252bdb12ba4e0d7a01797ac506ac1c522fdc361fe54e1198365cb37fcb7b3728

Sharing

Copy URL Twitter E-mail

General

Target
252bdb12ba4e0d7a01797ac506ac1c522fdc361fe54e1198365cb37fcb7b3728
Size 355KB
Sample260808-khevvace52
SHA256 252bdb12ba4e0d7a01797ac506ac1c522fdc361fe54e1198365cb37fcb7b3728
MD5 a75ace30bee1a869e7db98b0ec7dd501
SHA1 14ae312a200cfbd6c8dff9760c2c9e66ebf5a4fb
SHA512 69a3f3f773b0744a60958c93b7c3b0a71a8defbd29300390300a0ae3b8434d3e878be94e7d0dccf5132009f784afa3509a7dca9a52b159a52678624041094fc0
SSDEEP 6144:ZR+sGtdFVoZt4K/A/bucYNZ4Hju55qvwn8T:ZR+sCAt4eIomg2
TLSH
T1E4744A90E6A79895DD32A9B400BF93FA7338B71C5AA5CB57F798E4057C137E04E842C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
252bdb12ba4e0d7a01797ac506ac1c522fdc361fe54e1198365cb37fcb7b3728

File Explorer

252bdb12ba4e0d7a01797ac506ac1c522fdc361fe54e1198365cb37fcb7b3728

.dll 355KB

252bdb12ba4e0d7a01797ac506ac1c522fdc361fe54e1198365cb37fcb7b3728

IMPHASH 46f4267261b96af8c79ed1b067e20ffe
SHA256 252bdb12ba4e0d7a01797ac506ac1c522fdc361fe54e1198365cb37fcb7b3728
MD5 a75ace30bee1a869e7db98b0ec7dd501
SHA1 14ae312a200cfbd6c8dff9760c2c9e66ebf5a4fb
SHA512 69a3f3f773b0744a60958c93b7c3b0a71a8defbd29300390300a0ae3b8434d3e878be94e7d0dccf5132009f784afa3509a7dca9a52b159a52678624041094fc0
SSDEEP 6144:ZR+sGtdFVoZt4K/A/bucYNZ4Hju55qvwn8T:ZR+sCAt4eIomg2
TLSH
T1E4744A90E6A79895DD32A9B400BF93FA7338B71C5AA5CB57F798E4057C137E04E842C2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

192KB

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

116B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

16KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

32KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

252bdb12ba4e0d7a01797ac506ac1c522fdc361fe54e1198365cb37fcb7b3728

advapi32

comctl32

gdi32

kernel32

ntdll

ucrtbase

user32

generic