ce052e034b6ad2ac84135b7d8d68ff402883b949498afcd4756550d3a196a962[.]bin[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ce052e034b6ad2ac84135b7d8d68ff402883b949498afcd4756550d3a196a962.bin.exe
Size 86.7MB
Sample260818-pterfatwcs
SHA256 ce052e034b6ad2ac84135b7d8d68ff402883b949498afcd4756550d3a196a962
MD5 a17360b6a8c2e4e28c3e8f18615bd782
SHA1 345699ab28872b3cc0bd9ccaf8af703a4c0f2bbd
SHA512 992957441d60d80f1cf204ac9a5ffbd07a00b7fac4557d3cfbd5bc62407df4dbf9c063dd0cd0a344c36ce866a4c5b969791382a69a5cfe37bd3bf0b8ed7c44c8
SSDEEP 1572864:gRySTL2GCvLb8X8XEd/mj2ks1sj/wdyiDt4bjGo9nMi5h3t/ybqNRy9pr9G2gizk:6/Jt4Hl9FL3JJEvxWeGl1te3ATcqj
TLSH
T12D18330E2CC148DBC4A6637689B795917B72BC1A1FB227D72DA172782F7A3E04D31B44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce052e034b6ad2ac84135b7d8d68ff402883b949498afcd4756550d3a196a962.bin.exe

File Explorer

ce052e034b6ad2ac84135b7d8d68ff402883b949498afcd4756550d3a196a962.bin.exe

.exe 86.7MB

ce052e034b6ad2ac84135b7d8d68ff402883b949498afcd4756550d3a196a962.bin.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 ce052e034b6ad2ac84135b7d8d68ff402883b949498afcd4756550d3a196a962
MD5 a17360b6a8c2e4e28c3e8f18615bd782
SHA1 345699ab28872b3cc0bd9ccaf8af703a4c0f2bbd
SHA512 992957441d60d80f1cf204ac9a5ffbd07a00b7fac4557d3cfbd5bc62407df4dbf9c063dd0cd0a344c36ce866a4c5b969791382a69a5cfe37bd3bf0b8ed7c44c8
SSDEEP 1572864:gRySTL2GCvLb8X8XEd/mj2ks1sj/wdyiDt4bjGo9nMi5h3t/ybqNRy9pr9G2gizk:6/Jt4Hl9FL3JJEvxWeGl1te3ATcqj
TLSH
T12D18330E2CC148DBC4A6637689B795917B72BC1A1FB227D72DA172782F7A3E04D31B44
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

472352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

596KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

56KB

Virtual Size

348KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

102KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ce052e034b6ad2ac84135b7d8d68ff402883b949498afcd4756550d3a196a962.bin.exe

kernel32

generic