01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921

General

Target
01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921
Size 131KB
Sample240417-plashsef67
SHA256 01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921
MD5 5aeab10b6852a370068c3bc7c6f38032
SHA1 90a2a2b59fe1f33008bfd75c6a9eb0f4a24305a0
SHA512 ab0048fec34ce015201fec29940e39bb30c0f665b535bc4847be84d0b1ad4bed9201cb4f8278dd2d811a41945bf9e25427a642fd757e2ba281ed80cffbe177c3
SSDEEP 3072:reYxRhTYtADq944cBeP+wC9EFMKwLoDUv+JbMbiKXrF/6N:reY5EtxfC9K5/NMk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/13c5b33339522f8f96d091708e7a8a64b0939daa6225732352fbe44cb2950e67.exe

File Explorer

01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921

.zip 131KB
13c5b33339522f8f96d091708e7a8a64b0939daa6225732352fbe44cb2950e67.exe

.exe 228KB

01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921

SHA256 01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921
MD5 5aeab10b6852a370068c3bc7c6f38032
SHA1 90a2a2b59fe1f33008bfd75c6a9eb0f4a24305a0
SHA512 ab0048fec34ce015201fec29940e39bb30c0f665b535bc4847be84d0b1ad4bed9201cb4f8278dd2d811a41945bf9e25427a642fd757e2ba281ed80cffbe177c3
SSDEEP 3072:reYxRhTYtADq944cBeP+wC9EFMKwLoDUv+JbMbiKXrF/6N:reY5EtxfC9K5/NMk
MD5 SHA1 SHA512 SSDEEP

Password

infected

13c5b33339522f8f96d091708e7a8a64b0939daa6225732352fbe44cb2950e67.exe

IMPHASH 082ebfb0db79d24696faa4085c3522a7
SHA256 13c5b33339522f8f96d091708e7a8a64b0939daa6225732352fbe44cb2950e67
MD5 07b0ce2dd0370392eedb0fc161c99dc7
SHA1 abf30fe414f07060b95e49034f05f3e4698d71d8
SHA512 cada09b81bb4d065d27b9293e5a87a04735b279f48fef22f0ea7e5c94af91798dd257d356585b3e71735e90288a364b38831071f5443a61fd29677fd4f1a907d
SSDEEP 3072:2OiQhEurPRvwXXgtxshEo8bXBkAPz/oEqlDq1vnPMqDPeyw+shR39BqWk:2Oi4EQSXWxsaxhrQ5lsXwj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5001

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

O:\MSDEV\Necro-SOFT\DEBUG.pdb

Name

.text

Size

28KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

32KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

84KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

48KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921

13c5b33339522f8f96d091708e7a8a64b0939daa6225732352fbe44cb2950e67.exe

gdi32

kernel32

powrprof

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

01cc1a6632e3291d762d375ed1ddfed923f26aa79d44164b6f05911b944e3921

13c5b33339522f8f96d091708e7a8a64b0939daa6225732352fbe44cb2950e67.exe

gdi32

kernel32

powrprof

user32

generic