cd80b5694f6044fd9574f732fad52d07f32d5555fc65709ee848f460eb1174cc

Sharing

Copy URL Twitter E-mail

General

Target
cd80b5694f6044fd9574f732fad52d07f32d5555fc65709ee848f460eb1174cc
Size 160KB
Sample260916-3zaassgr2v
SHA256 cd80b5694f6044fd9574f732fad52d07f32d5555fc65709ee848f460eb1174cc
MD5 3121268b579d754f91f65270bdb332f5
SHA1 cd269881a15884478ddd33ec7d0d42b7fa2ee184
SHA512 dd715ea715a7a8e198ebf0872aa1c6f1fe078f42c559539b820c9a60b26d7d4129b31d4c56207d0fd88667e141991e5eb85bf081018c7c721503c4097cad34e1
SSDEEP 1536:U+pJRbIyDp3YeKp1+AV+cioOOcMlq9h7oTXYi1T32GsXzZd1DMqP:U+p3IGp3YHpBgci0fq9uTXV1TGGyNvP
TLSH
T18AF34BA27794D812F6759A3C02F5C321273CBB9016A2CB57C550BA5E6CA3ED0BCE1397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd80b5694f6044fd9574f732fad52d07f32d5555fc65709ee848f460eb1174cc

File Explorer

cd80b5694f6044fd9574f732fad52d07f32d5555fc65709ee848f460eb1174cc

.dll 160KB

cd80b5694f6044fd9574f732fad52d07f32d5555fc65709ee848f460eb1174cc

IMPHASH a6766b63155f3253fa7d40c28ab5ea9d
SHA256 cd80b5694f6044fd9574f732fad52d07f32d5555fc65709ee848f460eb1174cc
MD5 3121268b579d754f91f65270bdb332f5
SHA1 cd269881a15884478ddd33ec7d0d42b7fa2ee184
SHA512 dd715ea715a7a8e198ebf0872aa1c6f1fe078f42c559539b820c9a60b26d7d4129b31d4c56207d0fd88667e141991e5eb85bf081018c7c721503c4097cad34e1
SSDEEP 1536:U+pJRbIyDp3YeKp1+AV+cioOOcMlq9h7oTXYi1T32GsXzZd1DMqP:U+p3IGp3YHpBgci0fq9uTXV1TGGyNvP
TLSH
T18AF34BA27794D812F6759A3C02F5C321273CBB9016A2CB57C550BA5E6CA3ED0BCE1397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4944

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

984B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

76KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

720B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

cd80b5694f6044fd9574f732fad52d07f32d5555fc65709ee848f460eb1174cc

advapi32

comctl32

gdi32

kernel32

ntdll

ole32

ucrtbase

user32

generic