1d40a1f638d1facdc8d8cc1eb1674ea9

Sharing

Copy URL Twitter E-mail

General

Target
1d40a1f638d1facdc8d8cc1eb1674ea9
Size 50KB
Sample231225-aw2awsbgdm
SHA256 1e89f8291038bce0df42ac3450feb8e5109bf982a7045945d81c5c9165f3b9dd
MD5 1d40a1f638d1facdc8d8cc1eb1674ea9
SHA1 57ee670912329f8e620bd37d4b5da3323ce4d951
SHA512 7a76f8402762294d9c983eadd44b4eb2ff3d4baf02f39c6cbb1c3c207776dd24235b8b0a22968ccdbfbc9f16ea7ef71c4ebcc2f328e0c13d7ab84f03f742e593
SSDEEP 1536:hrXk50RZYBda8yKQkuKY3DkVB8Gh51f5zw:hrUyRZOyKIKmgVBrhxw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d40a1f638d1facdc8d8cc1eb1674ea9

File Explorer

1d40a1f638d1facdc8d8cc1eb1674ea9

.exe 50KB

1d40a1f638d1facdc8d8cc1eb1674ea9

IMPHASH 5467f19eff2df74b221430042d0582b6
SHA256 1e89f8291038bce0df42ac3450feb8e5109bf982a7045945d81c5c9165f3b9dd
MD5 1d40a1f638d1facdc8d8cc1eb1674ea9
SHA1 57ee670912329f8e620bd37d4b5da3323ce4d951
SHA512 7a76f8402762294d9c983eadd44b4eb2ff3d4baf02f39c6cbb1c3c207776dd24235b8b0a22968ccdbfbc9f16ea7ef71c4ebcc2f328e0c13d7ab84f03f742e593
SSDEEP 1536:hrXk50RZYBda8yKQkuKY3DkVB8Gh51f5zw:hrUyRZOyKIKmgVBrhxw
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13374

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.c1

Size

512B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c4

Size

512B

Virtual Size

465B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.c3

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.c5

Size

3KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ieixobl

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

1d40a1f638d1facdc8d8cc1eb1674ea9

shlwapi

kernel32

generic