c053f1d20b5c2bb97167e253b6bcaa0696fabcb5ec1159520288de0f719bb590

General

Target
c053f1d20b5c2bb97167e253b6bcaa0696fabcb5ec1159520288de0f719bb590
Size 180KB
Sample260826-traf6ascle
SHA256 c053f1d20b5c2bb97167e253b6bcaa0696fabcb5ec1159520288de0f719bb590
MD5 1b4357cacc2beef15c4b7ba6761dc9fb
SHA1 352108cfa873ecfb86d951ae8bc8e996ae93d7ca
SHA512 b5b81f063dece49727d899e658eb06947ec078e568256d88562e7a514af310081694e6d78b3bacf2f56ad222b7962ec336a34748c915290851f21215fdf99830
SSDEEP 1536:/0F1DigcNqg+s50LLPbX7f4eJaZ6wvxNdupzMd4xnHPMJnGI3TvY:EJSN+sQPbX7f4eJG6wvx+pzMAPMJ4
TLSH
T17D048AA163FA4204FAF37F7499B812A46F3A7D65AF38C1CF11A1401D89B1ED09970B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c053f1d20b5c2bb97167e253b6bcaa0696fabcb5ec1159520288de0f719bb590

File Explorer

c053f1d20b5c2bb97167e253b6bcaa0696fabcb5ec1159520288de0f719bb590

.exe 180KB

c053f1d20b5c2bb97167e253b6bcaa0696fabcb5ec1159520288de0f719bb590

IMPHASH 0925ea1485bee57fd614ff4dcccffdbf
SHA256 c053f1d20b5c2bb97167e253b6bcaa0696fabcb5ec1159520288de0f719bb590
MD5 1b4357cacc2beef15c4b7ba6761dc9fb
SHA1 352108cfa873ecfb86d951ae8bc8e996ae93d7ca
SHA512 b5b81f063dece49727d899e658eb06947ec078e568256d88562e7a514af310081694e6d78b3bacf2f56ad222b7962ec336a34748c915290851f21215fdf99830
SSDEEP 1536:/0F1DigcNqg+s50LLPbX7f4eJaZ6wvxNdupzMd4xnHPMJnGI3TvY:EJSN+sQPbX7f4eJG6wvx+pzMAPMJ4
TLSH
T17D048AA163FA4204FAF37F7499B812A46F3A7D65AF38C1CF11A1401D89B1ED09970B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

4KB

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

136KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

c053f1d20b5c2bb97167e253b6bcaa0696fabcb5ec1159520288de0f719bb590

user32

ucrtbase

kernel32

ntdll

generic

Sharing

General

Malware Config

Signatures

File Explorer

c053f1d20b5c2bb97167e253b6bcaa0696fabcb5ec1159520288de0f719bb590

user32

ucrtbase

kernel32

ntdll

generic