2f9efc073694a6126fe5d078582449c36a915586d23b5cc5ae6e8f1e403bb8b7

Sharing

Copy URL Twitter E-mail

General

Target
2f9efc073694a6126fe5d078582449c36a915586d23b5cc5ae6e8f1e403bb8b7
Size 2.5MB
Sample260729-e3sdsawxct
SHA256 2f9efc073694a6126fe5d078582449c36a915586d23b5cc5ae6e8f1e403bb8b7
MD5 fb9e0d782343ee0bfe8f480823054f26
SHA1 78eb0b325dc9ec36a3ae66dbd8e10815e9ade43b
SHA512 e21b2a29412b0b4a7dcc496421db8966b02b34e61c75e9a7c3ae7887d161554400c326afdd85c5dc5708ac021e12aed0b753c004a4cba68d2cf4e5fe17200bda
SSDEEP 49152:2TTGTTrVkco8V+lTRZT4p++aT1FIYO9rVkco8VkYOJTTrVkco8Vc:2TTGT3Vkco8V+lTRZT4p++aT1FIY2Vky
TLSH
T104C5FB9073E88D42FA72433899F79331373AFA425772CB0B9204A92D1D73BD66E91716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f9efc073694a6126fe5d078582449c36a915586d23b5cc5ae6e8f1e403bb8b7

File Explorer

2f9efc073694a6126fe5d078582449c36a915586d23b5cc5ae6e8f1e403bb8b7

.dll 2.5MB

2f9efc073694a6126fe5d078582449c36a915586d23b5cc5ae6e8f1e403bb8b7

IMPHASH 9b1817896de1274af817bc29f644c463
SHA256 2f9efc073694a6126fe5d078582449c36a915586d23b5cc5ae6e8f1e403bb8b7
MD5 fb9e0d782343ee0bfe8f480823054f26
SHA1 78eb0b325dc9ec36a3ae66dbd8e10815e9ade43b
SHA512 e21b2a29412b0b4a7dcc496421db8966b02b34e61c75e9a7c3ae7887d161554400c326afdd85c5dc5708ac021e12aed0b753c004a4cba68d2cf4e5fe17200bda
SSDEEP 49152:2TTGTTrVkco8V+lTRZT4p++aT1FIYO9rVkco8VkYOJTTrVkco8Vc:2TTGT3Vkco8V+lTRZT4p++aT1FIY2Vky
TLSH
T104C5FB9073E88D42FA72433899F79331373AFA425772CB0B9204A92D1D73BD66E91716
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7440

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

752B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

408B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

888B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

876B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

300KB

Virtual Size

296KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

4KB

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

4KB

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

4KB

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

4KB

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

4KB

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

4KB

Virtual Size

142B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2f9efc073694a6126fe5d078582449c36a915586d23b5cc5ae6e8f1e403bb8b7

advapi32

comctl32

kernel32

ntdll

shlwapi

ucrtbase

user32

generic