4p9lecj2ye2gnm73_crypted[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
4p9lecj2ye2gnm73_crypted.exe
Size 4.6MB
Sample260806-traf6aah73
SHA256 731da94f5f1e5854691f0b9693135ffca4b2dcc70754b7f8002e289ce79f7817
MD5 de6a69f54c602e13212649a090d7e1a0
SHA1 bca45a84680d1f5e02bad16f3035979fc5c96114
SHA512 612aee50dd9e7659f530351461edc7ed45d7c017655f02a191080df1486a26b237285a0ca8e46f71528c52a3f01b5a41c29348273de8553fc0489f10541284c2
SSDEEP 49152:P+a/LNMQpSDHDRJWSIRx+BA+u6bWzxuLutB4TN:np6KzxuLutBG
TLSH
T1BA266A4652A3C899E16A0B79140C4F28C0517ECCB7E5DAC3F377A570D4E8ADEA83E5C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4p9lecj2ye2gnm73_crypted.exe

File Explorer

4p9lecj2ye2gnm73_crypted.exe

.exe 4.6MB

4p9lecj2ye2gnm73_crypted.exe

IMPHASH acf8077926a8d76d0f11301678f4f593
SHA256 731da94f5f1e5854691f0b9693135ffca4b2dcc70754b7f8002e289ce79f7817
MD5 de6a69f54c602e13212649a090d7e1a0
SHA1 bca45a84680d1f5e02bad16f3035979fc5c96114
SHA512 612aee50dd9e7659f530351461edc7ed45d7c017655f02a191080df1486a26b237285a0ca8e46f71528c52a3f01b5a41c29348273de8553fc0489f10541284c2
SSDEEP 49152:P+a/LNMQpSDHDRJWSIRx+BA+u6bWzxuLutB4TN:np6KzxuLutBG
TLSH
T1BA266A4652A3C899E16A0B79140C4F28C0517ECCB7E5DAC3F377A570D4E8ADEA83E5C6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

360B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

1004B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

249KB

Virtual Size

248KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.jnk

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

4p9lecj2ye2gnm73_crypted.exe

gdi32

kernel32

shell32

user32

generic