6bff4b61dc20a16434dad338da226c02b8e0245a7e2825641029a6f0d8e49b7d

Sharing

Copy URL Twitter E-mail

General

Target
6bff4b61dc20a16434dad338da226c02b8e0245a7e2825641029a6f0d8e49b7d
Size 1.3MB
Sample240717-edcl2axema
SHA256 6bff4b61dc20a16434dad338da226c02b8e0245a7e2825641029a6f0d8e49b7d
MD5 e5f969cc7be6c6357e256fdb5986b62a
SHA1 d0f08057286fdd64a744671e5551d0843de81558
SHA512 3ba7e72e54554ef49f3080adf910f273063ea3bb19351d53249b27531e8eb04f8564acf19ffd9fe4afc4ed00067f4a2e52c64bb82e636961e7b4974717a95bc3
SSDEEP 12288:ave20hDVso5cGj+jr5nOjSrmv/QZIZ55OHXV6cxR+2V0c+E7To3ujAdKX7h4O6DJ:aYr15c/MjSiv/A7HXTCgJA0X6O6D
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bff4b61dc20a16434dad338da226c02b8e0245a7e2825641029a6f0d8e49b7d

File Explorer

6bff4b61dc20a16434dad338da226c02b8e0245a7e2825641029a6f0d8e49b7d

.exe 1.3MB

6bff4b61dc20a16434dad338da226c02b8e0245a7e2825641029a6f0d8e49b7d

IMPHASH c2d457ad8ac36fc9f18d45bffcd450c2
SHA256 6bff4b61dc20a16434dad338da226c02b8e0245a7e2825641029a6f0d8e49b7d
MD5 e5f969cc7be6c6357e256fdb5986b62a
SHA1 d0f08057286fdd64a744671e5551d0843de81558
SHA512 3ba7e72e54554ef49f3080adf910f273063ea3bb19351d53249b27531e8eb04f8564acf19ffd9fe4afc4ed00067f4a2e52c64bb82e636961e7b4974717a95bc3
SSDEEP 12288:ave20hDVso5cGj+jr5nOjSrmv/QZIZ55OHXV6cxR+2V0c+E7To3ujAdKX7h4O6DJ:aYr15c/MjSiv/A7HXTCgJA0X6O6D
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

410496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

574KB

Virtual Size

574KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

715KB

Virtual Size

714KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

54KB

Virtual Size

601KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

6bff4b61dc20a16434dad338da226c02b8e0245a7e2825641029a6f0d8e49b7d

kernel32

generic