General

  • Target
    67f64deda3027f9fcdd4b5d9568d37ca
  • Size 1.5MB
  • Sample240119-ssf5nahbd9
  • SHA256 4100053b3cc8236c5fefd63c3773e81c5daea40638bcafc588b2127d9a191670
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 67f64deda3027f9fcdd4b5d9568d37ca
    .exe 1.5MB
  • .data
    1KB
  • .reloc
    3KB
  • .rsrc/1033/AVI/3001
    11KB
  • .rsrc/1033/DIALOG/2001
    754B
  • .rsrc/1033/DIALOG/2002
    432B
  • .rsrc/1033/DIALOG/2003
    358B
  • .rsrc/1033/DIALOG/2004
    448B
  • .rsrc/1033/DIALOG/2005
    304B
  • .rsrc/1033/DIALOG/2006
    288B
  • .rsrc/1033/GROUP_ICON/3000
    132B
  • .rsrc/1033/ICON/1
    .png 3KB
  • .rsrc/1033/ICON/2.ico
    66KB
  • .rsrc/1033/ICON/3.ico
    37KB
  • .rsrc/1033/ICON/4.ico
    21KB
  • .rsrc/1033/ICON/5.ico
    16KB
  • .rsrc/1033/ICON/6.ico
    9KB
  • .rsrc/1033/ICON/7.ico
    4KB
  • .rsrc/1033/ICON/8.ico
    2KB
  • .rsrc/1033/ICON/9.ico
    1KB
  • .rsrc/1033/MANIFEST/1
    .xml 1KB
  • .rsrc/1033/RCDATA/ADMQCMD
    7B
  • .rsrc/1033/RCDATA/CABINET
    .cab 1.3MB
  • Ecco.xlm
    499B
  • Par.xlm
    634KB
  • Sommesso.xlm
    .ps1 697KB
  • Vento.xlm
    872KB
  • .rsrc/1033/RCDATA/EXTRACTOPT
    4B
  • .rsrc/1033/RCDATA/FILESIZES
    36B
  • .rsrc/1033/RCDATA/FINISHMSG
    7B
  • .rsrc/1033/RCDATA/LICENSE
    7B
  • .rsrc/1033/RCDATA/PACKINSTSPACE
    4B
  • .rsrc/1033/RCDATA/POSTRUNPROGRAM
    22B
  • .rsrc/1033/RCDATA/REBOOT
    4B
  • .rsrc/1033/RCDATA/RUNPROGRAM
    16B
  • .rsrc/1033/RCDATA/SHOWWINDOW
    4B
  • .rsrc/1033/RCDATA/TITLE
    9B
  • .rsrc/1033/RCDATA/UPROMPT
    7B
  • .rsrc/1033/RCDATA/USRQCMD
    7B
  • .rsrc/1033/string.txt
    6KB
  • .rsrc/1033/version.txt
    1KB
  • .rsrc/1049/string.txt
    6KB
  • .text
    43KB

67f64deda3027f9fcdd4b5d9568d37ca

  • IMPHASH 2339ac77bf9371500ebbf86df3a10d43
  • SHA256 4100053b3cc8236c5fefd63c3773e81c5daea40638bcafc588b2127d9a191670
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
6
Entry point
27389
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths