BLTLN0124796CMACGM[.]GZ[.]gz

General

Target
BLTLN0124796CMACGM.GZ.gz
Size 860KB
Sample240924-la2kbayfmn
SHA256 ec8b5d134fb3669c59733a303ef5a03bb6cc5a02602bce545d4fedda93ea4962
MD5 4e3132e4f3513fff7d4be81a75969223
SHA1 650c0ba57e4083b9737210abc309a4b423a48c50
SHA512 e598758a2979bd6f724b272e43b55edd7495ad287193f03ad1f50d8a20367ff8a8bf22382195517549bb361b56f7fb5a3d91e165e3b22f38d9d7c796f31ca5ab
SSDEEP 24576:aeWODCOdvMn6rin7jQSLo6iqG3qdTOAY4MJ9rYAbPbr:aOCOdvQQSu93W674+sAbPbr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BL-TLN0124796CMACGM.scr

File Explorer

BLTLN0124796CMACGM.GZ.gz

.rar 860KB
BL-TLN0124796CMACGM.scr

.exe 915KB

BLTLN0124796CMACGM.GZ.gz

SHA256 ec8b5d134fb3669c59733a303ef5a03bb6cc5a02602bce545d4fedda93ea4962
MD5 4e3132e4f3513fff7d4be81a75969223
SHA1 650c0ba57e4083b9737210abc309a4b423a48c50
SHA512 e598758a2979bd6f724b272e43b55edd7495ad287193f03ad1f50d8a20367ff8a8bf22382195517549bb361b56f7fb5a3d91e165e3b22f38d9d7c796f31ca5ab
SSDEEP 24576:aeWODCOdvMn6rin7jQSLo6iqG3qdTOAY4MJ9rYAbPbr:aOCOdvQQSu93W674+sAbPbr
MD5 SHA1 SHA512 SSDEEP

BL-TLN0124796CMACGM.scr

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d00a443bf00b909b32fbd9894462283fca5788e28b96a9e729f43fc4f2ca585a
MD5 02d513fa3a4c04f1ffce97c25caccdff
SHA1 853948f7ff1d69a293c4f4617185c24b9859e6dd
SHA512 9a9b925e7d5acec5216ecb64f7352a8a27598106452984f08155f2bef640fe1ad93ff3a7869cacfaec2514641740c41fcc0e7e4f0172eaa7072c1c9c05087ab3
SSDEEP 24576:SgW2J4Sl29MaW6EEJJQEtTShtxMwwW7yUVzmoeli:SgjJYSoxtuDxZlyUVzmo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

941838

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

SwsY.pdb

BLTLN0124796CMACGM.GZ.gz

BL-TLN0124796CMACGM.scr

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

BLTLN0124796CMACGM.GZ.gz

BL-TLN0124796CMACGM.scr

mscoree

dotnet