b7a1182e9b78336e3d3d0b94b81fa45a63e28dea5236f8e328da3302ca53af09

General

Target
b7a1182e9b78336e3d3d0b94b81fa45a63e28dea5236f8e328da3302ca53af09
Size 171KB
Sample260710-csn79sds6x
SHA256 b7a1182e9b78336e3d3d0b94b81fa45a63e28dea5236f8e328da3302ca53af09
MD5 8b7b54f03c0cd5265869ec4fbc184cac
SHA1 7724e97e39780c246e771a58b4a5245d31faf1e3
SHA512 d499229d16cf02d9921998033bceec90563678be73620fc2498226ed0bf12c02fe1748287207066e4e974248f34adbb6c6add5b05c32eb2c86888e0aed9952ea
SSDEEP 3072:vkXg64DNLxOEBrP/vyzGUL5gz7lBIW+oQcmRQ5icINgKlbwhrDKpvPRGd30+:H64J08br04u0QcmRQYdbDpXR+
TLSH
T127040299CA0700C6C96397B5F6EF5D1A9C78FB6263348F4C2F8E42316D717686AB1324
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a1182e9b78336e3d3d0b94b81fa45a63e28dea5236f8e328da3302ca53af09

File Explorer

b7a1182e9b78336e3d3d0b94b81fa45a63e28dea5236f8e328da3302ca53af09

.exe 171KB

b7a1182e9b78336e3d3d0b94b81fa45a63e28dea5236f8e328da3302ca53af09

IMPHASH 45ed3a36a0762e1a3cae9dcafaa88702
SHA256 b7a1182e9b78336e3d3d0b94b81fa45a63e28dea5236f8e328da3302ca53af09
MD5 8b7b54f03c0cd5265869ec4fbc184cac
SHA1 7724e97e39780c246e771a58b4a5245d31faf1e3
SHA512 d499229d16cf02d9921998033bceec90563678be73620fc2498226ed0bf12c02fe1748287207066e4e974248f34adbb6c6add5b05c32eb2c86888e0aed9952ea
SSDEEP 3072:vkXg64DNLxOEBrP/vyzGUL5gz7lBIW+oQcmRQ5icINgKlbwhrDKpvPRGd30+:H64J08br04u0QcmRQYdbDpXR+
TLSH
T127040299CA0700C6C96397B5F6EF5D1A9C78FB6263348F4C2F8E42316D717686AB1324
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

8194

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

158KB

Virtual Size

157KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

b7a1182e9b78336e3d3d0b94b81fa45a63e28dea5236f8e328da3302ca53af09

advapi32

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

b7a1182e9b78336e3d3d0b94b81fa45a63e28dea5236f8e328da3302ca53af09

advapi32

kernel32

user32

generic