70acb25e7523cbca76dc8088b402057d9c5edc3cb81c58a749b2f0d22b813598

Sharing

Copy URL Twitter E-mail

General

Target
70acb25e7523cbca76dc8088b402057d9c5edc3cb81c58a749b2f0d22b813598
Size 12.6MB
Sample240603-prptmaee8w
SHA256 70acb25e7523cbca76dc8088b402057d9c5edc3cb81c58a749b2f0d22b813598
MD5 ced2d9afb277ed004a6989f9dd5cf4b2
SHA1 640a7563c17de144cdb232da3641b69ad7ca108a
SHA512 c3f4e5f12f4b3752b332ab9524603c588494086af5464467f1c67f2273460ada2de4b04e543a5f8e3f82dfa6550b78bd9d3d61e735903ef34280304ccc237301
SSDEEP 49152:QtVplF5UZz/h5kVXQ6iIBiRvYhPD6CS6VvTGUpN8LdMN5:QtPb5qvkVX1iIwAhL6CS4aUk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70acb25e7523cbca76dc8088b402057d9c5edc3cb81c58a749b2f0d22b813598

File Explorer

70acb25e7523cbca76dc8088b402057d9c5edc3cb81c58a749b2f0d22b813598

.exe 12.6MB

70acb25e7523cbca76dc8088b402057d9c5edc3cb81c58a749b2f0d22b813598

SHA256 70acb25e7523cbca76dc8088b402057d9c5edc3cb81c58a749b2f0d22b813598
MD5 ced2d9afb277ed004a6989f9dd5cf4b2
SHA1 640a7563c17de144cdb232da3641b69ad7ca108a
SHA512 c3f4e5f12f4b3752b332ab9524603c588494086af5464467f1c67f2273460ada2de4b04e543a5f8e3f82dfa6550b78bd9d3d61e735903ef34280304ccc237301
SSDEEP 49152:QtVplF5UZz/h5kVXQ6iIBiRvYhPD6CS6VvTGUpN8LdMN5:QtPb5qvkVX1iIwAhL6CS4aUk
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1441111

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10.3MB

Virtual Size

10.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

21KB

Virtual Size

395KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

137KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.enigma1

Size

124KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.enigma2

Size

300KB

Virtual Size

300KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

70acb25e7523cbca76dc8088b402057d9c5edc3cb81c58a749b2f0d22b813598

generic