df8d99d49751fc8bb759c87bbb0162c6086343f1ddf1445408b00ec26ffc8c22

Sharing

Copy URL Twitter E-mail

General

Target
df8d99d49751fc8bb759c87bbb0162c6086343f1ddf1445408b00ec26ffc8c22
Size 96KB
Sample260806-e6wwdatame
SHA256 df8d99d49751fc8bb759c87bbb0162c6086343f1ddf1445408b00ec26ffc8c22
MD5 2ec5388e999bb21358783e9c2fffd007
SHA1 fccd062c3341054ec53a4e20223f28a048d0fd8b
SHA512 99195524e66f8d97dc04126064fe7a388d712d65d159da6a978dd50c0937c2c018e57edb29b7a017091e4b937d84720092694501168d97e34bf7e17e2098c241
SSDEEP 768:I0EtdM7XDSvoZRTywaX0CcNuXbtT8CUkefHi6QjRI61IJOe1VG5:ZBRT2XYm9oD4q6Io8Y5
TLSH
T171A3C69D7244AE93E51D43B89AEA53303BF9FA9807B317076465AA329D33FC139D4306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df8d99d49751fc8bb759c87bbb0162c6086343f1ddf1445408b00ec26ffc8c22

File Explorer

df8d99d49751fc8bb759c87bbb0162c6086343f1ddf1445408b00ec26ffc8c22

.dll 96KB

df8d99d49751fc8bb759c87bbb0162c6086343f1ddf1445408b00ec26ffc8c22

IMPHASH 2eea5196c0370ca12387c10c164a7efc
SHA256 df8d99d49751fc8bb759c87bbb0162c6086343f1ddf1445408b00ec26ffc8c22
MD5 2ec5388e999bb21358783e9c2fffd007
SHA1 fccd062c3341054ec53a4e20223f28a048d0fd8b
SHA512 99195524e66f8d97dc04126064fe7a388d712d65d159da6a978dd50c0937c2c018e57edb29b7a017091e4b937d84720092694501168d97e34bf7e17e2098c241
SSDEEP 768:I0EtdM7XDSvoZRTywaX0CcNuXbtT8CUkefHi6QjRI61IJOe1VG5:ZBRT2XYm9oD4q6Io8Y5
TLSH
T171A3C69D7244AE93E51D43B89AEA53303BF9FA9807B317076465AA329D33FC139D4306
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8080

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

4KB

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

228B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

212B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

136B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

df8d99d49751fc8bb759c87bbb0162c6086343f1ddf1445408b00ec26ffc8c22

kernel32

mfplat

ntdll

ucrtbase

user32

generic