clossys4[.]3[.]3[.]exe

General

Target
clossys4.3.3.exe
Size 432KB
Sample260509-ge5ejsbs8w
SHA256 1e7029fb755151bf9f541dba2d23b75a513d7cfb3551f1f49f09a79eb990df57
MD5 9c65ad7aa4810211234cf9d6b4d76ed1
SHA1 9abf9276133a158c81548875bc3e350b6c24bd39
SHA512 d96913912a37ce6cf149c609482ef31b470666d0c9d02a175c711fcbafcaf9d9efc48c405908af1f8834a22f0fdb5e381f9316ae3fefc5b9054007a294083c1b
SSDEEP 1536:PacpKf1O9/HOA48bBmBCY0htmghW9aIQhNdK43MCpoptA:XpKfktHOSNmBCrhtmg6aumHpope
TLSH
T136942924F641C02AE49651F9CAF6C7BDB6287F21034424C7F3E4AE97672D4E97A3244E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
clossys4.3.3.exe

File Explorer

clossys4.3.3.exe

.exe 432KB

clossys4.3.3.exe

IMPHASH f00febecf6209cbaf8a007090ea9d428
SHA256 1e7029fb755151bf9f541dba2d23b75a513d7cfb3551f1f49f09a79eb990df57
MD5 9c65ad7aa4810211234cf9d6b4d76ed1
SHA1 9abf9276133a158c81548875bc3e350b6c24bd39
SHA512 d96913912a37ce6cf149c609482ef31b470666d0c9d02a175c711fcbafcaf9d9efc48c405908af1f8834a22f0fdb5e381f9316ae3fefc5b9054007a294083c1b
SSDEEP 1536:PacpKf1O9/HOA48bBmBCY0htmghW9aIQhNdK43MCpoptA:XpKfktHOSNmBCrhtmg6aumHpope
TLSH
T136942924F641C02AE49651F9CAF6C7BDB6287F21034424C7F3E4AE97672D4E97A3244E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

244KB

Virtual Size

240KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

clossys4.3.3.exe

kernel32

generic

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

clossys4.3.3.exe

kernel32

generic