342ceefa0daf85198f3f294042d463cda7594bf68ffd31cc3e518587023a1776

Sharing

Copy URL Twitter E-mail

General

Target
342ceefa0daf85198f3f294042d463cda7594bf68ffd31cc3e518587023a1776
Size 151KB
Sample260830-3vfl1sbm2x
SHA256 342ceefa0daf85198f3f294042d463cda7594bf68ffd31cc3e518587023a1776
MD5 c552df5c718bdc476800c4ca7ea3f372
SHA1 3c32cb01ce63acc782a4896bd2ecc251d0df25d4
SHA512 d76813bd6fcdd2e330bec7fecafaad18db9615f2a082c9e51d681747e8c3b35457409639629f7b6b160afbcd4087e703b5729f1d7993ede6e4d854e4232f3f42
SSDEEP 1536:+xuIAWPJ0wBt+KdN6P1swIdH0excqDwuhlKSzu5pD1CtACDV:mQi0wuyMPCwIl08cq0uh18B1C9R
TLSH
T1CEE31B69F342E821E032C43948AEF3FEA7347637C666CE67EE50DE5E6472590DA24701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
342ceefa0daf85198f3f294042d463cda7594bf68ffd31cc3e518587023a1776

File Explorer

342ceefa0daf85198f3f294042d463cda7594bf68ffd31cc3e518587023a1776

.dll 151KB

342ceefa0daf85198f3f294042d463cda7594bf68ffd31cc3e518587023a1776

IMPHASH 2e7efb703160076ff5f1a4ca97da3064
SHA256 342ceefa0daf85198f3f294042d463cda7594bf68ffd31cc3e518587023a1776
MD5 c552df5c718bdc476800c4ca7ea3f372
SHA1 3c32cb01ce63acc782a4896bd2ecc251d0df25d4
SHA512 d76813bd6fcdd2e330bec7fecafaad18db9615f2a082c9e51d681747e8c3b35457409639629f7b6b160afbcd4087e703b5729f1d7993ede6e4d854e4232f3f42
SSDEEP 1536:+xuIAWPJ0wBt+KdN6P1swIdH0excqDwuhlKSzu5pD1CtACDV:mQi0wuyMPCwIl08cq0uh18B1C9R
TLSH
T1CEE31B69F342E821E032C43948AEF3FEA7347637C666CE67EE50DE5E6472590DA24701
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

72KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

24KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

342ceefa0daf85198f3f294042d463cda7594bf68ffd31cc3e518587023a1776

advapi32

kernel32

ntdll

ucrtbase

user32

winmm

generic