0fca4ddfcdaec66671e75f72bb071efa44ba0200437009f31af9b2f303ad6aa6

Sharing

Copy URL Twitter E-mail

General

Target
0fca4ddfcdaec66671e75f72bb071efa44ba0200437009f31af9b2f303ad6aa6
Size 1020KB
Sample250127-ye2gbstmdl
SHA256 0fca4ddfcdaec66671e75f72bb071efa44ba0200437009f31af9b2f303ad6aa6
MD5 6e6a00a05080bc56c53c6a86f3d0c518
SHA1 e4dbcd5f6b96dfd04f3efa8a36e38219aab41a02
SHA512 de043700e8022e26de8891317e7de12fec8a8ae778a4a176d4a2e72bee8d0f454b238b55cdc143747a897db4f85e1c00160586a22cff10802e192470f846e4ac
SSDEEP 24576:oBngu5YyCtCCm0BmmvFimm0wh2kkkkK4kXkkkkkkkkhLX/:mngu5RCtCmi7T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fca4ddfcdaec66671e75f72bb071efa44ba0200437009f31af9b2f303ad6aa6

File Explorer

0fca4ddfcdaec66671e75f72bb071efa44ba0200437009f31af9b2f303ad6aa6

.exe 1020KB

0fca4ddfcdaec66671e75f72bb071efa44ba0200437009f31af9b2f303ad6aa6

SHA256 0fca4ddfcdaec66671e75f72bb071efa44ba0200437009f31af9b2f303ad6aa6
MD5 6e6a00a05080bc56c53c6a86f3d0c518
SHA1 e4dbcd5f6b96dfd04f3efa8a36e38219aab41a02
SHA512 de043700e8022e26de8891317e7de12fec8a8ae778a4a176d4a2e72bee8d0f454b238b55cdc143747a897db4f85e1c00160586a22cff10802e192470f846e4ac
SSDEEP 24576:oBngu5YyCtCCm0BmmvFimm0wh2kkkkK4kXkkkkkkkkhLX/:mngu5RCtCmi7T
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

208896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.data

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

0fca4ddfcdaec66671e75f72bb071efa44ba0200437009f31af9b2f303ad6aa6

generic