4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595

Sharing

Copy URL Twitter E-mail

General

Target
4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595
Size 6.4MB
Sample260929-s2nabsvblf
SHA256 4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595
MD5 cfa3bfb7bae2c79629be7fdbb50b579e
SHA1 7bff208478ec161144a4b50854dd29a20617e19c
SHA512 940919e7fca5eef53be5236d696582ec54a831e870264b3e30fc5945aa139afcbe132a25295288d217d017ae0b9c60c6ceb6fa2318ead27c636602332203b396
SSDEEP 49152:mVBKuCECnB4jLgcaVvr6BR/dnCyi5UHE6oGsTXdXSpI5M4sV2L59YmKQK1K6bfyi:mVMlHpGc2eUbZEO
TLSH
T1A5665A03FD6595E4C0ADD1718AB79212BB71BC484B2123D72B90F2382F76BD0ADB9758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595

File Explorer

4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595

.exe 6.4MB

4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595

IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
SHA256 4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595
MD5 cfa3bfb7bae2c79629be7fdbb50b579e
SHA1 7bff208478ec161144a4b50854dd29a20617e19c
SHA512 940919e7fca5eef53be5236d696582ec54a831e870264b3e30fc5945aa139afcbe132a25295288d217d017ae0b9c60c6ceb6fa2318ead27c636602332203b396
SSDEEP 49152:mVBKuCECnB4jLgcaVvr6BR/dnCyi5UHE6oGsTXdXSpI5M4sV2L59YmKQK1K6bfyi:mVMlHpGc2eUbZEO
TLSH
T1A5665A03FD6595E4C0ADD1718AB79212BB71BC484B2123D72B90F2382F76BD0ADB9758
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

556672

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

348KB

Virtual Size

32.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

57KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

4dfcaf1e4d0188e77b57255cd4798e8cd3edf78a5d61ae36c7c98c9e60748595

kernel32

generic