4fd46390cf7f4e6098d606066f55bd5497d3ef41ab4378853599a1a815195e50

Sharing

Copy URL Twitter E-mail

General

Target
4fd46390cf7f4e6098d606066f55bd5497d3ef41ab4378853599a1a815195e50
Size 56KB
Sample260809-vbf5favwey
SHA256 4fd46390cf7f4e6098d606066f55bd5497d3ef41ab4378853599a1a815195e50
MD5 de4553857a94398549139497dc3b82e8
SHA1 acdfb3f70eb3c56192ad0b4fca011b4d768c8d00
SHA512 0dcd8c2a6dc99a93ca35b582760ce2e94cdeb3d83cef7894e5644b2cbb51932fec5747e49f8083b4fca32baaa5cae0ecf3ee5a49903e55caed5d6c645791224f
SSDEEP 768:IekqMqr8crpEQ4zbUcMjcZYIMExnJywhc/2ciyBwgVtcDvvVcf:MLc154
TLSH
T1E1432F07E3DF095DF4FA2AF52DFF95559A3BFC305870D81E9180612E1A75EA1AA20323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fd46390cf7f4e6098d606066f55bd5497d3ef41ab4378853599a1a815195e50

File Explorer

4fd46390cf7f4e6098d606066f55bd5497d3ef41ab4378853599a1a815195e50

.exe 56KB

4fd46390cf7f4e6098d606066f55bd5497d3ef41ab4378853599a1a815195e50

IMPHASH 6a27d1bfe88be6e8a7115ea76eba15d5
SHA256 4fd46390cf7f4e6098d606066f55bd5497d3ef41ab4378853599a1a815195e50
MD5 de4553857a94398549139497dc3b82e8
SHA1 acdfb3f70eb3c56192ad0b4fca011b4d768c8d00
SHA512 0dcd8c2a6dc99a93ca35b582760ce2e94cdeb3d83cef7894e5644b2cbb51932fec5747e49f8083b4fca32baaa5cae0ecf3ee5a49903e55caed5d6c645791224f
SSDEEP 768:IekqMqr8crpEQ4zbUcMjcZYIMExnJywhc/2ciyBwgVtcDvvVcf:MLc154
TLSH
T1E1432F07E3DF095DF4FA2AF52DFF95559A3BFC305870D81E9180612E1A75EA1AA20323
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10608

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

952B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

4fd46390cf7f4e6098d606066f55bd5497d3ef41ab4378853599a1a815195e50

advapi32

kernel32

ntdll

secur32

ucrtbase

user32

generic