02b12a8ac77b29501e6a0a9350afcbf6186c6c79252e8a990d44ba2e66770c85

Sharing

Copy URL Twitter E-mail

General

Target
02b12a8ac77b29501e6a0a9350afcbf6186c6c79252e8a990d44ba2e66770c85
Size 96KB
Sample241109-xt7q8azjet
SHA256 02b12a8ac77b29501e6a0a9350afcbf6186c6c79252e8a990d44ba2e66770c85
MD5 bfab1c9daef5c35e5fb621561a05f136
SHA1 14987bad6d55d0b3363fefbb699667e619bd1396
SHA512 68e8ef8a644f44f24915af925e6f46c17abc0c348dd52ca4ff7e1b9b193d06f0e36e53794acd67fffea30470ad2d4864859fa330e397ca0f7fc166a2d679c382
SSDEEP 1536:VGmKw7HQuhiCFThnDFfIuCGLrUwqc3cwm7sk7caAjWbjtKBvU:VG+vFDED4kAVwtCU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02b12a8ac77b29501e6a0a9350afcbf6186c6c79252e8a990d44ba2e66770c85

File Explorer

02b12a8ac77b29501e6a0a9350afcbf6186c6c79252e8a990d44ba2e66770c85

.exe 96KB

02b12a8ac77b29501e6a0a9350afcbf6186c6c79252e8a990d44ba2e66770c85

SHA256 02b12a8ac77b29501e6a0a9350afcbf6186c6c79252e8a990d44ba2e66770c85
MD5 bfab1c9daef5c35e5fb621561a05f136
SHA1 14987bad6d55d0b3363fefbb699667e619bd1396
SHA512 68e8ef8a644f44f24915af925e6f46c17abc0c348dd52ca4ff7e1b9b193d06f0e36e53794acd67fffea30470ad2d4864859fa330e397ca0f7fc166a2d679c382
SSDEEP 1536:VGmKw7HQuhiCFThnDFfIuCGLrUwqc3cwm7sk7caAjWbjtKBvU:VG+vFDED4kAVwtCU
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

208899

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.reloc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.flh

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

DATA

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

02b12a8ac77b29501e6a0a9350afcbf6186c6c79252e8a990d44ba2e66770c85

generic