169bab273ecfa9e7d68ffbcd5d022a46b1a77d9335b8544f3a9ed11751f98cb1

General

Target
169bab273ecfa9e7d68ffbcd5d022a46b1a77d9335b8544f3a9ed11751f98cb1
Size 2.7MB
Sample260915-gpshqszvbx
SHA256 169bab273ecfa9e7d68ffbcd5d022a46b1a77d9335b8544f3a9ed11751f98cb1
MD5 6737477219235ba33f328ef1d11587c3
SHA1 916c5534d4e68102c82f5f59445d0bcae514bfa7
SHA512 555caceb6728051561c72b5e54d4b8bb7c58208363cee59882a3239bc3d7e4ccf1893c0d352e7518c11e5f76f8339274186d392be87afdf5dd57ec46927fd2b7
SSDEEP 24576:ge6u/pjD3RS2nAhJSDc9ifHfiX01hETxVhlZMOJ0O7t1D14dziEs+ehWI8E8abgh:gOBjzYcKk7gBlZMaf7tvtVh7H8
TLSH
T1E1D5022C33EA10B2E43B50B8CD92B255D6B2B87127E265EF16D0C5BC4F266D5B239F05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
169bab273ecfa9e7d68ffbcd5d022a46b1a77d9335b8544f3a9ed11751f98cb1

File Explorer

169bab273ecfa9e7d68ffbcd5d022a46b1a77d9335b8544f3a9ed11751f98cb1

.exe 2.7MB

169bab273ecfa9e7d68ffbcd5d022a46b1a77d9335b8544f3a9ed11751f98cb1

SHA256 169bab273ecfa9e7d68ffbcd5d022a46b1a77d9335b8544f3a9ed11751f98cb1
MD5 6737477219235ba33f328ef1d11587c3
SHA1 916c5534d4e68102c82f5f59445d0bcae514bfa7
SHA512 555caceb6728051561c72b5e54d4b8bb7c58208363cee59882a3239bc3d7e4ccf1893c0d352e7518c11e5f76f8339274186d392be87afdf5dd57ec46927fd2b7
SSDEEP 24576:ge6u/pjD3RS2nAhJSDc9ifHfiX01hETxVhlZMOJ0O7t1D14dziEs+ehWI8E8abgh:gOBjzYcKk7gBlZMaf7tvtVh7H8
TLSH
T1E1D5022C33EA10B2E43B50B8CD92B255D6B2B87127E265EF16D0C5BC4F266D5B239F05
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

133KB

Virtual Size

133KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

518KB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.xdat

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

dgbwqbp

Size

146KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zrdata

Size

512B

Virtual Size

5B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

169bab273ecfa9e7d68ffbcd5d022a46b1a77d9335b8544f3a9ed11751f98cb1

generic