230323-gnlc2afg8y

General

Target
230323-gnlc2afg8y
Size 148KB
Sample240322-r8clqsfb31
SHA256 72d4375c5fe2533acb5e378ddbd3c55f87c61003a492caffdcb40db988c49503
MD5 6ed3e3327246cc457d22bb92bd3bba8b
SHA1 1329a6af26f16bb371782ff404d526eec1af9d22
SHA512 f6c5428adffc10294204e0b068510d91fced02bbe02158a21294ebd5baf249aff0264021cbf7b2b9b37533b1db4daa09113abaa84435f4aa7660849f9b9257f7
SSDEEP 3072:gqMedjZ064qkGda5bFxs0ZUfBpfF6Mq6qUbHlVexC6exvLsBB16UVsh8iSd:+A0rAda5bFxvYptdHl4xV+Efuh
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Signatures

Detects executables packed with ConfuserEx Mod 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ConfuserEx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
230323-gnlc2afg8y

File Explorer

230323-gnlc2afg8y

.exe 148KB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 72d4375c5fe2533acb5e378ddbd3c55f87c61003a492caffdcb40db988c49503
MD5 6ed3e3327246cc457d22bb92bd3bba8b
SHA1 1329a6af26f16bb371782ff404d526eec1af9d22
SHA512 f6c5428adffc10294204e0b068510d91fced02bbe02158a21294ebd5baf249aff0264021cbf7b2b9b37533b1db4daa09113abaa84435f4aa7660849f9b9257f7
SSDEEP 3072:gqMedjZ064qkGda5bFxs0ZUfBpfF6Mq6qUbHlVexC6exvLsBB16UVsh8iSd:+A0rAda5bFxvYptdHl4xV+Efuh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Detects executables packed with ConfuserEx Mod
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

157438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths