2dd98f30ab938ef81f24ddbf9fe9d5ba8b036f7e66fb81de71a2060103501612

General

Target
2dd98f30ab938ef81f24ddbf9fe9d5ba8b036f7e66fb81de71a2060103501612
Size 6.0MB
Sample260720-lktx8ads9j
SHA256 2dd98f30ab938ef81f24ddbf9fe9d5ba8b036f7e66fb81de71a2060103501612
MD5 4791db8bea9fb5b9a4b41b3f987aa0f6
SHA1 2920226b94bc2d8327a26e83b84a996a86a09548
SHA512 4464bf12d2f6ec5ff2cedfa37fee3d1a4a9b81f6435d4882107abdd55d999a75625c7a34281c18dc614f767604f4940fb672349aadac6dd34962641667648f42
SSDEEP 98304:XPC0mpkJF2Ey97xEsAELtxVje2g1ySgnRrxjeDETbtATKDLJMWv07gncHg:w4FFA0ELtx5ruOxjwETbKuJM+07gnc
TLSH
T1C3561241B5A67CF6CCE88436AEAEF2D9E354F01179F3091DBB350B463571588ACDAE20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd98f30ab938ef81f24ddbf9fe9d5ba8b036f7e66fb81de71a2060103501612

File Explorer

2dd98f30ab938ef81f24ddbf9fe9d5ba8b036f7e66fb81de71a2060103501612

.dll 6.0MB

2dd98f30ab938ef81f24ddbf9fe9d5ba8b036f7e66fb81de71a2060103501612

IMPHASH e11f29f735f153e29554fd5856002ca3
SHA256 2dd98f30ab938ef81f24ddbf9fe9d5ba8b036f7e66fb81de71a2060103501612
MD5 4791db8bea9fb5b9a4b41b3f987aa0f6
SHA1 2920226b94bc2d8327a26e83b84a996a86a09548
SHA512 4464bf12d2f6ec5ff2cedfa37fee3d1a4a9b81f6435d4882107abdd55d999a75625c7a34281c18dc614f767604f4940fb672349aadac6dd34962641667648f42
SSDEEP 98304:XPC0mpkJF2Ey97xEsAELtxVje2g1ySgnRrxjeDETbtATKDLJMWv07gncHg:w4FFA0ELtx5ruOxjwETbKuJM+07gnc
TLSH
T1C3561241B5A67CF6CCE88436AEAEF2D9E354F01179F3091DBB350B463571588ACDAE20
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

A25lM3b0 ADa1dPG5vzQ AG_XkpzT1VDgXKQIQKrF AZqd35OlKKsao3 AvAFnNkUakyO AxPIlbBlZRuQNPIbP BXASomH2tPLjrqAkzl1z BfsdSkCxayPkSQZrIEvL BtgsKJothnmCnQAgkp BvbqFEhjRvSuhP CMCXAFss DkY4dbtbo90f DybN0Z9DAJBdYM6WZNt EIGCtyfKdCCdpWfiP EJBXNRHMlPQj EZYaWPNja3MjOPv4Pepv9hQBEUvmz EbKJY68Vi1wpW5kDWv F8PrWu2kr GAjlgNgqYnI GEkqLaDbLsjcqIhRPlxx GiETlqNsjYapBf GzBLDJujDmWg H1cFTvgFBRjPHM8XIF HOKBOcjjEoNfQSWWuDnS9B7y H_0aPNgMVOZEiDlRJ H_MhfDNeEzy IoCW8lXx8CxDij5ugLWy IqZPzgoBsnvKiTfWAiDpOQfx IwIhq2s2zrd6 JDHZOlusz JSZaFQ3zCq_O KDfnjTMTMuQapXaTLL KSYUESnReRHAKAvqVCmkBET Kirb8x61G7K2 KvUKefNzfnzgvNoXsvqH Kxx0FktNjZ4LVU3_eF LNqhxXxRrdd LRZDspLanh LYzNlLqdEANKtpnLRiVP Lby_cnRq1SG3w4Y3iG8 LtejVvzssflcfx M4s0322OpyW_nbhU MGrhLtdhfIwnCW MXtkQxkXzUr6cw2KIyaUZzd7cVo Megrl1PTM4g7 MuAgcypCGRfZedWt MuieOAVn MxnSTeGN MzFNbYJpPIc NGnXUBrNqpALiuCQvwT NKq_xyFLM NNyhueRNMiczIosNimF NivMaRHzXUOVEdK NjeK6ICjT ONUFlHhqMRcXQorf ORadLHFNcjcyDecoEUBGPsWKFrY OYYyQpBhWvSqXEj OnTgx P3D5ObmrhRFiY1 PHVWsuACtGmGmQUptTzMEnknliURiOt PRPsHnceFBbi PVIkoz5wSeMPZnJF PXxruQOfv PkyiJwfTJ PxtgIRck8yUY Q2XAT80OOu QALyzPokdgHsdvgZPg QFUBfQUyLSLwHEmx QIKjlH9dSFohbzdI QQhhfcDC QVanQkzdI Qff5sP6VQL1i QoHixXcmQnRkCs QwHeOE2mfxP RCtyCrjMbxbcWL RLdkATLntJnBjMwnrD RuYtAQRvUwEwCxOom RxoYMzUufNTmMSkSNkw S0kF1AnXCFV06E SWxNqfJO SgczPHDmVKt78Jubxg SwGrdwDgWsjisz U706MsFUwHusdDCb1cALN UCvHbalQmB60bo UE3kSdbLFE UmRa6N2583t1 UzSQuZiWPOfQIikrUSPy VYUPMiojyTbO VfbShPbqYmkCXc VwiMjiGzmxOiRnZsmPdKq VxBVWkaKCVMihdRzdY WLENKfMPHPXfNEdNYq WUwNvxmCAgVN WowqGUkPk WrMYkFhzihWJ X4Ap8fISf8bDkp XKHWfeNgEIm XKPzBcUbDV XbwwEvHzoMLX XwqPPkJxrbVJzqsardgMqLBMHK YISLZoeBHSYmb0AisH YKSQsiF6x2T_ctQReepIg YWh_sIaQsoRm5Vw5PhI YYFdFVKaFwSdrilVuWGiXVdKVxu ZqaFhzRzSFwqHrGBt _6To824xd1dXZ5E9Z5h _KDJCldTw0esURLG _qVOx65WFz6oz9hS aEVudVQOcZeWJgJs aQTeAvtG16X422WhyqxaDTz bCRGCpUTZLWnyVjRZMBpr bsKs2VD43fP9y3UWm2E cDOGwFO0vXN0MUpintw2puR cJ5vHPsO8NIpfD cYJPjXWTuGJ cecwBDTswv cin9qPqLw cqbJWN0kXQX dX33MQLPCBsH dhUNEfgGlZKt djyjcvNdwi0IhK e30WsmMahQA__UnPmrNr e6dVpBUKxXVQhP1iH6H7YqjWT e7CSE1bE9TFUbgZFjEm56bW eU9z8N7wtOwkQN5LNoBj ecxKHbwcHtWnqI eemnweaUyZSEXVwGhfdYqPY fIPPvaCtNOzHg fKAPSHRyUMqjzFtRiN fLJkkLaRRcIxJnMEem fsV9E5QcT gTZxMjI6Cgi4x3 gpfiooUu guviTqfhfdvoXVOTg hJGDZRvsXVlHgBSIXY hkicpTqkpqa hrYcofrZFeggupxiXLBeNqYiWZHJU hsPjNHCwvsLNZfBI htTAvj0qkr5EekJyTXzAS_5yMol0w hyAJgVgcqq iypf7BhI_ jCWG0GLVit7dtToHf2cy jI3k4EZPaeWSMWHcWVf jT6SPEk_4R5D jTgIhTC2TuY jgn2dsnuQDLIbhHTq2 jtcxORRALWn5HNoti6M kQvImVLUFcgyk kURYCywsau kcSJEStibph kgQUe_lYBAQtxsyr2W5IVAE l6_5Apy9jpqrAj lD761LIx lDDXaAmNlJhugssqhsLtZJw lgJskLyTQTgNTuzv lsezyMQUAspk mHnfvdljcufv9 mMKxQ0gMT5M9en1 mNrd1BJU mbCTabkWtCgyPseQWgtaAQuJ mcTaHtwrwTUDHf nFvnt0j7F0lOg0k nTREJzmoBeibliGzvE oYknUauOUF olMuYPFwpCJEQhd8A5L5hxqsz6 pBXnHNfUpKKfvxuparxI pUdEFtwnmpCv pcdxfQjyXaAuHksx pquNOWPXImozRzEUsoElyQS qKoTfevzEa qxsUsjeIanKAaQm r9VqmAP8zz2 rFHTiVa4Kz3PbTJ rGgooHEKJpZ rJQzYWq_IQvQ smw6dyWYunBDeaikFR9da1nR ssGXAzsouPMfWgjXsxNhDynAzYUVpRqLeIH t2TLl9WQC8RLO_3n tKfYxvQmRDliWVjorZMG tLXDdqLzYLNierGTLoDk tjGClPqeWzhprdCjMyElbOjsSG tqhbpr3rMAUV txoMyRZdYoAZWvHOCXQZ uItYQWmBFBjHjULJNx uPmIFOCOLXlJqBRXo us_NHsiwhsmGM8J47han uudIFXQuRErKBgYKLXBDrToej vEKYePUE86d vOOUgSUFOzZEC vOUEsJaicUQISBOXuP vejUSKPyRhVzZeIx vhGIRDQywOOnhW vhhehS vkCApayapXznXs vkLpKQuRcqHdHXvOvbL wDuXVlWuqMasyw wHmRo2isHPgOeTl4nMIrXbrN4Nc wKfT2GPdwBSP8iB3W wXl5MD_2I0e6 wcIhHkTpw wkheXUhBlQvmIOryyeQILupgB xDhDmPBAtknhWK xdHrcPtBgztCZyYxCHZkZiajkUg xyEaX1dv9CNe yDcsCQndSGlggdJe yPGeead3_JPDULTHtR yZNXNeK0p zCdxpqPDlpyXFJMGcgWeY zgyMXsqJJcEmUDFJiojzo

Name

.text

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

658KB

Virtual Size

657KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.@[y

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

157KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2dd98f30ab938ef81f24ddbf9fe9d5ba8b036f7e66fb81de71a2060103501612

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

2dd98f30ab938ef81f24ddbf9fe9d5ba8b036f7e66fb81de71a2060103501612

kernel32

generic