bb7cfeef59cc432fc9d7bee03946a6c9b4c4fcdcebafa76874ef09115eee5df1

Sharing

Copy URL Twitter E-mail

General

Target
bb7cfeef59cc432fc9d7bee03946a6c9b4c4fcdcebafa76874ef09115eee5df1
Size 2.5MB
Sample260706-katn2act9z
SHA256 bb7cfeef59cc432fc9d7bee03946a6c9b4c4fcdcebafa76874ef09115eee5df1
MD5 01bf30642cc9470e1551699cb4009573
SHA1 810225414baba2a6ef43eb435a288f7de3695ceb
SHA512 3750a6c84007f1c7e39608045b18f99c35a52f8879922af86d10390c855d782d70c1e1153b17feb937f31654a920b76b948e67581dbe3daecef05d3af0408696
SSDEEP 49152:mbUHl/CGjly4CddA2CNs3JsV0SqU/KsKK6JYr5q3Blp7GYKPH+:mbUF/CUc4kdPCS7WGJua1dQ
TLSH
T169C5234105D6B038CBC381B616CAC4C761E3BA049C9B9EE726C7BF265CB6E47235B617
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb7cfeef59cc432fc9d7bee03946a6c9b4c4fcdcebafa76874ef09115eee5df1

File Explorer

bb7cfeef59cc432fc9d7bee03946a6c9b4c4fcdcebafa76874ef09115eee5df1

.exe 2.5MB

bb7cfeef59cc432fc9d7bee03946a6c9b4c4fcdcebafa76874ef09115eee5df1

IMPHASH 679877ea45ff38e48e48875d525bcbb1
SHA256 bb7cfeef59cc432fc9d7bee03946a6c9b4c4fcdcebafa76874ef09115eee5df1
MD5 01bf30642cc9470e1551699cb4009573
SHA1 810225414baba2a6ef43eb435a288f7de3695ceb
SHA512 3750a6c84007f1c7e39608045b18f99c35a52f8879922af86d10390c855d782d70c1e1153b17feb937f31654a920b76b948e67581dbe3daecef05d3af0408696
SSDEEP 49152:mbUHl/CGjly4CddA2CNs3JsV0SqU/KsKK6JYr5q3Blp7GYKPH+:mbUF/CUc4kdPCS7WGJua1dQ
TLSH
T169C5234105D6B038CBC381B616CAC4C761E3BA049C9B9EE726C7BF265CB6E47235B617
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3907489

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

740B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

970KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

168B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

Virtual Size

371KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

vm0

Size

Virtual Size

340KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

vm1

Size

1024B

Virtual Size

904B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

vm2

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

bb7cfeef59cc432fc9d7bee03946a6c9b4c4fcdcebafa76874ef09115eee5df1

kernel32

generic