b4cba7cb899464bd65a03f9b1ba7c921b6af4085cf19d89a0f64f110c5e43a6f

Sharing

Copy URL Twitter E-mail

General

Target
b4cba7cb899464bd65a03f9b1ba7c921b6af4085cf19d89a0f64f110c5e43a6f
Size 6.4MB
Sample260905-db36jadp3v
SHA256 b4cba7cb899464bd65a03f9b1ba7c921b6af4085cf19d89a0f64f110c5e43a6f
MD5 fbd92394042173c06ba24d699c90c5d6
SHA1 6de08957f21d3b64fddad09667c3d5798d9bcf1e
SHA512 353166a42b5d13a464ae5db578b2d75dd7c6e1a5a225ce6a20f854e6964ed9f0893bcb74c0d31f2f32415b40dbe892f5da74fc36c7993c92e1d6a686aece6478
SSDEEP 49152:gIwRN2BGOjWlWD4oQnZrHCeyuSWJThE50lmpXwk58aR2Vs2d+0KQK1K6sJvE0pJh:gIhoAHSEiuNdMn5Ela
TLSH
T18D664A07EC5555E9C0ADD270CAB39212BBA1BC481B3123D32BA0F6386F76BD4AD79354
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4cba7cb899464bd65a03f9b1ba7c921b6af4085cf19d89a0f64f110c5e43a6f

File Explorer

b4cba7cb899464bd65a03f9b1ba7c921b6af4085cf19d89a0f64f110c5e43a6f

.exe 6.4MB

b4cba7cb899464bd65a03f9b1ba7c921b6af4085cf19d89a0f64f110c5e43a6f

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 b4cba7cb899464bd65a03f9b1ba7c921b6af4085cf19d89a0f64f110c5e43a6f
MD5 fbd92394042173c06ba24d699c90c5d6
SHA1 6de08957f21d3b64fddad09667c3d5798d9bcf1e
SHA512 353166a42b5d13a464ae5db578b2d75dd7c6e1a5a225ce6a20f854e6964ed9f0893bcb74c0d31f2f32415b40dbe892f5da74fc36c7993c92e1d6a686aece6478
SSDEEP 49152:gIwRN2BGOjWlWD4oQnZrHCeyuSWJThE50lmpXwk58aR2Vs2d+0KQK1K6sJvE0pJh:gIhoAHSEiuNdMn5Ela
TLSH
T18D664A07EC5555E9C0ADD270CAB39212BBA1BC481B3123D32BA0F6386F76BD4AD79354
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

556736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

347KB

Virtual Size

32.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

68KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

b4cba7cb899464bd65a03f9b1ba7c921b6af4085cf19d89a0f64f110c5e43a6f

kernel32

generic