8b6c9ed5e01ad1bd7c916ae65ab8257b

General

Target
8b6c9ed5e01ad1bd7c916ae65ab8257b
Size 550KB
Sample240203-fb4heabheq
SHA256 353bdfc3389591c96afb8e4fb24104a72d1c2548f364f682e2a42f21bf71e2a1
MD5 8b6c9ed5e01ad1bd7c916ae65ab8257b
SHA1 861b59390629f5db4744c5b4a68b28637540261a
SHA512 2a17df4829928011237c3fbca87fc425dcc1361df8b93bf4089752b361bf07f5ee28c6060f0a01e2a13bc50e2719d35422aca7eb9d93823dfd5aae069ef6d39e
SSDEEP 6144:iXg4N/1idqbBNELG+a9fOk8+p/nURYvRmne/H3ADTLqX4k64dS7Hto2UXOpEZyQV:UfDi4BNELGFb8Ql4HmXyNo25E0QkhTi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b6c9ed5e01ad1bd7c916ae65ab8257b

File Explorer

8b6c9ed5e01ad1bd7c916ae65ab8257b

.dll 550KB

8b6c9ed5e01ad1bd7c916ae65ab8257b

SHA256 353bdfc3389591c96afb8e4fb24104a72d1c2548f364f682e2a42f21bf71e2a1
MD5 8b6c9ed5e01ad1bd7c916ae65ab8257b
SHA1 861b59390629f5db4744c5b4a68b28637540261a
SHA512 2a17df4829928011237c3fbca87fc425dcc1361df8b93bf4089752b361bf07f5ee28c6060f0a01e2a13bc50e2719d35422aca7eb9d93823dfd5aae069ef6d39e
SSDEEP 6144:iXg4N/1idqbBNELG+a9fOk8+p/nURYvRmne/H3ADTLqX4k64dS7Hto2UXOpEZyQV:UfDi4BNELGFb8Ql4HmXyNo25E0QkhTi
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

468720

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

454KB

Virtual Size

453KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

195B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

8b6c9ed5e01ad1bd7c916ae65ab8257b

generic