550947ef18266a71c4bff1fb9a0b182c

Sharing

Copy URL Twitter E-mail

General

Target
550947ef18266a71c4bff1fb9a0b182c
Size 78KB
Sample231226-fbk13ageb9
SHA256 9b5cf3ea956cd9ea39a38f54a4f39916503122540a05ae7dc474a029aa3a290a
MD5 550947ef18266a71c4bff1fb9a0b182c
SHA1 69283ccc76a0dd03b6927ce058835bad1b9a967f
SHA512 5097d3fd290cd2f6865be08aa43221f2d7d0bda3cd2cf5d90351f81437a8f461fedd37ee21645dbfb2c526c8380fb784ea5d18a4060f545f8f320af01ae82c96
SSDEEP 1536:fQwfwimgTY23tG90wIsWfHlWKSd+QSqWU5FMQCoFuJlmSKV/I0JZXdLxoSg5Kgm+:fnoimg13tG90HdQ3Sqt2oFUU5/IOBdLe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RUSSKAYA-GOLAYA.exe

File Explorer

550947ef18266a71c4bff1fb9a0b182c

.zip 78KB
RUSSKAYA-GOLAYA.exe

.exe 180KB

550947ef18266a71c4bff1fb9a0b182c

SHA256 9b5cf3ea956cd9ea39a38f54a4f39916503122540a05ae7dc474a029aa3a290a
MD5 550947ef18266a71c4bff1fb9a0b182c
SHA1 69283ccc76a0dd03b6927ce058835bad1b9a967f
SHA512 5097d3fd290cd2f6865be08aa43221f2d7d0bda3cd2cf5d90351f81437a8f461fedd37ee21645dbfb2c526c8380fb784ea5d18a4060f545f8f320af01ae82c96
SSDEEP 1536:fQwfwimgTY23tG90wIsWfHlWKSd+QSqWU5FMQCoFuJlmSKV/I0JZXdLxoSg5Kgm+:fnoimg13tG90HdQ3Sqt2oFUU5/IOBdLe
MD5 SHA1 SHA512 SSDEEP

RUSSKAYA-GOLAYA.exe

SHA256 c3199ed5f9a3d4e51e4ff8287875a04a91602e348dcef11c403e90d96eea59f7
MD5 55e47874ef9912a4309c4c90af7b67f8
SHA1 bda07533ed744d3c78ee34ab416d883504212e3e
SHA512 d01550350e18c0507e8f45e1a970cfd6bfa910c2a334fe65ffc26f7347e9b967906a950bd6918fa2c19aebfdf087f2f82bf3a47e96af1ef903697d3672edad36
SSDEEP 3072:TBAp5XhKpN4eOyVTGfhEClj8jTk+0h6ejmo:+bXE9OiTGfhEClq9dejD
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

550947ef18266a71c4bff1fb9a0b182c

RUSSKAYA-GOLAYA.exe

generic