a40c822007238c997c5546ef474e5bfa7143c59ce8e5d7b4506671eabd0f9097

Sharing

Copy URL Twitter E-mail

General

Target
a40c822007238c997c5546ef474e5bfa7143c59ce8e5d7b4506671eabd0f9097
Size 244KB
Sample260826-e227layxbv
SHA256 a40c822007238c997c5546ef474e5bfa7143c59ce8e5d7b4506671eabd0f9097
MD5 c291016b78291b626a0e8f0a970055fa
SHA1 b2a2d0c48e125f1fd9a03e3b1b5b2ed92a7c1fd6
SHA512 8dba482adc45fa768889dc4e343c6d87fd9458f373a514b690741ee7d900ab1bed2c744df209fb7da25b2820c6cb9c4661f42f1b971137a7723d372e2e4aeaee
SSDEEP 6144:suGjKi8TiL07BeJ36MDc4SXB5eqiLo9yHUtC:sOio7BY6MDc4SXB5p0
TLSH
T16C343D89FB0310F1E11786B14EAFD3FB8720765682669BBBFB4FDA41B4727012D45289
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a40c822007238c997c5546ef474e5bfa7143c59ce8e5d7b4506671eabd0f9097

File Explorer

a40c822007238c997c5546ef474e5bfa7143c59ce8e5d7b4506671eabd0f9097

.dll 244KB

a40c822007238c997c5546ef474e5bfa7143c59ce8e5d7b4506671eabd0f9097

IMPHASH b1fbc72a2bde72a9dae5546e981497cc
SHA256 a40c822007238c997c5546ef474e5bfa7143c59ce8e5d7b4506671eabd0f9097
MD5 c291016b78291b626a0e8f0a970055fa
SHA1 b2a2d0c48e125f1fd9a03e3b1b5b2ed92a7c1fd6
SHA512 8dba482adc45fa768889dc4e343c6d87fd9458f373a514b690741ee7d900ab1bed2c744df209fb7da25b2820c6cb9c4661f42f1b971137a7723d372e2e4aeaee
SSDEEP 6144:suGjKi8TiL07BeJ36MDc4SXB5eqiLo9yHUtC:sOio7BY6MDc4SXB5p0
TLSH
T16C343D89FB0310F1E11786B14EAFD3FB8720765682669BBBFB4FDA41B4727012D45289
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

161KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

332B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

a40c822007238c997c5546ef474e5bfa7143c59ce8e5d7b4506671eabd0f9097

kernel32

msvcrt

generic