ac2f4ccb5595f373cdcbf381bd5c445a79ca764e3ec14b23d6fc95444977213e

Sharing

Copy URL Twitter E-mail

General

Target
ac2f4ccb5595f373cdcbf381bd5c445a79ca764e3ec14b23d6fc95444977213e
Size 114KB
Sample260729-e546csgn6s
SHA256 ac2f4ccb5595f373cdcbf381bd5c445a79ca764e3ec14b23d6fc95444977213e
MD5 dc8895e3b1b9f2799d71eac3d00efc54
SHA1 16490c8c1c01c83af82ecd1a604d4e9054d46dab
SHA512 1eb6f1eda2bf136a600872b522d378f992925e434cd3a745b478e2a3e5dd0aaa0f42074cf16756767e49737f54eea0570bb08fa298f26077010bf85e72afe534
SSDEEP 1536:gX9al3PL/NvlZdA37b4RBfPdG1mRYSffCdzOO:gNal37ouidSO
TLSH
T100B333D473A81485FA76933C5AEA83302B3EFAD1DAF297071540F6161D63AC02DD673A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac2f4ccb5595f373cdcbf381bd5c445a79ca764e3ec14b23d6fc95444977213e

File Explorer

ac2f4ccb5595f373cdcbf381bd5c445a79ca764e3ec14b23d6fc95444977213e

.exe 114KB

ac2f4ccb5595f373cdcbf381bd5c445a79ca764e3ec14b23d6fc95444977213e

IMPHASH db920339ae0f2e8486b3238de0857719
SHA256 ac2f4ccb5595f373cdcbf381bd5c445a79ca764e3ec14b23d6fc95444977213e
MD5 dc8895e3b1b9f2799d71eac3d00efc54
SHA1 16490c8c1c01c83af82ecd1a604d4e9054d46dab
SHA512 1eb6f1eda2bf136a600872b522d378f992925e434cd3a745b478e2a3e5dd0aaa0f42074cf16756767e49737f54eea0570bb08fa298f26077010bf85e72afe534
SSDEEP 1536:gX9al3PL/NvlZdA37b4RBfPdG1mRYSffCdzOO:gNal37ouidSO
TLSH
T100B333D473A81485FA76933C5AEA83302B3EFAD1DAF297071540F6161D63AC02DD673A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

4KB

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

4KB

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

4KB

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

4KB

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

4KB

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

4KB

Virtual Size

142B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ac2f4ccb5595f373cdcbf381bd5c445a79ca764e3ec14b23d6fc95444977213e

kernel32

ntdll

ole32

oleaut32

shell32

ucrtbase

user32

generic