b84ad225f6f84c0cdd1850324ab346ef2bc2228827aa4a74d711d593fc4fe9d5

General

Target
b84ad225f6f84c0cdd1850324ab346ef2bc2228827aa4a74d711d593fc4fe9d5
Size 4.7MB
Sample260907-agxddsak8x
SHA256 b84ad225f6f84c0cdd1850324ab346ef2bc2228827aa4a74d711d593fc4fe9d5
MD5 311e7be72e3b48a5d2b224f6d7ba7f45
SHA1 b69b8fee4ffa58bb7bc78f17cb55c7b56530f502
SHA512 4d7e6f2110fec3f46edfca4cb8ba2a5ffb99e542a4885625ffc63594e7469790d168a6d3449751da6a83009352648d99ec7bc52758146ccf06baae04dce38592
SSDEEP 98304:yipCnoevWEx/JGwnNcYGacAckcadwvh4XGJCnBUEivbW:ypMEx/JGwnNga0rvdcKEiva
TLSH
T1083623B7926CD984D4E68C3E8623FDA031F6D37A8B826C7495DE79C032164F5AF02563
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b84ad225f6f84c0cdd1850324ab346ef2bc2228827aa4a74d711d593fc4fe9d5

File Explorer

b84ad225f6f84c0cdd1850324ab346ef2bc2228827aa4a74d711d593fc4fe9d5

.dll 4.7MB

b84ad225f6f84c0cdd1850324ab346ef2bc2228827aa4a74d711d593fc4fe9d5

IMPHASH b4e2c82900de4c08a26d9a5363ab5a2d
SHA256 b84ad225f6f84c0cdd1850324ab346ef2bc2228827aa4a74d711d593fc4fe9d5
MD5 311e7be72e3b48a5d2b224f6d7ba7f45
SHA1 b69b8fee4ffa58bb7bc78f17cb55c7b56530f502
SHA512 4d7e6f2110fec3f46edfca4cb8ba2a5ffb99e542a4885625ffc63594e7469790d168a6d3449751da6a83009352648d99ec7bc52758146ccf06baae04dce38592
SSDEEP 98304:yipCnoevWEx/JGwnNcYGacAckcadwvh4XGJCnBUEivbW:ypMEx/JGwnNga0rvdcKEiva
TLSH
T1083623B7926CD984D4E68C3E8623FDA031F6D37A8B826C7495DE79C032164F5AF02563
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9089236

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

Virtual Size

963KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

518KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

383KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.svmp0

Size

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.svmp1

Size

4.7MB

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=11, id=96, productName=VS2003 (.NET) build 3077, version=3077,

count=47, id=15, productName=VS2003 (.NET) build 3077, version=3077,

count=196, id=95, productName=VS2003 (.NET) build 3077, version=3077,

count=3, id=105, version=2067,

count=44, id=19, version=8022,

count=18, id=19, version=8034,

count=2, id=93, version=2179,

count=604, id=1, productName=Unmarked objects,

count=91, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=18, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=76, id=11, productName=VS98 (6.0) build 8168, version=8168,

count=27, id=10, productName=VS98 (6.0) build 8168, version=8168,

count=139, productName=Unmarked objects (old),

count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,

count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,

count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,

b84ad225f6f84c0cdd1850324ab346ef2bc2228827aa4a74d711d593fc4fe9d5

kernel32

user32

advapi32

shlwapi

gdi32

winmm

winspool.drv

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

generic

Sharing

General

Malware Config

Signatures

File Explorer

b84ad225f6f84c0cdd1850324ab346ef2bc2228827aa4a74d711d593fc4fe9d5

kernel32

user32

advapi32

shlwapi

gdi32

winmm

winspool.drv

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

generic