ff27f82aff72c36f0f925c3be36431e5d7e0adb064b412ec572a5bd041dd0940

General

Target
ff27f82aff72c36f0f925c3be36431e5d7e0adb064b412ec572a5bd041dd0940
Size 957KB
Sample260730-pt4essssbw
SHA256 ff27f82aff72c36f0f925c3be36431e5d7e0adb064b412ec572a5bd041dd0940
MD5 2183160d9d8a5488271e933c90f7c496
SHA1 70981da6cc7ce6872db46eddd3e3c87375312b05
SHA512 a7da34c62aea89a3c4b0fe68ac16e30d9ed682616f6a0a1e47537c23b482d0ca4c4b5b41ea98415a6f4bda747b1441a01fa6f492dfb69d5ccc09291710ce7725
SSDEEP 12288:4hh2cTSJrY82IFAff0L/MYL8NM2nEFeQA8EIY8rQqt+YRNDy/6YMLE0utj:c2fc8K0LyFn2lA8EIHUqAR6BLy
TLSH
T1682533ED0ADAA2F2C5B4545C0F683135CE59320AE96675C9B69E1B46F72F8CF0C1C08B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SVR26-616 - PDA - MARLIN DUA - TLP.exe

File Explorer

ff27f82aff72c36f0f925c3be36431e5d7e0adb064b412ec572a5bd041dd0940

.zip 957KB
SVR26-616 - PDA - MARLIN DUA - TLP.exe

.exe 1.0MB

ff27f82aff72c36f0f925c3be36431e5d7e0adb064b412ec572a5bd041dd0940

SHA256 ff27f82aff72c36f0f925c3be36431e5d7e0adb064b412ec572a5bd041dd0940
MD5 2183160d9d8a5488271e933c90f7c496
SHA1 70981da6cc7ce6872db46eddd3e3c87375312b05
SHA512 a7da34c62aea89a3c4b0fe68ac16e30d9ed682616f6a0a1e47537c23b482d0ca4c4b5b41ea98415a6f4bda747b1441a01fa6f492dfb69d5ccc09291710ce7725
SSDEEP 12288:4hh2cTSJrY82IFAff0L/MYL8NM2nEFeQA8EIY8rQqt+YRNDy/6YMLE0utj:c2fc8K0LyFn2lA8EIHUqAR6BLy
TLSH
T1682533ED0ADAA2F2C5B4545C0F683135CE59320AE96675C9B69E1B46F72F8CF0C1C08B
MD5 SHA1 SHA512 SSDEEP TLSH

SVR26-616 - PDA - MARLIN DUA - TLP.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 907dd5d4c793cf6774a8f6638574b35ba6e6c9b10db51434eb5f60e4cee237df
MD5 c5dc6a44af7a7b465f7b356f03116fd3
SHA1 a76894554c1da14d5a4355a20bda3b4b1911dac6
SHA512 8f7ba5c26367417c7331e114ed1824d86e6fb77d2ab650564771cf797e78d4a88e0edc3a6e4f045a0f98af411da54bad41c556eee6fcbb731f3fffa5703bbbde
SSDEEP 24576:5eA9sfIew0L0FxUhA8eQrT0UHvZI+LfC:gUsf7CxUhXrVHvtrC
TLSH
T1D02502982B5AD613C49497B80A72E3B4173D2EDAE401E30B9FDDBDEB763AF454C04252
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1058394

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ff27f82aff72c36f0f925c3be36431e5d7e0adb064b412ec572a5bd041dd0940

SVR26-616 - PDA - MARLIN DUA - TLP.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

ff27f82aff72c36f0f925c3be36431e5d7e0adb064b412ec572a5bd041dd0940

SVR26-616 - PDA - MARLIN DUA - TLP.exe

mscoree

dotnet