10eca329034ee99e56a86b429a7537c3b3d927874a585465a4b05813a1da0d32

Sharing

Copy URL Twitter E-mail

General

Target
10eca329034ee99e56a86b429a7537c3b3d927874a585465a4b05813a1da0d32
Size 132KB
Sample260820-sc1jcszblh
SHA256 10eca329034ee99e56a86b429a7537c3b3d927874a585465a4b05813a1da0d32
MD5 742ddc6ef87aa18a47b1a4b8bfbfd84f
SHA1 31923fd73df6f0f87afea56c231bc29db21c55c5
SHA512 79e936cc41deb45da8f4ddb7879876a182d47f324ef26e75c1308e82b62b9a513d92484a0946126fbbb9930340e5c4f08a0a6297d8d0eef78223c9921a087064
SSDEEP 1536:agaqLWz2STLUPgImKp1+AV+cioOOcMlq9h7oTXYi1T32GNX:19LCHUPgupBgci0fq9uTXV1TGG1
TLSH
T12AD36B176BC6C134F1B68D34A6F912729B3138011A20C69F97A0EA1F5CF0E94DD79B6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10eca329034ee99e56a86b429a7537c3b3d927874a585465a4b05813a1da0d32

File Explorer

10eca329034ee99e56a86b429a7537c3b3d927874a585465a4b05813a1da0d32

.dll 132KB

10eca329034ee99e56a86b429a7537c3b3d927874a585465a4b05813a1da0d32

IMPHASH ca4732b32bac9f70221c069d966a2c72
SHA256 10eca329034ee99e56a86b429a7537c3b3d927874a585465a4b05813a1da0d32
MD5 742ddc6ef87aa18a47b1a4b8bfbfd84f
SHA1 31923fd73df6f0f87afea56c231bc29db21c55c5
SHA512 79e936cc41deb45da8f4ddb7879876a182d47f324ef26e75c1308e82b62b9a513d92484a0946126fbbb9930340e5c4f08a0a6297d8d0eef78223c9921a087064
SSDEEP 1536:agaqLWz2STLUPgImKp1+AV+cioOOcMlq9h7oTXYi1T32GNX:19LCHUPgupBgci0fq9uTXV1TGG1
TLSH
T12AD36B176BC6C134F1B68D34A6F912729B3138011A20C69F97A0EA1F5CF0E94DD79B6B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

324B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

364B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

76KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

10eca329034ee99e56a86b429a7537c3b3d927874a585465a4b05813a1da0d32

advapi32

comctl32

gdi32

kernel32

ntdll

ole32

ucrtbase

user32

generic