2bb8c2c0937e3ceccf8b2d4880607da188983489b32a82d10cf44392476da9d6

Sharing

Copy URL Twitter E-mail

General

Target
2bb8c2c0937e3ceccf8b2d4880607da188983489b32a82d10cf44392476da9d6
Size 96KB
Sample260910-nb2b2sv1et
SHA256 2bb8c2c0937e3ceccf8b2d4880607da188983489b32a82d10cf44392476da9d6
MD5 f7a455d5d5b97827949b89364ec959eb
SHA1 6677f4a3533f02f2fe24133fea625fefa2728e38
SHA512 1e458490defa2128b8da9142551258c4617405b8dc5e64a30e7df24905295006c08996d2b1828dfe628e36665e286d2b9991e34929da3426d362833f474b6ff7
SSDEEP 1536:lIFw5itAh+DzuOaT052Lk1hVPXuhiTMuZXGTIVefVDkryyAyqX:2FwIDaYyahVPXuhuXGQmVDeCyqX
TLSH
T17FA38D5F66684F31F6CB3238026F14C1F2D961680767C9692126E07D9F33AD5937E788
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bb8c2c0937e3ceccf8b2d4880607da188983489b32a82d10cf44392476da9d6

File Explorer

2bb8c2c0937e3ceccf8b2d4880607da188983489b32a82d10cf44392476da9d6

.exe 96KB

2bb8c2c0937e3ceccf8b2d4880607da188983489b32a82d10cf44392476da9d6

SHA256 2bb8c2c0937e3ceccf8b2d4880607da188983489b32a82d10cf44392476da9d6
MD5 f7a455d5d5b97827949b89364ec959eb
SHA1 6677f4a3533f02f2fe24133fea625fefa2728e38
SHA512 1e458490defa2128b8da9142551258c4617405b8dc5e64a30e7df24905295006c08996d2b1828dfe628e36665e286d2b9991e34929da3426d362833f474b6ff7
SSDEEP 1536:lIFw5itAh+DzuOaT052Lk1hVPXuhiTMuZXGTIVefVDkryyAyqX:2FwIDaYyahVPXuhuXGQmVDeCyqX
TLSH
T17FA38D5F66684F31F6CB3238026F14C1F2D961680767C9692126E07D9F33AD5937E788
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

196610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

31KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.kofbl

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2bb8c2c0937e3ceccf8b2d4880607da188983489b32a82d10cf44392476da9d6

generic