add_gpedit_msc[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
add_gpedit_msc.zip
Size 854KB
Sample240613-cahb1atelm
SHA256 af2fe61ca828c9d4b2f805516b57245aec864d5f399ed196444fb0fd045fb535
MD5 f337db6bd49e6b524b9314901b680d7a
SHA1 a35cc1c1e1855228b4ef11810be09a41f8e9d3a9
SHA512 e0d300794ca68f21ffbcc7b63a5aeb2e3ea596c451816b9f4cf63d3a4032d070cb52d00497afbe3598298eeceb88ec6c2bea1503220000e118625c404ef5b450
SSDEEP 24576:b6Bo792PzrME9D+VSzuOvA5v9cGk3KEY7rUvDf5/g:2BVbvt1vA5mGkvEIv5g
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/setup.exe

File Explorer

add_gpedit_msc.zip

.zip 854KB
setup.exe

.exe 880KB

add_gpedit_msc.zip

SHA256 af2fe61ca828c9d4b2f805516b57245aec864d5f399ed196444fb0fd045fb535
MD5 f337db6bd49e6b524b9314901b680d7a
SHA1 a35cc1c1e1855228b4ef11810be09a41f8e9d3a9
SHA512 e0d300794ca68f21ffbcc7b63a5aeb2e3ea596c451816b9f4cf63d3a4032d070cb52d00497afbe3598298eeceb88ec6c2bea1503220000e118625c404ef5b450
SSDEEP 24576:b6Bo792PzrME9D+VSzuOvA5v9cGk3KEY7rUvDf5/g:2BVbvt1vA5mGkvEIv5g
MD5 SHA1 SHA512 SSDEEP

setup.exe

SHA256 5c402fd8244e177338a2a8f0c7b8df055d5a06ebd7a5225edb3d3cdaf1d1c749
MD5 43d3ff349ad31e0ad76201755445cb1e
SHA1 7b3b15c369203cf892fb0b023201c5627e23973a
SHA512 771f98fcade1687c3714e6631d800ba8f186cc6de46ee36e52e78d04727f0bc7f9352d5f32788a315bd1dc5b84fabd585ea50c1bf32bbd7fc168b87a8a97d101
SSDEEP 24576:L20Bj512nz5ME9t+Fez6ovAJv9aGk3KgY7rmvZf5/I:L2Xzh/fvAJ4GkJECvTI
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39716

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

add_gpedit_msc.zip

setup.exe

generic