5d9fbba92d8261415e4b09225e1823c9abbe7d1d81776ea5085247ebce96cdc1

Sharing

Copy URL Twitter E-mail

General

Target
5d9fbba92d8261415e4b09225e1823c9abbe7d1d81776ea5085247ebce96cdc1
Size 3.8MB
Sample260825-tx2slastfw
SHA256 5d9fbba92d8261415e4b09225e1823c9abbe7d1d81776ea5085247ebce96cdc1
MD5 5a29ceb407d9edc2b2f982774d395813
SHA1 48726c7dd2d429ed41c73fea7ded2019abc627ac
SHA512 9c85fd00703a3e609407cb1ed635fac482141f2c359e7ccc208ddb72c24ddc464bcd384b39e715b58b7fdcb250d00262e5fe943841c9440f22afa7eeb781cdd1
SSDEEP 98304:FnilbYFBJjBrOm1CF7v7eJYUCTX7GeqHTWRw7nZIyZDg9:FcWzNXYUCb0HuQZZ
TLSH
T1C716224B9BC354A5D857E6F01206EB3FFA741A91C560CC6E99C89E85EC7302BB73250E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d9fbba92d8261415e4b09225e1823c9abbe7d1d81776ea5085247ebce96cdc1

File Explorer

5d9fbba92d8261415e4b09225e1823c9abbe7d1d81776ea5085247ebce96cdc1

.dll 3.8MB

5d9fbba92d8261415e4b09225e1823c9abbe7d1d81776ea5085247ebce96cdc1

IMPHASH e20738bd444fd50160f9530901fe9db7
SHA256 5d9fbba92d8261415e4b09225e1823c9abbe7d1d81776ea5085247ebce96cdc1
MD5 5a29ceb407d9edc2b2f982774d395813
SHA1 48726c7dd2d429ed41c73fea7ded2019abc627ac
SHA512 9c85fd00703a3e609407cb1ed635fac482141f2c359e7ccc208ddb72c24ddc464bcd384b39e715b58b7fdcb250d00262e5fe943841c9440f22afa7eeb781cdd1
SSDEEP 98304:FnilbYFBJjBrOm1CF7v7eJYUCTX7GeqHTWRw7nZIyZDg9:FcWzNXYUCb0HuQZZ
TLSH
T1C716224B9BC354A5D857E6F01206EB3FFA741A91C560CC6E99C89E85EC7302BB73250E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3882046

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

218KB

Virtual Size

217KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.LU}

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.eH4

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.&gY

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.~m1

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

5d9fbba92d8261415e4b09225e1823c9abbe7d1d81776ea5085247ebce96cdc1

kernel32

user32

shell32

ws2_32

msvcr100

generic