4a6997ddb679ba971b941cad2c32c409

Sharing

Copy URL Twitter E-mail

General

Target
4a6997ddb679ba971b941cad2c32c409
Size 88KB
Sample240108-evfp1sahcr
SHA256 c4054d2220af93231fbe5137e7be605277ccf75f9acb5c01fe332bceb74393ee
MD5 4a6997ddb679ba971b941cad2c32c409
SHA1 71723bf22dec9e029f26f69832ea6a8af31f4b45
SHA512 18cd3d010b6dce549e421fb548d132260b8ddbe60ad72e2382fa309796a4db42075302fc3f6ff0733be28fe0f70a22aa6f778f0644ef2ce4ac5849f35417c25c
SSDEEP 1536:3QwHfvMS0xcGxFyhQkrnb1Mq9WbB7fS+lE+dFNpRD+xIh7N0YNPrEiJolmm:3nHXMpxcGxFyhQ0bOqYxf7v3YKj3JoUm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-SEXY.exe

File Explorer

4a6997ddb679ba971b941cad2c32c409

.zip 88KB
GOLAYA-SEXY.exe

.exe 180KB

4a6997ddb679ba971b941cad2c32c409

SHA256 c4054d2220af93231fbe5137e7be605277ccf75f9acb5c01fe332bceb74393ee
MD5 4a6997ddb679ba971b941cad2c32c409
SHA1 71723bf22dec9e029f26f69832ea6a8af31f4b45
SHA512 18cd3d010b6dce549e421fb548d132260b8ddbe60ad72e2382fa309796a4db42075302fc3f6ff0733be28fe0f70a22aa6f778f0644ef2ce4ac5849f35417c25c
SSDEEP 1536:3QwHfvMS0xcGxFyhQkrnb1Mq9WbB7fS+lE+dFNpRD+xIh7N0YNPrEiJolmm:3nHXMpxcGxFyhQ0bOqYxf7v3YKj3JoUm
MD5 SHA1 SHA512 SSDEEP

GOLAYA-SEXY.exe

SHA256 6e239da433517b0856f91d212baebdf1963d80ba6c546a440da19121580818ca
MD5 f28c1e58c5766a111297588e8ab02361
SHA1 3d55a55fd6d193d32742fe89bf6041f9182ee447
SHA512 e09add020c39a8fa5b14f094679daa9d0645f4c0fe39a33194e9c4c3cdadee05986904084387437203387d97be4381c9714e47451aff01e6a7e6fcb5ec9797fd
SSDEEP 3072:6BAp5XhKpN4eOyVTGfhEClj8jTk+0hL/eSZZvLf6CNsPrXJ8WYQKaLba:JbXE9OiTGfhEClq90GSZZvLCCNsPrXJa
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4a6997ddb679ba971b941cad2c32c409

GOLAYA-SEXY.exe

generic