79a77c276473a137a6c31dbefe5a21b748a69dd850996776c3b54989067e4282

Sharing

Copy URL Twitter E-mail

General

Target
79a77c276473a137a6c31dbefe5a21b748a69dd850996776c3b54989067e4282
Size 328KB
Sample260830-3ns9jabl4s
SHA256 79a77c276473a137a6c31dbefe5a21b748a69dd850996776c3b54989067e4282
MD5 2f8dca3fcd577ad2e3f7fb86c095ee2b
SHA1 9ef809aea6f3987772e8bbb677ed6d3b07383494
SHA512 32fe00ab8aaac48fc2b69d38c4f64b7ad8601e4a5410c94c4deca921416e97a98056a7bd6d23e32a6ef5e04402f32b2b4d385b97e6e7e6369d17a86e4f607192
SSDEEP 3072:KXB8bfOPmdfPoDCCr8VbjVvno7M45F+yZBWu/X2OReU4L6oyuU07f+68/niL8U:eB8bfMmqr8VVQbH//B4/yuAiL8U
TLSH
T12C6439A6FACB5481D832CB3A50EB93B1973CBB5246A2CB67CB05FD162C136F05D94742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79a77c276473a137a6c31dbefe5a21b748a69dd850996776c3b54989067e4282

File Explorer

79a77c276473a137a6c31dbefe5a21b748a69dd850996776c3b54989067e4282

.dll 328KB

79a77c276473a137a6c31dbefe5a21b748a69dd850996776c3b54989067e4282

IMPHASH 1ab64779ce471ead78892986b2ebe82c
SHA256 79a77c276473a137a6c31dbefe5a21b748a69dd850996776c3b54989067e4282
MD5 2f8dca3fcd577ad2e3f7fb86c095ee2b
SHA1 9ef809aea6f3987772e8bbb677ed6d3b07383494
SHA512 32fe00ab8aaac48fc2b69d38c4f64b7ad8601e4a5410c94c4deca921416e97a98056a7bd6d23e32a6ef5e04402f32b2b4d385b97e6e7e6369d17a86e4f607192
SSDEEP 3072:KXB8bfOPmdfPoDCCr8VbjVvno7M45F+yZBWu/X2OReU4L6oyuU07f+68/niL8U:eB8bfMmqr8VVQbH//B4/yuAiL8U
TLSH
T12C6439A6FACB5481D832CB3A50EB93B1973CBB5246A2CB67CB05FD162C136F05D94742
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

168KB

Virtual Size

165KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

116B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

32KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

79a77c276473a137a6c31dbefe5a21b748a69dd850996776c3b54989067e4282

advapi32

comctl32

gdi32

kernel32

ntdll

ucrtbase

user32

generic