19562e82db5f589976891bf51bf2bcb0

Sharing

Copy URL Twitter E-mail

General

Target
19562e82db5f589976891bf51bf2bcb0
Size 99KB
Sample231224-3d2sxscdan
SHA256 348f4e03583dd07adc7131e517308991c91bf33e9d3c45fe7d0265992b5bb472
MD5 19562e82db5f589976891bf51bf2bcb0
SHA1 a395fabb82cfb05da50f85abffb95e737c62434d
SHA512 c942a792dd46a2a1f960dcfb3f34c5eb59558d8028246e73cad260689bea228716efed647c9200d3739f07264e00fa2fcb30cc6d0306f477ea7d240d7cb754bc
SSDEEP 3072:l47excGxFLPkH9SnbZDah6b/EoN26S1fPeUQn8XR:l+eGYtPk0Z+h6b/LN26SxNU8XR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RUSSKAYA-GOLAYA.exe

File Explorer

19562e82db5f589976891bf51bf2bcb0

.zip 99KB
RUSSKAYA-GOLAYA.exe

.exe 149KB

19562e82db5f589976891bf51bf2bcb0

SHA256 348f4e03583dd07adc7131e517308991c91bf33e9d3c45fe7d0265992b5bb472
MD5 19562e82db5f589976891bf51bf2bcb0
SHA1 a395fabb82cfb05da50f85abffb95e737c62434d
SHA512 c942a792dd46a2a1f960dcfb3f34c5eb59558d8028246e73cad260689bea228716efed647c9200d3739f07264e00fa2fcb30cc6d0306f477ea7d240d7cb754bc
SSDEEP 3072:l47excGxFLPkH9SnbZDah6b/EoN26S1fPeUQn8XR:l+eGYtPk0Z+h6b/LN26SxNU8XR
MD5 SHA1 SHA512 SSDEEP

RUSSKAYA-GOLAYA.exe

SHA256 5c17093c491737e14f7078402c1910e4d949ca6d1d9cac8e5d6236bed5499c74
MD5 b0d2c051e7a0acf62183b667f947db97
SHA1 f069cb07de7f8427c2e88960e9b3822ec937b43e
SHA512 cfe6c260ed97d28f78f0b9ca5a6ba71ebb510f8609b9de1c04dd888e0fb265e0075d51803a9e205ef3810c2b7c61cf3d6efe671816b5dca057d033181346a75e
SSDEEP 3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiT4fx1yQn8X3:AbXE9OiTGfhEClq9iJ1yU8X3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

19562e82db5f589976891bf51bf2bcb0

RUSSKAYA-GOLAYA.exe

generic