ca797f964f9e0c9d75b3351aea2f652e701cf8a6a2b01e63f99074bf57f61f44

Sharing

Copy URL Twitter E-mail

General

Target
ca797f964f9e0c9d75b3351aea2f652e701cf8a6a2b01e63f99074bf57f61f44
Size 178KB
Sample260804-25ft4asfne
SHA256 ca797f964f9e0c9d75b3351aea2f652e701cf8a6a2b01e63f99074bf57f61f44
MD5 b3df9c71e1e61ea98287373d075b7f7a
SHA1 f1fa895a261608036cc93934ee201c3e48c10fff
SHA512 15ecabed2a82627bc86b96f5058d3c516b7f16725ee328a9faefaa1c5b4b116eccbc48fb1effb8365fd69e81d81b2c675a931c29f138f0779d442c7fb42e7b0e
SSDEEP 3072:DP7W94Aq86yIBjNR0xK9usKxqeXS2/qflJPcVuhGcmvIKTxK7VO9pEmeQ4Fa/YW6:DC94Aq86XR0xK9usKnS2CfldcQlL6QVX
TLSH
T1F6041282924B7AF2F18717B50B1BFF8DF6B006E0D98CC84AB7D8274597624256DFA1D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca797f964f9e0c9d75b3351aea2f652e701cf8a6a2b01e63f99074bf57f61f44

File Explorer

ca797f964f9e0c9d75b3351aea2f652e701cf8a6a2b01e63f99074bf57f61f44

.dll 178KB

ca797f964f9e0c9d75b3351aea2f652e701cf8a6a2b01e63f99074bf57f61f44

IMPHASH ae47641aed15ca82c1fb48b0445fb1d5
SHA256 ca797f964f9e0c9d75b3351aea2f652e701cf8a6a2b01e63f99074bf57f61f44
MD5 b3df9c71e1e61ea98287373d075b7f7a
SHA1 f1fa895a261608036cc93934ee201c3e48c10fff
SHA512 15ecabed2a82627bc86b96f5058d3c516b7f16725ee328a9faefaa1c5b4b116eccbc48fb1effb8365fd69e81d81b2c675a931c29f138f0779d442c7fb42e7b0e
SSDEEP 3072:DP7W94Aq86yIBjNR0xK9usKxqeXS2/qflJPcVuhGcmvIKTxK7VO9pEmeQ4Fa/YW6:DC94Aq86XR0xK9usKnS2CfldcQlL6QVX
TLSH
T1F6041282924B7AF2F18717B50B1BFF8DF6B006E0D98CC84AB7D8274597624256DFA1D0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2411308

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

Virtual Size

1012B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xqXq

Size

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.kTNs

Size

176KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

232B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ca797f964f9e0c9d75b3351aea2f652e701cf8a6a2b01e63f99074bf57f61f44

kernel32

msvcrt

user32

generic