7d26e792869909c5b1db7f9fa6ec4109

Sharing

Copy URL Twitter E-mail

General

Target
7d26e792869909c5b1db7f9fa6ec4109
Size 80KB
Sample240128-pvr36aaga8
SHA256 2573f431f36673bcbd1869f1efae587aac993404fee301c2fe43c122165de531
MD5 7d26e792869909c5b1db7f9fa6ec4109
SHA1 37ae70b6e6dbd8ef028e383cbaccbc1b861bf47f
SHA512 834f6acaa780b68c7558bdea57a00a9e4f03457f30bea1297f8d2b3801044009bcd05a52622f89ba1425628cb84c02316d6a057fc5ffa0593ce8061ba54de82c
SSDEEP 1536:WQWQFGFI/PvgCRN59/iQyENtylyVRbXWEwaZ1I7HiSw8nsHaj:Nrz/BRgQTNtygXmOM7c8rj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-SEXY.exe

File Explorer

7d26e792869909c5b1db7f9fa6ec4109

.zip 80KB
GOLAYA-SEXY.exe

.exe 180KB

7d26e792869909c5b1db7f9fa6ec4109

SHA256 2573f431f36673bcbd1869f1efae587aac993404fee301c2fe43c122165de531
MD5 7d26e792869909c5b1db7f9fa6ec4109
SHA1 37ae70b6e6dbd8ef028e383cbaccbc1b861bf47f
SHA512 834f6acaa780b68c7558bdea57a00a9e4f03457f30bea1297f8d2b3801044009bcd05a52622f89ba1425628cb84c02316d6a057fc5ffa0593ce8061ba54de82c
SSDEEP 1536:WQWQFGFI/PvgCRN59/iQyENtylyVRbXWEwaZ1I7HiSw8nsHaj:Nrz/BRgQTNtygXmOM7c8rj
MD5 SHA1 SHA512 SSDEEP

GOLAYA-SEXY.exe

SHA256 ea286591122804d91a79ca2bc2a20d6272bd28359560ca6996a1d88aabdafca3
MD5 8c608ea2bc292f5c709636b7863ead50
SHA1 a6db5d61bef6be02a0108d2639585609cb25cbea
SHA512 d12607b0a2bd2ee182a9940b3f52263981122d73a9a19c1c55bdd56e39c4be82d56f1befb297d2426af67acb5d5ac153c8a109b575339ed71c5b77c524e3eb49
SSDEEP 3072:gBAp5XhKpN4eOyVTGfhEClj8jTk+0hf2oscVS8Br9cOO0JkW06C:XbXE9OiTGfhEClq9+2oscVS8Br9cOO02
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7d26e792869909c5b1db7f9fa6ec4109

GOLAYA-SEXY.exe

generic