56113917e992345a9c1c36db1a83ba8f3666bc8a9e1fc5894c75fe9db41cd0d7

Sharing

Copy URL Twitter E-mail

General

Target
56113917e992345a9c1c36db1a83ba8f3666bc8a9e1fc5894c75fe9db41cd0d7
Size 156KB
Sample260906-17vwcstemb
SHA256 56113917e992345a9c1c36db1a83ba8f3666bc8a9e1fc5894c75fe9db41cd0d7
MD5 1edf6c2f05ea376f5cdd85bb5f764f2c
SHA1 c3ed3714795124dc6cd0d5acf28baef8e19b791a
SHA512 777b742a915bdc8da618da21a07abce38cf28c1fe3bc115deed426d651a40e86c3ef5cb40031f5092b2637aa9155b14d843e6f88982eac6c546e41e011b6b6e0
SSDEEP 3072:1nVon7dzdRdWkmE8ed/H76PK6nDzyTFvgUKkSKXZf32NDmxIZqYDnGqMi5JdsVGP:EP7DTTF2
TLSH
T18AF3D780F665B48FE5769B3D09D9931133F9B7A1976BA70B45083F354D23BC02E9232A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56113917e992345a9c1c36db1a83ba8f3666bc8a9e1fc5894c75fe9db41cd0d7

File Explorer

56113917e992345a9c1c36db1a83ba8f3666bc8a9e1fc5894c75fe9db41cd0d7

.exe 156KB

56113917e992345a9c1c36db1a83ba8f3666bc8a9e1fc5894c75fe9db41cd0d7

IMPHASH 9bfa79d1a7167a8c20e53a052dd1d331
SHA256 56113917e992345a9c1c36db1a83ba8f3666bc8a9e1fc5894c75fe9db41cd0d7
MD5 1edf6c2f05ea376f5cdd85bb5f764f2c
SHA1 c3ed3714795124dc6cd0d5acf28baef8e19b791a
SHA512 777b742a915bdc8da618da21a07abce38cf28c1fe3bc115deed426d651a40e86c3ef5cb40031f5092b2637aa9155b14d843e6f88982eac6c546e41e011b6b6e0
SSDEEP 3072:1nVon7dzdRdWkmE8ed/H76PK6nDzyTFvgUKkSKXZf32NDmxIZqYDnGqMi5JdsVGP:EP7DTTF2
TLSH
T18AF3D780F665B48FE5769B3D09D9931133F9B7A1976BA70B45083F354D23BC02E9232A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

12KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

4KB

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

828B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

4KB

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

4KB

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

4KB

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

4KB

Virtual Size

109B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

4KB

Virtual Size

471B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/107

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/123

Size

4KB

Virtual Size

63B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

56113917e992345a9c1c36db1a83ba8f3666bc8a9e1fc5894c75fe9db41cd0d7

comctl32

kernel32

ntdll

ole32

oleaut32

ucrtbase

user32

generic