ca6a23f3ae7cbb125ad75eaf1e3a1a399c0bababb62580c647b3f3229016f16d

General

Target
ca6a23f3ae7cbb125ad75eaf1e3a1a399c0bababb62580c647b3f3229016f16d
Size 616KB
Sample260807-lttntasbnd
SHA256 ca6a23f3ae7cbb125ad75eaf1e3a1a399c0bababb62580c647b3f3229016f16d
MD5 165e50bec8df65cdf1ebf4f9fde6415c
SHA1 79a556cb9c6714661fcbca3f053725c6186a99f2
SHA512 0b0f4b3feaa0b6d1432f837a7057dc5f13359d7bd3e030fc965d9eb2073c3c074ea46b78df969616d93804db756ed7378e807ab68e2880c8b24c1ae302b58fc1
SSDEEP 6144:HvGDukHgqehOEUbBgH1onbVhm3gBC1OUdK8N+VQs7PlWlBjPKXPXwboCTms51t1R:Pqj81OYKPlWlBjifyPTmfWFfO
TLSH
T104D48D619DF0D418EC3AD6F0AABB55319F015673D6671BB4828630AFCBB146F2C9838D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca6a23f3ae7cbb125ad75eaf1e3a1a399c0bababb62580c647b3f3229016f16d

File Explorer

ca6a23f3ae7cbb125ad75eaf1e3a1a399c0bababb62580c647b3f3229016f16d

.exe 616KB

ca6a23f3ae7cbb125ad75eaf1e3a1a399c0bababb62580c647b3f3229016f16d

SHA256 ca6a23f3ae7cbb125ad75eaf1e3a1a399c0bababb62580c647b3f3229016f16d
MD5 165e50bec8df65cdf1ebf4f9fde6415c
SHA1 79a556cb9c6714661fcbca3f053725c6186a99f2
SHA512 0b0f4b3feaa0b6d1432f837a7057dc5f13359d7bd3e030fc965d9eb2073c3c074ea46b78df969616d93804db756ed7378e807ab68e2880c8b24c1ae302b58fc1
SSDEEP 6144:HvGDukHgqehOEUbBgH1onbVhm3gBC1OUdK8N+VQs7PlWlBjPKXPXwboCTms51t1R:Pqj81OYKPlWlBjifyPTmfWFfO
TLSH
T104D48D619DF0D418EC3AD6F0AABB55319F015673D6671BB4828630AFCBB146F2C9838D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:0 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

0

Entry point

647168

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

14KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

565KB

Virtual Size

568KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vr

Size

27KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mmym

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ca6a23f3ae7cbb125ad75eaf1e3a1a399c0bababb62580c647b3f3229016f16d

generic