b4fac9c12a5066e99ed45cf5b3ba536064701e6a869b285e08a569f6c2450aa8

Sharing

Copy URL Twitter E-mail

General

Target
b4fac9c12a5066e99ed45cf5b3ba536064701e6a869b285e08a569f6c2450aa8
Size 684KB
Sample260825-v428daab77
SHA256 b4fac9c12a5066e99ed45cf5b3ba536064701e6a869b285e08a569f6c2450aa8
MD5 7ead947f6dc2dc82b4b92f0453701f15
SHA1 80fdcffb57324efd4f41adb38dda5d0ada5f6138
SHA512 f36cc6113844dbd6b0da2dd671b6bbf8b97c461d1a3eb079aa02de178c6cf819bec58484d043f20a9fc26634018c44566a0e26c8621221f668c6983a252760da
SSDEEP 3072:JD+oCOoNGL7aL7oaL7aL77I3HEVEXEMV6rc99Od4njUYkQJzEN8zmbIDywi6Vezm:JDPCOoNg/b2uSUoj
TLSH
T178E4D7036127E1F4E8289836064739F613C69CA55E09BD127099FF3779721E4FD2AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4fac9c12a5066e99ed45cf5b3ba536064701e6a869b285e08a569f6c2450aa8

File Explorer

b4fac9c12a5066e99ed45cf5b3ba536064701e6a869b285e08a569f6c2450aa8

.exe 684KB

b4fac9c12a5066e99ed45cf5b3ba536064701e6a869b285e08a569f6c2450aa8

SHA256 b4fac9c12a5066e99ed45cf5b3ba536064701e6a869b285e08a569f6c2450aa8
MD5 7ead947f6dc2dc82b4b92f0453701f15
SHA1 80fdcffb57324efd4f41adb38dda5d0ada5f6138
SHA512 f36cc6113844dbd6b0da2dd671b6bbf8b97c461d1a3eb079aa02de178c6cf819bec58484d043f20a9fc26634018c44566a0e26c8621221f668c6983a252760da
SSDEEP 3072:JD+oCOoNGL7aL7oaL7aL77I3HEVEXEMV6rc99Od4njUYkQJzEN8zmbIDywi6Vezm:JDPCOoNg/b2uSUoj
TLSH
T178E4D7036127E1F4E8289836064739F613C69CA55E09BD127099FF3779721E4FD2AB2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14249

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

325KB

Virtual Size

325KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.obf

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.obf

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b4fac9c12a5066e99ed45cf5b3ba536064701e6a869b285e08a569f6c2450aa8

generic