90474cd13b99c0d12ccbf7aedaf1771f69ff534f793d5fa9b5ed1dd07d5251b5

Sharing

Copy URL Twitter E-mail

General

Target
90474cd13b99c0d12ccbf7aedaf1771f69ff534f793d5fa9b5ed1dd07d5251b5
Size 85KB
Sample260714-ra3ehagz21
SHA256 90474cd13b99c0d12ccbf7aedaf1771f69ff534f793d5fa9b5ed1dd07d5251b5
MD5 1b7763684ae258dc89bf8af67986b93f
SHA1 10f0f81b34a78ce68319c00d1abb72c5743c8376
SHA512 c3b5bf50a3c71dee311b4c9eeab96b605fea3cf3c998a7d1430fc855367efebbec1a758383efe5f38d2956c6204954aa3b351f42e2c18dd25fc7bb3662e672fb
SSDEEP 1536:W/q8aLToZkHACqLnLVOzn70cYizP28lHXbwQQ1sAIhjYdKrKtEjuLO:MSgfE70TSu89bofIhEdyduS
TLSH
T1FE83F1C2A45318B9E88E67747D82555EF77C1E406B0485936389BBA62CE3DBB303A241
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90474cd13b99c0d12ccbf7aedaf1771f69ff534f793d5fa9b5ed1dd07d5251b5

File Explorer

90474cd13b99c0d12ccbf7aedaf1771f69ff534f793d5fa9b5ed1dd07d5251b5

.dll 85KB

90474cd13b99c0d12ccbf7aedaf1771f69ff534f793d5fa9b5ed1dd07d5251b5

IMPHASH ddb8fbd8fffd0acac7665dab83f80548
SHA256 90474cd13b99c0d12ccbf7aedaf1771f69ff534f793d5fa9b5ed1dd07d5251b5
MD5 1b7763684ae258dc89bf8af67986b93f
SHA1 10f0f81b34a78ce68319c00d1abb72c5743c8376
SHA512 c3b5bf50a3c71dee311b4c9eeab96b605fea3cf3c998a7d1430fc855367efebbec1a758383efe5f38d2956c6204954aa3b351f42e2c18dd25fc7bb3662e672fb
SSDEEP 1536:W/q8aLToZkHACqLnLVOzn70cYizP28lHXbwQQ1sAIhjYdKrKtEjuLO:MSgfE70TSu89bofIhEdyduS
TLSH
T1FE83F1C2A45318B9E88E67747D82555EF77C1E406B0485936389BBA62CE3DBB303A241
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

150716

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

428B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.WXzS

Size

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.Ammf

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

90474cd13b99c0d12ccbf7aedaf1771f69ff534f793d5fa9b5ed1dd07d5251b5

kernel32

msvcrt

generic