2017-01-30-Afraidgate-Rig-V-payload-Locky-radE7F02[.]tmp[.]exe

General

Target
2017-01-30-Afraidgate-Rig-V-payload-Locky-radE7F02.tmp.exe
Size 255KB
Sample251027-plergady9c
SHA256 9d7016dccdb05939eaac3ca2452cf5ef9d22a8e3a0e8e60b555b41506f95c36e
MD5 49af0845db502e6965aa54ae5d35dd9d
SHA1 4d0c139579bd6c52cb1c987c4dc3b07edaee4aa5
SHA512 fe189d182f87de7a9608d9768c2b28f083328494860771f6791538b54a8acaaefebdca75eeba06cb69309da3cca69ea9f93ca03870c9a29b3df67e2c6bfc920e
SSDEEP 3072:Rwp4q7T9LhD9l2Q6MfLoYivy/KtMpsd+4ldKlQJ9ZfR5JUS3+moKYe5DecRA5jfE:I4S9LhZl2Q6MzoXSsXmBS3Jl1FAj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2017-01-30-Afraidgate-Rig-V-payload-Locky-radE7F02.tmp.exe

IMPHASH 5f513ddba351c289d26764ddbf31f209
SHA256 9d7016dccdb05939eaac3ca2452cf5ef9d22a8e3a0e8e60b555b41506f95c36e
MD5 49af0845db502e6965aa54ae5d35dd9d
SHA1 4d0c139579bd6c52cb1c987c4dc3b07edaee4aa5
SHA512 fe189d182f87de7a9608d9768c2b28f083328494860771f6791538b54a8acaaefebdca75eeba06cb69309da3cca69ea9f93ca03870c9a29b3df67e2c6bfc920e
SSDEEP 3072:Rwp4q7T9LhD9l2Q6MfLoYivy/KtMpsd+4ldKlQJ9ZfR5JUS3+moKYe5DecRA5jfE:I4S9LhZl2Q6MzoXSsXmBS3Jl1FAj
MD5 SHA1 SHA512 SSDEEP

Minor OS version

1

Major OS version

5

Entry point

27428

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths