1ddb3559831a7e6afa652a849b2725367c06df3d7695f1bec1137bc6d698f31f

General

Target
1ddb3559831a7e6afa652a849b2725367c06df3d7695f1bec1137bc6d698f31f
Size 14.7MB
Sample240624-ef2nyawgqa
SHA256 1ddb3559831a7e6afa652a849b2725367c06df3d7695f1bec1137bc6d698f31f
MD5 29e5fed278dd6db6dce36160d0e01c2b
SHA1 844141b3f301f002d5d3b534ae80806a298de9f1
SHA512 88eb58a072e101d28a26bad06db73b86d2dc76b975ef25ef683fbc2226305738450c5a17c11220d7d895adc98273a0b689093cc815f1073290918c6086dbd809
SSDEEP 393216:6fBxbgVIoo6CrbfR/vAo13D7VquFeRq5solYLjfz5vnv:cBxPoE3fRwotDzei3Ajr5vv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ddb3559831a7e6afa652a849b2725367c06df3d7695f1bec1137bc6d698f31f

File Explorer

1ddb3559831a7e6afa652a849b2725367c06df3d7695f1bec1137bc6d698f31f

.exe 14.7MB

1ddb3559831a7e6afa652a849b2725367c06df3d7695f1bec1137bc6d698f31f

IMPHASH baa93d47220682c04d92f7797d9224ce
SHA256 1ddb3559831a7e6afa652a849b2725367c06df3d7695f1bec1137bc6d698f31f
MD5 29e5fed278dd6db6dce36160d0e01c2b
SHA1 844141b3f301f002d5d3b534ae80806a298de9f1
SHA512 88eb58a072e101d28a26bad06db73b86d2dc76b975ef25ef683fbc2226305738450c5a17c11220d7d895adc98273a0b689093cc815f1073290918c6086dbd809
SSDEEP 393216:6fBxbgVIoo6CrbfR/vAo13D7VquFeRq5solYLjfz5vnv:cBxPoE3fRwotDzei3Ajr5vv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12873728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

Size

1.6MB

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

dlcguywc

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ivkrqsut

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

1ddb3559831a7e6afa652a849b2725367c06df3d7695f1bec1137bc6d698f31f

kernel32

comctl32

generic

Sharing

General

Malware Config

Signatures

File Explorer

1ddb3559831a7e6afa652a849b2725367c06df3d7695f1bec1137bc6d698f31f

kernel32

comctl32

generic