13496c35c48db57c7b59f97247696ea7beddf63f86febb2d5c6283b11566cf08

Sharing

Copy URL Twitter E-mail

General

Target
13496c35c48db57c7b59f97247696ea7beddf63f86febb2d5c6283b11566cf08
Size 2.9MB
Sample240613-x888laydma
SHA256 13496c35c48db57c7b59f97247696ea7beddf63f86febb2d5c6283b11566cf08
MD5 0ebd8f545ecabbcc36b87046d40d90c5
SHA1 81dc362dac4d6cd8102a02adb751901a395d0583
SHA512 b86f64432ed8b251c513146f238abf1325880c5934512198eb676e16962cc1e927f32ac1af209b5b779d5fe1eb0858486904d5ea405db8a518979f50e2c4cd10
SSDEEP 49152:+dNjW0j7z/fIBYxREjX+K30qTHMPEAB99Ti9QqV9xUxLxRi4:+jjg6aXXKZGrV70FRi4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13496c35c48db57c7b59f97247696ea7beddf63f86febb2d5c6283b11566cf08

File Explorer

13496c35c48db57c7b59f97247696ea7beddf63f86febb2d5c6283b11566cf08

.exe 2.9MB

13496c35c48db57c7b59f97247696ea7beddf63f86febb2d5c6283b11566cf08

IMPHASH f433e7fcc51e68080022754836705744
SHA256 13496c35c48db57c7b59f97247696ea7beddf63f86febb2d5c6283b11566cf08
MD5 0ebd8f545ecabbcc36b87046d40d90c5
SHA1 81dc362dac4d6cd8102a02adb751901a395d0583
SHA512 b86f64432ed8b251c513146f238abf1325880c5934512198eb676e16962cc1e927f32ac1af209b5b779d5fe1eb0858486904d5ea405db8a518979f50e2c4cd10
SSDEEP 49152:+dNjW0j7z/fIBYxREjX+K30qTHMPEAB99Ti9QqV9xUxLxRi4:+jjg6aXXKZGrV70FRi4
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17172442

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

288KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

f5t70w.s

Size

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

476KB

Virtual Size

7.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mo.x0yer

Size

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

6fzcyz3h

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

yfqgz0pz

Size

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

adenzqfq

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=1, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=6, id=12, version=7291,

count=3, id=11, version=8798,

count=16, id=19, version=8022,

count=20, id=19, version=8034,

count=3, id=11, version=8047,

count=3, id=14, version=7299,

count=11, id=10, version=8047,

count=4, id=4, version=8047,

count=2, id=4, version=9782,

count=347, productName=Unmarked objects (old),

count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=10, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=1420, id=1, productName=Unmarked objects,

count=5, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,

count=339, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,

13496c35c48db57c7b59f97247696ea7beddf63f86febb2d5c6283b11566cf08

kernel32

user32

generic