b952cd1923489b9f286fd3d7cd285525e3eaefe62478257232e565387e8ee624[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b952cd1923489b9f286fd3d7cd285525e3eaefe62478257232e565387e8ee624.exe
Size 12.5MB
Sample260809-229yrszzet
SHA256 b952cd1923489b9f286fd3d7cd285525e3eaefe62478257232e565387e8ee624
MD5 1762f1e64b02fdd3fb1c4a6b5b467da8
SHA1 7cecded9f03657ae1a6bddec9f4267cf61ec47fe
SHA512 46b31e2bca8a6f345e6f3c6f31fd5dab7d1310d2e745fafb7cd9f23caf105b8334d1389b3071207fea10ecb83bc1ce6243f8772104bf130ec08726147555aa22
SSDEEP 196608:FR2scOfFyEyjyFgiAYhEQBTRHYS4T1jfMhp+eAUpp6YGu:FRKOfgrOOQEUYH5jfkpxbpku
TLSH
T13CD622D9A4C4537CC8C08638E58189EAF0D97CCD5DF5D61AFF89C8327B30A59C9A1A27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b952cd1923489b9f286fd3d7cd285525e3eaefe62478257232e565387e8ee624.exe

File Explorer

b952cd1923489b9f286fd3d7cd285525e3eaefe62478257232e565387e8ee624.exe

.exe 12.5MB

b952cd1923489b9f286fd3d7cd285525e3eaefe62478257232e565387e8ee624.exe

IMPHASH 191228fe3ee7443a05e1ce4f67b800b4
SHA256 b952cd1923489b9f286fd3d7cd285525e3eaefe62478257232e565387e8ee624
MD5 1762f1e64b02fdd3fb1c4a6b5b467da8
SHA1 7cecded9f03657ae1a6bddec9f4267cf61ec47fe
SHA512 46b31e2bca8a6f345e6f3c6f31fd5dab7d1310d2e745fafb7cd9f23caf105b8334d1389b3071207fea10ecb83bc1ce6243f8772104bf130ec08726147555aa22
SSDEEP 196608:FR2scOfFyEyjyFgiAYhEQBTRHYS4T1jfMhp+eAUpp6YGu:FRKOfgrOOQEUYH5jfkpxbpku
TLSH
T13CD622D9A4C4537CC8C08638E58189EAF0D97CCD5DF5D61AFF89C8327B30A59C9A1A27
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14667874

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

482KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.CRT

Size

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ess0

Size

Virtual Size

9.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ess1

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ess2

Size

12.5MB

Virtual Size

12.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

565B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

b952cd1923489b9f286fd3d7cd285525e3eaefe62478257232e565387e8ee624.exe

d3d9

ws2_32

bcrypt

crypt32

ntdll

ucrtbase

kernel32

user32

gdi32

shell32

ole32

advapi32

generic