1613a9d5c9cc[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
1613a9d5c9cc.exe
Size 6.7MB
Sample260807-vg2ckagh96
SHA256 0a71ee15455ff202bfce1cf4f1b3b917db55ba0224e72339ea554d255b57412e
MD5 0c976814848115de708d0d2e3b6c6449
SHA1 665886bc94eda897963c0b634914f8d9c9916052
SHA512 47d857ee986e2f0f9886a311ff0b86bf901d804f451b5a98a9879a78c75ee3df71e1b425e02e7cf6064d875a16a489d8ed585dd8e4cd9a8b91d6e88c39ed0c6e
SSDEEP 49152:hya137mvE1arb/TQvO90dL3BmAFd4A64nsfJoJeFy8A/c35biclL9zUpWm54XTkb:33koM6ppEz/Dp9qQ/yAYNDuBTWKiwv
TLSH
T18F668C43F89491A4C5EED23085719292B6707C881F3137D32B60F7BA2A77BD8AE79354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1613a9d5c9cc.exe

File Explorer

1613a9d5c9cc.exe

.exe 6.7MB

1613a9d5c9cc.exe

IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
SHA256 0a71ee15455ff202bfce1cf4f1b3b917db55ba0224e72339ea554d255b57412e
MD5 0c976814848115de708d0d2e3b6c6449
SHA1 665886bc94eda897963c0b634914f8d9c9916052
SHA512 47d857ee986e2f0f9886a311ff0b86bf901d804f451b5a98a9879a78c75ee3df71e1b425e02e7cf6064d875a16a489d8ed585dd8e4cd9a8b91d6e88c39ed0c6e
SSDEEP 49152:hya137mvE1arb/TQvO90dL3BmAFd4A64nsfJoJeFy8A/c35biclL9zUpWm54XTkb:33koM6ppEz/Dp9qQ/yAYNDuBTWKiwv
TLSH
T18F668C43F89491A4C5EED23085719292B6707C881F3137D32B60F7BA2A77BD8AE79354
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

408864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

239KB

Virtual Size

621KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

295B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

386KB

Virtual Size

386KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

77KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

512B

Virtual Size

42B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/65

Size

640KB

Virtual Size

639KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

482KB

Virtual Size

481KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/90

Size

129KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

308KB

Virtual Size

308KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

1613a9d5c9cc.exe

kernel32

generic