86fef9a0b3ebbc4c1ec52112056e6e21e79b6447bf28a8b1e13d2783fd120f9f

General

Target
86fef9a0b3ebbc4c1ec52112056e6e21e79b6447bf28a8b1e13d2783fd120f9f
Size 348KB
Sample240329-2xrxdsbf7y
SHA256 86fef9a0b3ebbc4c1ec52112056e6e21e79b6447bf28a8b1e13d2783fd120f9f
MD5 aef998d9264fb3854bc677b69ea2c036
SHA1 3eb134a014c0bcc9edbfda27103b4dff13dd34ec
SHA512 80a9d44c5989c53b43f5c35a033f6e4a4795c5a40336ffdc4e7759bb0b775f834e6bcd8186d6d13dcdf78c501e9fe0dd23ff1ecd84651c33a79d07b9419b3494
SSDEEP 3072:cfRBoFWlyQNZhFGVl4LSz1RNeyOb2EqMGzs4VlS0q0Ebs:cpdHNr4Vl4LSz1RZOyEqMj4VlS0q0ks
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86fef9a0b3ebbc4c1ec52112056e6e21e79b6447bf28a8b1e13d2783fd120f9f

File Explorer

86fef9a0b3ebbc4c1ec52112056e6e21e79b6447bf28a8b1e13d2783fd120f9f

.dll 348KB

86fef9a0b3ebbc4c1ec52112056e6e21e79b6447bf28a8b1e13d2783fd120f9f

IMPHASH b2e50cc60a521158b3ea2d099cbea42b
SHA256 86fef9a0b3ebbc4c1ec52112056e6e21e79b6447bf28a8b1e13d2783fd120f9f
MD5 aef998d9264fb3854bc677b69ea2c036
SHA1 3eb134a014c0bcc9edbfda27103b4dff13dd34ec
SHA512 80a9d44c5989c53b43f5c35a033f6e4a4795c5a40336ffdc4e7759bb0b775f834e6bcd8186d6d13dcdf78c501e9fe0dd23ff1ecd84651c33a79d07b9419b3494
SSDEEP 3072:cfRBoFWlyQNZhFGVl4LSz1RNeyOb2EqMGzs4VlS0q0Ebs:cpdHNr4Vl4LSz1RZOyEqMj4VlS0q0ks
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

192512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

160KB

Virtual Size

157KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

160KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

86fef9a0b3ebbc4c1ec52112056e6e21e79b6447bf28a8b1e13d2783fd120f9f

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

86fef9a0b3ebbc4c1ec52112056e6e21e79b6447bf28a8b1e13d2783fd120f9f

kernel32

generic