d60c445bf90db875e2495d5fc8b07766a6d8ab76ca6678fc551304af6de9b404

General

Target
d60c445bf90db875e2495d5fc8b07766a6d8ab76ca6678fc551304af6de9b404
Size 9.4MB
Sample260424-vdc6kaft5m
SHA256 d60c445bf90db875e2495d5fc8b07766a6d8ab76ca6678fc551304af6de9b404
MD5 9b330447aac17f9bc82471e39616d1e5
SHA1 3de63a246ba5d79b4655fa9bd77ba45202f20781
SHA512 48ee50acdcde91042bcdf586829240d27aacac652997834474d56b69bddd3ee9c50d3b824c170cb508f9fea80181862ffe1d26faea52874f355b5172e68f543e
SSDEEP 196608:AogsD0YZy0uSc3NRvdvcP9L0jzLnTlbpcvzh0IdhWc/thll70NBv5zp8U:Bg80ySSc3NRvdvcP9L0jzLnTlbpcv90F
TLSH
T120A623D13375C1E2CC8745F6DA96DA6FD12A22220B05A7C3BDD85A356C12CD32FB874A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d60c445bf90db875e2495d5fc8b07766a6d8ab76ca6678fc551304af6de9b404

File Explorer

d60c445bf90db875e2495d5fc8b07766a6d8ab76ca6678fc551304af6de9b404

.exe 9.4MB

d60c445bf90db875e2495d5fc8b07766a6d8ab76ca6678fc551304af6de9b404

IMPHASH b4a15943ead1e3c747a0db2389566510
SHA256 d60c445bf90db875e2495d5fc8b07766a6d8ab76ca6678fc551304af6de9b404
MD5 9b330447aac17f9bc82471e39616d1e5
SHA1 3de63a246ba5d79b4655fa9bd77ba45202f20781
SHA512 48ee50acdcde91042bcdf586829240d27aacac652997834474d56b69bddd3ee9c50d3b824c170cb508f9fea80181862ffe1d26faea52874f355b5172e68f543e
SSDEEP 196608:AogsD0YZy0uSc3NRvdvcP9L0jzLnTlbpcvzh0IdhWc/thll70NBv5zp8U:Bg80ySSc3NRvdvcP9L0jzLnTlbpcv90F
TLSH
T120A623D13375C1E2CC8745F6DA96DA6FD12A22220B05A7C3BDD85A356C12CD32FB874A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5453659

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

191KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

55KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eika4y0

Size

4.9MB

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eika4y1

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

147KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

d60c445bf90db875e2495d5fc8b07766a6d8ab76ca6678fc551304af6de9b404

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

gdiplus

generic

Sharing

General

Malware Config

Signatures

File Explorer

d60c445bf90db875e2495d5fc8b07766a6d8ab76ca6678fc551304af6de9b404

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

gdiplus

generic