664fceaed5ec096ec7d7a161e8dcdd05a1292b38092f4c09ba7c460d26b97a8b

Sharing

Copy URL Twitter E-mail

General

Target
664fceaed5ec096ec7d7a161e8dcdd05a1292b38092f4c09ba7c460d26b97a8b
Size 108KB
Sample260830-2bnmvattaz
SHA256 664fceaed5ec096ec7d7a161e8dcdd05a1292b38092f4c09ba7c460d26b97a8b
MD5 7e52d26cc34abc4cb29d9a51264a5066
SHA1 1746dc5950a9cc2f85608243b5170ce0f04e3d63
SHA512 3e044fc06367d5054b9b2a1870ff0a7b2c0ca86f33c0642ab446d2257f52889f30c6d25b5df5aca9e435facf5a91bb995e134df0cc557937434dbcd508dd1a0b
SSDEEP 3072:zyZ9cLGX2+U1Q8YpRTDIxfQbafskmndmTV5Qv2+o3:zn8U1Q8YpRYCaUkmW5Qv2+o
TLSH
T188B3073AD99468A3C22B8D34985B4C21BB31F8D91B7093CF9B415DFD0EF9BD85EA4241
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
664fceaed5ec096ec7d7a161e8dcdd05a1292b38092f4c09ba7c460d26b97a8b

File Explorer

664fceaed5ec096ec7d7a161e8dcdd05a1292b38092f4c09ba7c460d26b97a8b

.dll 108KB

664fceaed5ec096ec7d7a161e8dcdd05a1292b38092f4c09ba7c460d26b97a8b

SHA256 664fceaed5ec096ec7d7a161e8dcdd05a1292b38092f4c09ba7c460d26b97a8b
MD5 7e52d26cc34abc4cb29d9a51264a5066
SHA1 1746dc5950a9cc2f85608243b5170ce0f04e3d63
SHA512 3e044fc06367d5054b9b2a1870ff0a7b2c0ca86f33c0642ab446d2257f52889f30c6d25b5df5aca9e435facf5a91bb995e134df0cc557937434dbcd508dd1a0b
SSDEEP 3072:zyZ9cLGX2+U1Q8YpRTDIxfQbafskmndmTV5Qv2+o3:zn8U1Q8YpRYCaUkmW5Qv2+o
TLSH
T188B3073AD99468A3C22B8D34985B4C21BB31F8D91B7093CF9B415DFD0EF9BD85EA4241
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28640

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

664fceaed5ec096ec7d7a161e8dcdd05a1292b38092f4c09ba7c460d26b97a8b

generic