6ea06a3426e6203a79bc93587cf6eba8

Sharing

Copy URL Twitter E-mail

General

Target
6ea06a3426e6203a79bc93587cf6eba8
Size 99KB
Sample231226-ppdctacfd2
SHA256 466ad9710bd7db93434b7238f5b2d05881fba2a7565c8882defcf326776d2132
MD5 6ea06a3426e6203a79bc93587cf6eba8
SHA1 3ae99790bf02597760eb803a51fe995cdefe7644
SHA512 b37743d6ee7d3d71f7047b30a3dd1bfd09aeaa810e4c96a49f4dcfee495bf7605f27b672fedfebc4f8828ab93ac4a824669d722bab19db94cbd1f226ca020f9a
SSDEEP 3072:G47excGxFLPkH9SnbZDa6mRvNe3L9XPFgoDgTpLnNQ:G+eGYtPk0Z+jsL1PFgoDgJnu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-DEVOCHKA.exe

File Explorer

6ea06a3426e6203a79bc93587cf6eba8

.zip 99KB
GOLAYA-DEVOCHKA.exe

.exe 149KB

6ea06a3426e6203a79bc93587cf6eba8

SHA256 466ad9710bd7db93434b7238f5b2d05881fba2a7565c8882defcf326776d2132
MD5 6ea06a3426e6203a79bc93587cf6eba8
SHA1 3ae99790bf02597760eb803a51fe995cdefe7644
SHA512 b37743d6ee7d3d71f7047b30a3dd1bfd09aeaa810e4c96a49f4dcfee495bf7605f27b672fedfebc4f8828ab93ac4a824669d722bab19db94cbd1f226ca020f9a
SSDEEP 3072:G47excGxFLPkH9SnbZDa6mRvNe3L9XPFgoDgTpLnNQ:G+eGYtPk0Z+jsL1PFgoDgJnu
MD5 SHA1 SHA512 SSDEEP

GOLAYA-DEVOCHKA.exe

SHA256 211901e1229d7b816754146ff8d7167e8a92211afe63dc44eb8056d0b054a12a
MD5 ccca394b1369e766c53346550b481c57
SHA1 47dccd3fc9b7bf7c98f75fa11725089d5a977b4c
SHA512 98625c9dd7cc8b57609ce20f6f295dc8704a75b49cde806ddbbb040cf3832028425bed0cd0da0c501508fabd2cdc59cd1717fa948362281848ed4ba798990712
SSDEEP 3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hisUwxgTpLnNq:AbXE9OiTGfhEClq9TwxgJn0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

6ea06a3426e6203a79bc93587cf6eba8

GOLAYA-DEVOCHKA.exe

generic