06ef9a5a3ef04ff289ac6045b612f2a5d37358ff959794542f6c441e8239d82b

Sharing

Copy URL Twitter E-mail

General

Target
06ef9a5a3ef04ff289ac6045b612f2a5d37358ff959794542f6c441e8239d82b
Size 92KB
Sample241112-x2caaasmgj
SHA256 06ef9a5a3ef04ff289ac6045b612f2a5d37358ff959794542f6c441e8239d82b
MD5 b02450cfe89ecdd79f8988c96dd25b78
SHA1 9a1bc48921f10dc93ac177ac13a650ddbf9dd7b8
SHA512 9c3534483bcb9034ac7f282a2dcec72d5cc05b47da1e7bdd5e4b6e5dac702ab31ca9bc4441a377c59dccfc405bb04ba533ce48ab7b42927d02bc016c98b43957
SSDEEP 1536:J3UDyQFT25KY1TGFXA/H8i0aA5qDj4me2LBWJ9VqDlzVxyh+CbxMQgn:Jep2YXA/6aKqnnjIJ9IDlRxyhTbhgn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06ef9a5a3ef04ff289ac6045b612f2a5d37358ff959794542f6c441e8239d82b

File Explorer

06ef9a5a3ef04ff289ac6045b612f2a5d37358ff959794542f6c441e8239d82b

.exe 92KB

06ef9a5a3ef04ff289ac6045b612f2a5d37358ff959794542f6c441e8239d82b

SHA256 06ef9a5a3ef04ff289ac6045b612f2a5d37358ff959794542f6c441e8239d82b
MD5 b02450cfe89ecdd79f8988c96dd25b78
SHA1 9a1bc48921f10dc93ac177ac13a650ddbf9dd7b8
SHA512 9c3534483bcb9034ac7f282a2dcec72d5cc05b47da1e7bdd5e4b6e5dac702ab31ca9bc4441a377c59dccfc405bb04ba533ce48ab7b42927d02bc016c98b43957
SSDEEP 1536:J3UDyQFT25KY1TGFXA/H8i0aA5qDj4me2LBWJ9VqDlzVxyh+CbxMQgn:Jep2YXA/6aKqnnjIJ9IDlRxyhTbhgn
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

196612

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.l1

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

06ef9a5a3ef04ff289ac6045b612f2a5d37358ff959794542f6c441e8239d82b

generic