3b55dc74b5a32caf0ffa1d8a102476d2

Sharing

Copy URL Twitter E-mail

General

Target
3b55dc74b5a32caf0ffa1d8a102476d2
Size 80KB
Sample231225-y99feshfbj
SHA256 744002d187dfb8c074920cc759b8aa65b99d9fc6aed271f827193e6e96cbe3f5
MD5 3b55dc74b5a32caf0ffa1d8a102476d2
SHA1 9ad6e2b60276d6d2cdeabe95ced7ac19d4d96cbc
SHA512 31a92eccb330e6b8d6de1ea65873a6165042b62812ad730c74a080537f13d2999d000be76389aaea545a270ea9691d558b252e774feb9987d79cc3e0454f542e
SSDEEP 1536:DkDro9Ash6VQZtlRtQlQ7pYw/zQymCJVVBZ9SZztEJe+9N+KZupBaY153u9Kwrp3:QDvsEU8lGpD/NZBZ9a3uN+zvx3YKW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-SEXY.exe

File Explorer

3b55dc74b5a32caf0ffa1d8a102476d2

.zip 80KB
GOLAYA-SEXY.exe

.exe 180KB

3b55dc74b5a32caf0ffa1d8a102476d2

SHA256 744002d187dfb8c074920cc759b8aa65b99d9fc6aed271f827193e6e96cbe3f5
MD5 3b55dc74b5a32caf0ffa1d8a102476d2
SHA1 9ad6e2b60276d6d2cdeabe95ced7ac19d4d96cbc
SHA512 31a92eccb330e6b8d6de1ea65873a6165042b62812ad730c74a080537f13d2999d000be76389aaea545a270ea9691d558b252e774feb9987d79cc3e0454f542e
SSDEEP 1536:DkDro9Ash6VQZtlRtQlQ7pYw/zQymCJVVBZ9SZztEJe+9N+KZupBaY153u9Kwrp3:QDvsEU8lGpD/NZBZ9a3uN+zvx3YKW
MD5 SHA1 SHA512 SSDEEP

GOLAYA-SEXY.exe

SHA256 39f420b486362ecca29eb4c068e665c2bd126f6f526049c26491539d1135582f
MD5 69a9db2003415946eb1185c9ab4d6ca4
SHA1 a4e84147d24c578a9a0ac9b4b08815d45cf035c1
SHA512 2ddd0734c50bf4ecb5be23127e1354d641d78c49d4f20c703ef36621db6af9c1dcc2447f3d04527ea9fe56cdaf425c651b932139faed62537ceee3b662c14ad8
SSDEEP 3072:oBAp5XhKpN4eOyVTGfhEClj8jTk+0hN7+mYnhIAhyYwYs:fbXE9OiTGfhEClq9s+mYnhIAhyT
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

3b55dc74b5a32caf0ffa1d8a102476d2

GOLAYA-SEXY.exe

generic