a231a97538f9e2f742071fae37345fee

Sharing

Copy URL Twitter E-mail

General

Target
a231a97538f9e2f742071fae37345fee
Size 128KB
Sample240224-syqahsgd6v
SHA256 801ab1617ef30de72c2cbda79d385a6e8f66940069b265b7ad0ccf1dfa15b69d
MD5 a231a97538f9e2f742071fae37345fee
SHA1 653d5749be69e8371e9abdc92f5082313a2ef291
SHA512 5af8d48513cefb5290d43c55f70bb2f07bde7ae7083265e9e027053d853092793986ec1bdbb185650bfb142c5c3f9767e27346244be7dc05b7e9180e71175aff
SSDEEP 3072:VpmgI3tG90HdQ3SqtHwamSx3F7IlyEyB0DPu+JIrVQT:vaD9Q3TtHwamly8PuCIA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-SEXY.exe

File Explorer

a231a97538f9e2f742071fae37345fee

.zip 128KB
GOLAYA-SEXY.exe

.exe 240KB

a231a97538f9e2f742071fae37345fee

SHA256 801ab1617ef30de72c2cbda79d385a6e8f66940069b265b7ad0ccf1dfa15b69d
MD5 a231a97538f9e2f742071fae37345fee
SHA1 653d5749be69e8371e9abdc92f5082313a2ef291
SHA512 5af8d48513cefb5290d43c55f70bb2f07bde7ae7083265e9e027053d853092793986ec1bdbb185650bfb142c5c3f9767e27346244be7dc05b7e9180e71175aff
SSDEEP 3072:VpmgI3tG90HdQ3SqtHwamSx3F7IlyEyB0DPu+JIrVQT:vaD9Q3TtHwamly8PuCIA
MD5 SHA1 SHA512 SSDEEP

GOLAYA-SEXY.exe

SHA256 fe9d78c0c394e248da57fc5693fe5cb0a759489c93ae300adef582f1069413c6
MD5 934d29283079d878fae23838ff5d156b
SHA1 773c0ba664625a4030af3b8ea321de5ee0e029c6
SHA512 d410f0196092ad17a00496a587cd135e610efd6af47091731be9040d9426e2d24641e5989dc753d4e9d7ba3f126f8f2ce467f006c303a659cfb8495c8c119fc2
SSDEEP 3072:4BAp5XhKpN4eOyVTGfhEClj8jTk+0hnbGsthRX1Tr+Cgw5CKHe:vbXE9OiTGfhEClq9uLhjyJJUe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

97636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

70KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a231a97538f9e2f742071fae37345fee

GOLAYA-SEXY.exe

generic