444b21737990a06b3db0470404b2287de971d9ebed73b67d1b86012f453dfa2e

General

Target
444b21737990a06b3db0470404b2287de971d9ebed73b67d1b86012f453dfa2e
Size 20KB
Sample260928-jvycaazybs
SHA256 444b21737990a06b3db0470404b2287de971d9ebed73b67d1b86012f453dfa2e
MD5 5ca551e138545cdcb8060b720d6d15d6
SHA1 ab4fc7645bed736ff45cdea68264252dae7e75d2
SHA512 eefa4b8d628043ff1261b3fde81df6bd57e76f495552c0dd8ade528b61c00c04b2da26a348f3a93a6ca3db374c3b467f25bfe30c6fe9fda5e9b3ee928420ed99
SSDEEP 384:wUOcuxJ0/64EsO5+04THN01nPup7fYP8wk3rg5KN08mk8L:RubmO558NcnP3FA9dkL
TLSH
T102925A45FAE400F4D66BD279D5AB497ED6B8350713A05FDF8A50CB620E23EC16B3A308
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
444b21737990a06b3db0470404b2287de971d9ebed73b67d1b86012f453dfa2e

File Explorer

444b21737990a06b3db0470404b2287de971d9ebed73b67d1b86012f453dfa2e

.dll 20KB

444b21737990a06b3db0470404b2287de971d9ebed73b67d1b86012f453dfa2e

IMPHASH 450defba159b32f57009deae29cf67ad
SHA256 444b21737990a06b3db0470404b2287de971d9ebed73b67d1b86012f453dfa2e
MD5 5ca551e138545cdcb8060b720d6d15d6
SHA1 ab4fc7645bed736ff45cdea68264252dae7e75d2
SHA512 eefa4b8d628043ff1261b3fde81df6bd57e76f495552c0dd8ade528b61c00c04b2da26a348f3a93a6ca3db374c3b467f25bfe30c6fe9fda5e9b3ee928420ed99
SSDEEP 384:wUOcuxJ0/64EsO5+04THN01nPup7fYP8wk3rg5KN08mk8L:RubmO558NcnP3FA9dkL
TLSH
T102925A45FAE400F4D66BD279D5AB497ED6B8350713A05FDF8A50CB620E23EC16B3A308
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

828B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1024B

Virtual Size

1002B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

808B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

444b21737990a06b3db0470404b2287de971d9ebed73b67d1b86012f453dfa2e

ntoskrnl.exe

generic

Sharing

General

Malware Config

Signatures

File Explorer

444b21737990a06b3db0470404b2287de971d9ebed73b67d1b86012f453dfa2e

ntoskrnl.exe

generic