b3ae8eec0c73f0ac6993f761a8b099[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
54b3ae8eec0c73f0ac6993f761a8b099.exe
Size 4.0MB
Sample220924-sdwa2abeb5
SHA256 22a2d7af185892d400b7b98c62dedaf8ff9bfdf65fcc7c6c20d4ca102452db6d
MD5 54b3ae8eec0c73f0ac6993f761a8b099
SHA1 a8ec0c7bcc845ee8bf9a017830d3d611d0e3287a
SHA512 909fd7d72e6d6aa18fef8b7dcf301716baa6f7fbef75646162d1994ab61c089eeb889412cb3d4b74fce3ad75235911570e18c94b4be65990017214388777890b
SSDEEP 49152:i6Mfs/3KxuSrb/TWvO90d7HjmAFd4A64nsfJkclgXKRQHfD/az1YLm0lhoM9iTdT:b3D68zlhZwTR0A
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

54b3ae8eec0c73f0ac6993f761a8b099.exe

.exe 4.0MB

54b3ae8eec0c73f0ac6993f761a8b099.exe

IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
SHA256 22a2d7af185892d400b7b98c62dedaf8ff9bfdf65fcc7c6c20d4ca102452db6d
MD5 54b3ae8eec0c73f0ac6993f761a8b099
SHA1 a8ec0c7bcc845ee8bf9a017830d3d611d0e3287a
SHA512 909fd7d72e6d6aa18fef8b7dcf301716baa6f7fbef75646162d1994ab61c089eeb889412cb3d4b74fce3ad75235911570e18c94b4be65990017214388777890b
SSDEEP 49152:i6Mfs/3KxuSrb/TWvO90d7HjmAFd4A64nsfJkclgXKRQHfD/az1YLm0lhoM9iTdT:b3D68zlhZwTR0A
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

403776

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

736KB

Virtual Size

736KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

112KB

Virtual Size

472KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

295B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

258KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

165KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/90

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

113KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

54b3ae8eec0c73f0ac6993f761a8b099.exe

kernel32