dfebcf1265b3af2aff350cb364f2014c[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
dfebcf1265b3af2aff350cb364f2014c.exe
Size 11.3MB
Sample230222-lr74esaf76
SHA256 e127d36392f75ce68456e544ab8444bfd8c385e8b95426265002b8bb2d08e1cb
MD5 dfebcf1265b3af2aff350cb364f2014c
SHA1 1928a63a9f24a6e61b5b73a756ef8658f5591731
SHA512 231dbc34def3d106a2d20d60ae08a019978b1c6cd99974ca83d0d5a204b7344e9983af0239a362de97f7e02a4e5c10166fbf9d34d919c99be93c864bf56b94b9
SSDEEP 196608:gyl5R2F8q1ARAnM6FsHTd0IdpBRrOJa633koG806LoJuKYtfnAjyY+H6yKoKT9N:hlw+uMesaaUJt30oRMJuKuAjoa/h
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

dfebcf1265b3af2aff350cb364f2014c.exe

.exe 11.3MB

dfebcf1265b3af2aff350cb364f2014c.exe

IMPHASH 397fe34ab13aed1ba8b91da7d5a4441c
SHA256 e127d36392f75ce68456e544ab8444bfd8c385e8b95426265002b8bb2d08e1cb
MD5 dfebcf1265b3af2aff350cb364f2014c
SHA1 1928a63a9f24a6e61b5b73a756ef8658f5591731
SHA512 231dbc34def3d106a2d20d60ae08a019978b1c6cd99974ca83d0d5a204b7344e9983af0239a362de97f7e02a4e5c10166fbf9d34d919c99be93c864bf56b94b9
SSDEEP 196608:gyl5R2F8q1ARAnM6FsHTd0IdpBRrOJa633koG806LoJuKYtfnAjyY+H6yKoKT9N:hlw+uMesaaUJt30oRMJuKuAjoa/h
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

16255101

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

947KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

987i6540

Size

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

987i6541

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

987i6542

Size

11.2MB

Virtual Size

11.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

96KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

dfebcf1265b3af2aff350cb364f2014c.exe

kernel32

user32