114efcdd88ff496008184061a54fbb2e05d44a5fe496748530017ff38492f16e

Sharing

Copy URL Twitter E-mail

General

Target
114efcdd88ff496008184061a54fbb2e05d44a5fe496748530017ff38492f16e
Size 21KB
Sample240715-npsbasvajn
SHA256 114efcdd88ff496008184061a54fbb2e05d44a5fe496748530017ff38492f16e
MD5 8c8b1e06189a3b663cdde25814ba042a
SHA1 cb5c62efce109180a9c2a895d0fc033e5dac7bf1
SHA512 61a67395d15fd043d287e2d4dc56b8c9b5ba0b64bcb18bccaebfd49278012eb2ad384141a57e4f68d1dd833a4e27aa19e561dda1565d0941dc0e5b85d9cc6ca2
SSDEEP 384:BcR6YEdrdQugvbB7fRwh29rboXCiX83MTTA6OExnvexPAlU5V17iYVyZY9lTg3:Y6YEZdavlJw8lbWLNTTROEmuETw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/d60208f3894f4556caae5ed2297c0ef1593a4a66f5af8f3f2e44a8f2896bbf8e.exe

File Explorer

114efcdd88ff496008184061a54fbb2e05d44a5fe496748530017ff38492f16e

.zip 21KB
d60208f3894f4556caae5ed2297c0ef1593a4a66f5af8f3f2e44a8f2896bbf8e.exe

.exe 40KB

114efcdd88ff496008184061a54fbb2e05d44a5fe496748530017ff38492f16e

SHA256 114efcdd88ff496008184061a54fbb2e05d44a5fe496748530017ff38492f16e
MD5 8c8b1e06189a3b663cdde25814ba042a
SHA1 cb5c62efce109180a9c2a895d0fc033e5dac7bf1
SHA512 61a67395d15fd043d287e2d4dc56b8c9b5ba0b64bcb18bccaebfd49278012eb2ad384141a57e4f68d1dd833a4e27aa19e561dda1565d0941dc0e5b85d9cc6ca2
SSDEEP 384:BcR6YEdrdQugvbB7fRwh29rboXCiX83MTTA6OExnvexPAlU5V17iYVyZY9lTg3:Y6YEZdavlJw8lbWLNTTROEmuETw
MD5 SHA1 SHA512 SSDEEP

Password

infected

d60208f3894f4556caae5ed2297c0ef1593a4a66f5af8f3f2e44a8f2896bbf8e.exe

SHA256 d60208f3894f4556caae5ed2297c0ef1593a4a66f5af8f3f2e44a8f2896bbf8e
MD5 2f50aca08ffc461c86e8fb5bbedda142
SHA1 6fc5319d084c6e13f950c24c78a9cadb7793c638
SHA512 785225fe823c5724c7ebbfb17f31ffcfc2b3b852369b4d3e002b54476ad8c0f4a5d6ac29d43886361bc8deda29db9f9ce70b1e4496b08390a8ead50ddac9d46e
SSDEEP 768:nyxqjQl/EMQt4Oei7RwsHxKANM0nDhlzOQdJ:yxqjQ+P04wsZLnDrC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

33144

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

42KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

114efcdd88ff496008184061a54fbb2e05d44a5fe496748530017ff38492f16e

d60208f3894f4556caae5ed2297c0ef1593a4a66f5af8f3f2e44a8f2896bbf8e.exe

generic