379bc459bf8ac10275210b2e0a087b069a0fb60f422ddc94d192628980c41623

Sharing

Copy URL Twitter E-mail

General

Target
379bc459bf8ac10275210b2e0a087b069a0fb60f422ddc94d192628980c41623
Size 1.3MB
Sample260729-ed1nvstdqb
SHA256 379bc459bf8ac10275210b2e0a087b069a0fb60f422ddc94d192628980c41623
MD5 c608c5720485ff7a0eb296f1b11abab7
SHA1 076fc119d44466868da9e4d85a10c24e252a9991
SHA512 148c7583a01b1ebe38c17104345c33994f147b48495115b3a2268690c4f3f4edfac9d0b1ec6d36ba687c7084237a325ce0682395bd00a518e41fde59bc9abbb3
SSDEEP 6144:eJX03btS9L7hXKKtxWpwWfE/VGn8ihrzxNtqDJ7A4y9PKjIP8EJX03btS9L7hXKP:iJ0ZCjIkES6IUNilz8IUDSfFCra0cj
TLSH
T1A255A59072F468A3EA53833958E7E1213739B6421367DF0BD104593D2E7B7D32ED6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
379bc459bf8ac10275210b2e0a087b069a0fb60f422ddc94d192628980c41623

File Explorer

379bc459bf8ac10275210b2e0a087b069a0fb60f422ddc94d192628980c41623

.exe 1.3MB

379bc459bf8ac10275210b2e0a087b069a0fb60f422ddc94d192628980c41623

IMPHASH 2928a5aa1bcd05a5cf1f77d0862ac9ed
SHA256 379bc459bf8ac10275210b2e0a087b069a0fb60f422ddc94d192628980c41623
MD5 c608c5720485ff7a0eb296f1b11abab7
SHA1 076fc119d44466868da9e4d85a10c24e252a9991
SHA512 148c7583a01b1ebe38c17104345c33994f147b48495115b3a2268690c4f3f4edfac9d0b1ec6d36ba687c7084237a325ce0682395bd00a518e41fde59bc9abbb3
SSDEEP 6144:eJX03btS9L7hXKKtxWpwWfE/VGn8ihrzxNtqDJ7A4y9PKjIP8EJX03btS9L7hXKP:iJ0ZCjIkES6IUNilz8IUDSfFCra0cj
TLSH
T1A255A59072F468A3EA53833958E7E1213739B6421367DF0BD104593D2E7B7D32ED6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

608B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

4KB

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

4KB

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

4KB

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

4KB

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

4KB

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

4KB

Virtual Size

142B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

379bc459bf8ac10275210b2e0a087b069a0fb60f422ddc94d192628980c41623

iphlpapi

kernel32

ucrtbase

user32

ws2_32

generic