539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db

General

Target
539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db
Size 91KB
Sample260728-rgpf8aar31
SHA256 539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db
MD5 ab7e5cc6ecd17ea8424e5cf1c36c9508
SHA1 eefc1bf1ccb6823e5ec615ff60aa613fc461d3d5
SHA512 98e76a8ef9216908e0c7b7ddd8b3235b31fd7a0860838d372180a2e2a8dcbffba62f79b881fc4320aa7dd2cffc43ed91c602e8e7c22ec5964bcf1c0f72ff450f
SSDEEP 1536:5B8NzlO+OAWgxc+gPgeJyg+gCYgMR2B5TEigJ2T4gsZ/c:FZAWgxc+gPgeJyg+gCYgMR2B5TEigJ2b
TLSH
T167930F52A7EB1100FAF36A3D59B74268A73FB9B28936C74F01D9155D0FB3D80AE90712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db

File Explorer

539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db

.exe 91KB

539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db

IMPHASH 1454e5b9e7cffe692d119398dfa7246b
SHA256 539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db
MD5 ab7e5cc6ecd17ea8424e5cf1c36c9508
SHA1 eefc1bf1ccb6823e5ec615ff60aa613fc461d3d5
SHA512 98e76a8ef9216908e0c7b7ddd8b3235b31fd7a0860838d372180a2e2a8dcbffba62f79b881fc4320aa7dd2cffc43ed91c602e8e7c22ec5964bcf1c0f72ff450f
SSDEEP 1536:5B8NzlO+OAWgxc+gPgeJyg+gCYgMR2B5TEigJ2T4gsZ/c:FZAWgxc+gPgeJyg+gCYgMR2B5TEigJ2b
TLSH
T167930F52A7EB1100FAF36A3D59B74268A73FB9B28936C74F01D9155D0FB3D80AE90712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

60B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

40KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db

kernel32

ntdll

ucrtbase

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db

kernel32

ntdll

ucrtbase

user32

generic