066138057eba9750d6baec67bda5c6408a223496ca5c4a7a42b79791760fe3c8

Sharing

Copy URL Twitter E-mail

General

Target
066138057eba9750d6baec67bda5c6408a223496ca5c4a7a42b79791760fe3c8
Size 109KB
Sample260722-ga8leazamd
SHA256 066138057eba9750d6baec67bda5c6408a223496ca5c4a7a42b79791760fe3c8
MD5 5285d8f355361776ff980f31342cdc37
SHA1 ad48f3dc8ceded292fffd1ecce7e968d289aed2e
SHA512 d674b6002910d5c1482260f73376be7d3e9779e2b3cd2cd518d02f567469440cb76a61ce6cbfcd95c6ae023a070a1fbeae2e8009d94e793b5bfe2b6e6308dfad
SSDEEP 1536:nj/JH6+tHQAY1P53GkxDT/POa5VCtOPCswv3+KiD1BrALA2JKBOGY:j/R8Ay53zNLPOa5Cy6yBrALdJx
TLSH
T1E8B3C70395A250FBC1BDD2B8479B9732EEF2706C2534B70A5750CB222F61EB17B5D21A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066138057eba9750d6baec67bda5c6408a223496ca5c4a7a42b79791760fe3c8

File Explorer

066138057eba9750d6baec67bda5c6408a223496ca5c4a7a42b79791760fe3c8

.exe 109KB

066138057eba9750d6baec67bda5c6408a223496ca5c4a7a42b79791760fe3c8

IMPHASH 30e8248d8aaf3198f7d4183dc35dcb59
SHA256 066138057eba9750d6baec67bda5c6408a223496ca5c4a7a42b79791760fe3c8
MD5 5285d8f355361776ff980f31342cdc37
SHA1 ad48f3dc8ceded292fffd1ecce7e968d289aed2e
SHA512 d674b6002910d5c1482260f73376be7d3e9779e2b3cd2cd518d02f567469440cb76a61ce6cbfcd95c6ae023a070a1fbeae2e8009d94e793b5bfe2b6e6308dfad
SSDEEP 1536:nj/JH6+tHQAY1P53GkxDT/POa5VCtOPCswv3+KiD1BrALA2JKBOGY:j/R8Ay53zNLPOa5Cy6yBrALdJx
TLSH
T1E8B3C70395A250FBC1BDD2B8479B9732EEF2706C2534B70A5750CB222F61EB17B5D21A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

101168

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.code

Size

98KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

066138057eba9750d6baec67bda5c6408a223496ca5c4a7a42b79791760fe3c8

kernel32

msvcrt

generic