Net-Worm[.]Sasser[.]zip

General

Target
Net-Worm.Sasser.zip
Size 14KB
Sample260406-h7fsbsf191
SHA256 de74838f821b7bd3ca00eb57527e8e1b598224157e37b56dcdfcc3e96d17c58a
MD5 be6f0b806b1af58edb9dbf74be9db39a
SHA1 eccb5abb0e89e4c388c6d10108893cd8f5c6b446
SHA512 5980404ef1a59a93660d06d8904884715e41efcae405e7acb31ce785aa7fb5569a2686477a4dae307fa4960f7effc3f7f7579e88874ce2d124b7372d470684c2
SSDEEP 384:UhedkOSftBn4rQeo7o48+nbgueAOItlyykUd:UheddIX4snFEueovd
TLSH
T1A662BF460F2F5DEF32C1F50811A28A143981D7DA0BE76BED6F4D805E3DA18345C5EA56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Net-Worm.Sasser.exe

SHA256 de74838f821b7bd3ca00eb57527e8e1b598224157e37b56dcdfcc3e96d17c58a
MD5 be6f0b806b1af58edb9dbf74be9db39a
SHA1 eccb5abb0e89e4c388c6d10108893cd8f5c6b446
SHA512 5980404ef1a59a93660d06d8904884715e41efcae405e7acb31ce785aa7fb5569a2686477a4dae307fa4960f7effc3f7f7579e88874ce2d124b7372d470684c2
SSDEEP 384:UhedkOSftBn4rQeo7o48+nbgueAOItlyykUd:UheddIX4snFEueovd
TLSH
T1A662BF460F2F5DEF32C1F50811A28A143981D7DA0BE76BED6F4D805E3DA18345C5EA56
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

IMPHASH 09d0478591d4f788cb3e5ea416c25237
SHA256 09398d3f5cc102f7d932b765036e1ac1ff5dc27405d7357b81eaf48ca8ec71b8
MD5 1a2c0e6130850f8fd9b9b5309413cd00
SHA1 d0de44bcf3ca6553307c77da8699dbc9b5e9d56a
SHA512 8e1e40dedb4aa57ae5c89a75aca26a813ce5622e371049ddbc916552d1c00b483d8b042879b1f2088da652eda8ac0ebba3bd682f2545b139984ef20bf643664c
SSDEEP 192:5LQQpqTnBW/OyBooSpbBdbnr9w/lhUYobpCtqOjVzg9ZsAXb1r5FSfhVWdzP5eOv:yQqTBNNrbSHhqONghZrGG5LWad
TLSH
T18762BFC205467ED8D2CC35B07AC4B4EDC6F61D70BB3B93A2A7198D5261E18ACDEA6107
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

10302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths