054cb1e0b461069397d1febd61c464305ba0787920fce8433e602d73efadae42

Sharing

Copy URL Twitter E-mail

General

Target
054cb1e0b461069397d1febd61c464305ba0787920fce8433e602d73efadae42
Size 7.8MB
Sample260706-jtyxesbv5y
SHA256 054cb1e0b461069397d1febd61c464305ba0787920fce8433e602d73efadae42
MD5 5307e6e80026ce038ec5d185c79aa840
SHA1 e098694951e00b047d1f262ff9e11142b2742341
SHA512 d599e47b4b62f99d0735cb0476972f2c993607209abaeb30b464cfc7789283400c09713daa8e150cc7ddb322fc4771dd438a42d3bc921826bcd69657163f285d
SSDEEP 98304:BtqZtnvU5HWEhvL+SWb5TNeYXGMGHnRzJhjPX6JOnR7n:6jnvU5zm55eyGHRzXjPX6gR7
TLSH
T127867D07EC9545A9C0AEA331C5B29253BA71BC594B3227D72B60F73C2F76BD4AA75300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
054cb1e0b461069397d1febd61c464305ba0787920fce8433e602d73efadae42

File Explorer

054cb1e0b461069397d1febd61c464305ba0787920fce8433e602d73efadae42

.exe 7.8MB

054cb1e0b461069397d1febd61c464305ba0787920fce8433e602d73efadae42

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 054cb1e0b461069397d1febd61c464305ba0787920fce8433e602d73efadae42
MD5 5307e6e80026ce038ec5d185c79aa840
SHA1 e098694951e00b047d1f262ff9e11142b2742341
SHA512 d599e47b4b62f99d0735cb0476972f2c993607209abaeb30b464cfc7789283400c09713daa8e150cc7ddb322fc4771dd438a42d3bc921826bcd69657163f285d
SSDEEP 98304:BtqZtnvU5HWEhvL+SWb5TNeYXGMGHnRzJhjPX6JOnR7n:6jnvU5zm55eyGHRzXjPX6gR7
TLSH
T127867D07EC9545A9C0AEA331C5B29253BA71BC594B3227D72B60F73C2F76BD4AA75300
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

474720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

247KB

Virtual Size

558KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

57KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

332B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

440KB

Virtual Size

439KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

913KB

Virtual Size

913KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

563KB

Virtual Size

563KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/90

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

366KB

Virtual Size

365KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

054cb1e0b461069397d1febd61c464305ba0787920fce8433e602d73efadae42

kernel32

generic