b4aa46175caed8b82d3014280e798ea47fe366b53649a22f352cd8e8106fff06

Sharing

Copy URL Twitter E-mail

General

Target
b4aa46175caed8b82d3014280e798ea47fe366b53649a22f352cd8e8106fff06
Size 1.6MB
Sample260820-rap46sdl7x
SHA256 b4aa46175caed8b82d3014280e798ea47fe366b53649a22f352cd8e8106fff06
MD5 908213dc1089305761c4d8074466e7fd
SHA1 0a3f080af295ca790287a30c085b4eba349276af
SHA512 8abee1432185b350d47a1a32bb9bccec39089aa73c476bc2888a4f4f590a5747ea622a35deea5fb2be2745ed1dd1a85c5cdec51e928a0d26c8ab21aabceb4559
SSDEEP 12288:Srt0/GQ+TsUgVEu1qHRq9JZYUrbFrFx1XV2b7czpO+TJ0lO5RtJ2ipzz0SEK:utremu18oprj1kbcbJOO5vJ2ipD
TLSH
T190754915F2E192E4D87E95705F7D3536FA39B8804C74F9EE29B890392FB0B506888B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4aa46175caed8b82d3014280e798ea47fe366b53649a22f352cd8e8106fff06

File Explorer

b4aa46175caed8b82d3014280e798ea47fe366b53649a22f352cd8e8106fff06

.dll 1.6MB

b4aa46175caed8b82d3014280e798ea47fe366b53649a22f352cd8e8106fff06

IMPHASH 9c7d6672361b6259fdd951d388229871
SHA256 b4aa46175caed8b82d3014280e798ea47fe366b53649a22f352cd8e8106fff06
MD5 908213dc1089305761c4d8074466e7fd
SHA1 0a3f080af295ca790287a30c085b4eba349276af
SHA512 8abee1432185b350d47a1a32bb9bccec39089aa73c476bc2888a4f4f590a5747ea622a35deea5fb2be2745ed1dd1a85c5cdec51e928a0d26c8ab21aabceb4559
SSDEEP 12288:Srt0/GQ+TsUgVEu1qHRq9JZYUrbFrFx1XV2b7czpO+TJ0lO5RtJ2ipzz0SEK:utremu18oprj1kbcbJOO5vJ2ipD
TLSH
T190754915F2E192E4D87E95705F7D3536FA39B8804C74F9EE29B890392FB0B506888B17
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5952

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

320B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

944B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

20KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

b4aa46175caed8b82d3014280e798ea47fe366b53649a22f352cd8e8106fff06

advapi32

comctl32

gdi32

kernel32

ntdll

ucrtbase

user32

generic