ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06

Sharing

Copy URL Twitter E-mail

General

Target
ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06
Size 7.9MB
Sample240526-edkyeaee87
SHA256 ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06
MD5 5d500d4975d8538326991286a8c23aea
SHA1 1a846f6ecde64611c01129200ff951b694e1f0a6
SHA512 61bfdf8157ad0cd0684cfeb7c1d54574baf5438d2e50d981a85de2fa118041211f98a3f33fa661b46fc1272ae7115996f2709a78b374833e5debc5776bfa0358
SSDEEP 196608:0hlD1TUKJTqH9FKJ6zthLRvV1r03pKXg6El:GlNTfeprgpsgrl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06

File Explorer

ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06

.exe 7.9MB

ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06

IMPHASH 841e1e6cf9e13751665ed621fd62b5b3
SHA256 ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06
MD5 5d500d4975d8538326991286a8c23aea
SHA1 1a846f6ecde64611c01129200ff951b694e1f0a6
SHA512 61bfdf8157ad0cd0684cfeb7c1d54574baf5438d2e50d981a85de2fa118041211f98a3f33fa661b46fc1272ae7115996f2709a78b374833e5debc5776bfa0358
SSDEEP 196608:0hlD1TUKJTqH9FKJ6zthLRvV1r03pKXg6El:GlNTfeprgpsgrl
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9759997

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

.text

Size

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

66KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.???0

Size

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.???1

Size

6.1MB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

245KB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

ab1b7b9b0559811dfbf0c6a10cbc43c4f6ebdf479ef9492cf736a027a8d80c06

oleaut32

advapi32

user32

kernel32

gdi32

version

mpr

ole32

comctl32

shell32

comdlg32

wsock32

gdiplus

wtsapi32

generic