0ef5303ba4e7beada2a5024f7adcacb5adceac7cfcb192f14b546b8c4ce8d295

General

Target
0ef5303ba4e7beada2a5024f7adcacb5adceac7cfcb192f14b546b8c4ce8d295
Size 10.1MB
Sample260809-lycabshh59
SHA256 0ef5303ba4e7beada2a5024f7adcacb5adceac7cfcb192f14b546b8c4ce8d295
MD5 c03516f4d84e54e6093f586dbc6c0e1a
SHA1 873c898152c15bc8ec73e6dc2323d9a41ff91d88
SHA512 2f8939c286a6640a89b63861f167031f4c61c9094e79560ea2bdb2f9bc17a1663bda18ef64118a23112eb50904e5e431bbbe2006383074e5d213307f3b10b1e9
SSDEEP 196608:CqS/W18hB/Mf4n5aIEwZ3LKUlqtRl6XkaNH/RcGBpFddflAUCJY7:dS/W18rMfK5ayIwnH/TBpTdflZCG
TLSH
T1C1B6335E2EC7418BE8C41471A71B3BEB23B36DB60D964C7678C134896072FB6702B997
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ef5303ba4e7beada2a5024f7adcacb5adceac7cfcb192f14b546b8c4ce8d295

File Explorer

0ef5303ba4e7beada2a5024f7adcacb5adceac7cfcb192f14b546b8c4ce8d295

.exe 10.1MB

0ef5303ba4e7beada2a5024f7adcacb5adceac7cfcb192f14b546b8c4ce8d295

IMPHASH 879056b3b0ba75c34c70209d20925d2d
SHA256 0ef5303ba4e7beada2a5024f7adcacb5adceac7cfcb192f14b546b8c4ce8d295
MD5 c03516f4d84e54e6093f586dbc6c0e1a
SHA1 873c898152c15bc8ec73e6dc2323d9a41ff91d88
SHA512 2f8939c286a6640a89b63861f167031f4c61c9094e79560ea2bdb2f9bc17a1663bda18ef64118a23112eb50904e5e431bbbe2006383074e5d213307f3b10b1e9
SSDEEP 196608:CqS/W18hB/Mf4n5aIEwZ3LKUlqtRl6XkaNH/RcGBpFddflAUCJY7:dS/W18rMfK5ayIwnH/TBpTdflZCG
TLSH
T1C1B6335E2EC7418BE8C41471A71B3BEB23B36DB60D964C7678C134896072FB6702B997
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16397753

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

644KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

751KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

271KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.v~y

Size

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.(U^

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.!u*

Size

10.0MB

Virtual Size

10.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

0ef5303ba4e7beada2a5024f7adcacb5adceac7cfcb192f14b546b8c4ce8d295

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

generic

Sharing

General

Malware Config

Signatures

File Explorer

0ef5303ba4e7beada2a5024f7adcacb5adceac7cfcb192f14b546b8c4ce8d295

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

generic