592482_vcomp140_12652a425a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
592482_vcomp140_12652a425a.exe
Size 11.1MB
Sample260925-1mryzazzcs
SHA256 f5c9e4ad8ca1843aaa87eb0e3ea160e8256c5da50349ac186bb7ee83704224f2
MD5 a3dc49c98a65d1be73b6239ef879f119
SHA1 e43bcdcd1db7aab0af5cab1fac4a714244fa4dde
SHA512 c1fd269c8f56c9357ac17bdc37b859a3ff1bd828296886d3d3ab0f581ab959c431dbce3b6c3b13a1447443064e6d5c08aa24b37377a58f385947e96b196d9b93
SSDEEP 98304:kEBBm3eksOLFo0Auxn2BJcdf0m+ApQJneLpxRAE2bKRPNqQ5hLLJ/slTlXT+mYV5:khetOxrncncOApmneSrbnQ5Z5sTjVYH
TLSH
T1ADC69D03ECA545E9C1ADE5358A669263BB717C480F2523D33B90F3282F76BD06EB6750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
592482_vcomp140_12652a425a.exe

File Explorer

592482_vcomp140_12652a425a.exe

.exe 11.1MB

592482_vcomp140_12652a425a.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 f5c9e4ad8ca1843aaa87eb0e3ea160e8256c5da50349ac186bb7ee83704224f2
MD5 a3dc49c98a65d1be73b6239ef879f119
SHA1 e43bcdcd1db7aab0af5cab1fac4a714244fa4dde
SHA512 c1fd269c8f56c9357ac17bdc37b859a3ff1bd828296886d3d3ab0f581ab959c431dbce3b6c3b13a1447443064e6d5c08aa24b37377a58f385947e96b196d9b93
SSDEEP 98304:kEBBm3eksOLFo0Auxn2BJcdf0m+ApQJneLpxRAE2bKRPNqQ5hLLJ/slTlXT+mYV5:khetOxrncncOApmneSrbnQ5Z5sTjVYH
TLSH
T1ADC69D03ECA545E9C1ADE5358A669263BB717C480F2523D33B90F3282F76BD06EB6750
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

508160

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4.5MB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

592482_vcomp140_12652a425a.exe

kernel32

generic