15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7

General

Target
15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7
Size 894KB
Sample231016-c4mhtadd45
SHA256 15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7
MD5 a4e4f8966796845079ca6b853fd1899d
SHA1 25906943d58610a2208c9312c555dee7eb16952e
SHA512 22df60f5d457cca829aa86f708d6df492aa8acf794dbaed5bfac06b3f6fcbd7a331139c92465a9e5ec57232b76102b26ba593e527266709fd225ca15a3c3045a
SSDEEP 12288:1hPALJCb+JI7GB5ShQUO3wY6Wpg8qvtN2FCOWPZzMe0n28qX2Y5aIv/86PaeAkYT:1hum+JI/jO3z6WStlFq4Gd66PybS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7

File Explorer

15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7

.dll 894KB

15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7

IMPHASH 8a340298085d2f956932843448afd9be
SHA256 15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7
MD5 a4e4f8966796845079ca6b853fd1899d
SHA1 25906943d58610a2208c9312c555dee7eb16952e
SHA512 22df60f5d457cca829aa86f708d6df492aa8acf794dbaed5bfac06b3f6fcbd7a331139c92465a9e5ec57232b76102b26ba593e527266709fd225ca15a3c3045a
SSDEEP 12288:1hPALJCb+JI7GB5ShQUO3wY6Wpg8qvtN2FCOWPZzMe0n28qX2Y5aIv/86PaeAkYT:1hum+JI/jO3z6WStlFq4Gd66PybS
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:6 windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

34368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

405KB

Virtual Size

404KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

445KB

Virtual Size

448KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

15b7cb2818530bbf0b55ea608d85df1bd97004a8556a358c11f84dbb93b893f7

kernel32