a8406006bfd490a32ac927d5c1057be33c250985f5bcdc5db259c696e7521b0d

General

Target
a8406006bfd490a32ac927d5c1057be33c250985f5bcdc5db259c696e7521b0d
Size 6.0MB
Sample260724-tt5ebatflf
SHA256 a8406006bfd490a32ac927d5c1057be33c250985f5bcdc5db259c696e7521b0d
MD5 d8c7cb8a63d4d4f9b7b8b9ac572f6e23
SHA1 5fdb1911094706c2e8da14d74dee147af0480b06
SHA512 2e2944968a4f97622a6539fc7778c789428ea9377c6f35239c35aae58b7fbac0d3f54e5a3f86dcfbd2ea25a4cba86c8f0509948293f6bc10a4ab7e0e01cce6a2
SSDEEP 196608:yyA2fx2raFudL8j16p8XerOvLLdLSxpUSTb:yUc2FEE16qZLwHUU
TLSH
T119563356F4955090C53EC37889ABC25BCA3B70C20BD99ADB835C872B6D636E3095F738
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8406006bfd490a32ac927d5c1057be33c250985f5bcdc5db259c696e7521b0d

File Explorer

a8406006bfd490a32ac927d5c1057be33c250985f5bcdc5db259c696e7521b0d

.exe 6.0MB

a8406006bfd490a32ac927d5c1057be33c250985f5bcdc5db259c696e7521b0d

IMPHASH a5536d2cf6b7372a8978bd0a771734ee
SHA256 a8406006bfd490a32ac927d5c1057be33c250985f5bcdc5db259c696e7521b0d
MD5 d8c7cb8a63d4d4f9b7b8b9ac572f6e23
SHA1 5fdb1911094706c2e8da14d74dee147af0480b06
SHA512 2e2944968a4f97622a6539fc7778c789428ea9377c6f35239c35aae58b7fbac0d3f54e5a3f86dcfbd2ea25a4cba86c8f0509948293f6bc10a4ab7e0e01cce6a2
SSDEEP 196608:yyA2fx2raFudL8j16p8XerOvLLdLSxpUSTb:yUc2FEE16qZLwHUU
TLSH
T119563356F4955090C53EC37889ABC25BCA3B70C20BD99ADB835C872B6D636E3095F738
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

28672

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Hotege\source\repos\dark\dark\x64\Release\original.pdb

Name

.text

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

372B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

prun

Size

6.0MB

Virtual Size

6.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

a8406006bfd490a32ac927d5c1057be33c250985f5bcdc5db259c696e7521b0d

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

a8406006bfd490a32ac927d5c1057be33c250985f5bcdc5db259c696e7521b0d

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

generic