69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707

Sharing

Copy URL Twitter E-mail

General

Target
69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707
Size 1.5MB
Sample260916-kgbf2ass5n
SHA256 69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707
MD5 327ba3db2879a783026a9c8db4f42d2e
SHA1 c2193196c46a59e58a4cc48f08ffe8ce87a18c86
SHA512 287bf9077b9757ba7ac08af8423733a8f8d2306f07db6436695bad65b878ff60963ef598594de2fad3e3f5711f45c23443f1d01c1df39e2894c24ae2d316810c
SSDEEP 24576:BFtGDEEpmgjotoEW3kfNSAK6oLUb75zMzSjNtJHilf5FZ/x:BKDEEpmgjotE3aSAKJsueRfHof5h
TLSH
T1A3654B12ACF2BC79C67AF131186195A77673782807B26BDB4B444A3D065BEC02F3E365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707

File Explorer

69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707

.exe 1.5MB

69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707

IMPHASH 167344a4df394fbba605fc972e41437a
SHA256 69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707
MD5 327ba3db2879a783026a9c8db4f42d2e
SHA1 c2193196c46a59e58a4cc48f08ffe8ce87a18c86
SHA512 287bf9077b9757ba7ac08af8423733a8f8d2306f07db6436695bad65b878ff60963ef598594de2fad3e3f5711f45c23443f1d01c1df39e2894c24ae2d316810c
SSDEEP 24576:BFtGDEEpmgjotoEW3kfNSAK6oLUb75zMzSjNtJHilf5FZ/x:BKDEEpmgjotE3aSAKJsueRfHof5h
TLSH
T1A3654B12ACF2BC79C67AF131186195A77673782807B26BDB4B444A3D065BEC02F3E365
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

387968

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

435KB

Virtual Size

435KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

475KB

Virtual Size

474KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

228KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

281B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/46

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/63

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

512B

Virtual Size

34B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/99

Size

149KB

Virtual Size

149KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/112

Size

65KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/124

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

72KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rdata2

Size

105KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

69e105d4330a730acdfbe2a2b18bca9b981a183eca562840b4f03bf11dafb707

kernel32

generic