b912bc5fc6cc6984abb9cd18f1f9fe1901c2b8942839d491904cc0a80c1d789c

Sharing

Copy URL Twitter E-mail

General

Target
b912bc5fc6cc6984abb9cd18f1f9fe1901c2b8942839d491904cc0a80c1d789c
Size 117KB
Sample260929-ysngmaxbrd
SHA256 b912bc5fc6cc6984abb9cd18f1f9fe1901c2b8942839d491904cc0a80c1d789c
MD5 bdd3d052b01b3c3eaf3a09cb266ed43d
SHA1 78c778d0afa6cd3d928d26407f0eaf6ebbd950b3
SHA512 f0127493bc5a35225c06c6c5f95f70e723c864806d67b423baf69513d99decc1c05a5a17832a42d1f67e93eb594d1bca0933dc502f0d420500cda978185a9bf2
SSDEEP 768:IcAerDX05pBMgJNOqfqOhRe7Fw30zvy9UCeWYks2zQmKRH5y:cQDXgBRLfqOq7Fk0joUCeA0RH5y
TLSH
T166C32D9077ED5095F6F32B3D79BA42601B3EBE908E75DB0F524865180E73A80ACE1736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b912bc5fc6cc6984abb9cd18f1f9fe1901c2b8942839d491904cc0a80c1d789c

File Explorer

b912bc5fc6cc6984abb9cd18f1f9fe1901c2b8942839d491904cc0a80c1d789c

.exe 117KB

b912bc5fc6cc6984abb9cd18f1f9fe1901c2b8942839d491904cc0a80c1d789c

IMPHASH fa3437e907211da1a2c81f2fda1ea3ab
SHA256 b912bc5fc6cc6984abb9cd18f1f9fe1901c2b8942839d491904cc0a80c1d789c
MD5 bdd3d052b01b3c3eaf3a09cb266ed43d
SHA1 78c778d0afa6cd3d928d26407f0eaf6ebbd950b3
SHA512 f0127493bc5a35225c06c6c5f95f70e723c864806d67b423baf69513d99decc1c05a5a17832a42d1f67e93eb594d1bca0933dc502f0d420500cda978185a9bf2
SSDEEP 768:IcAerDX05pBMgJNOqfqOhRe7Fw30zvy9UCeWYks2zQmKRH5y:cQDXgBRLfqOq7Fk0joUCeA0RH5y
TLSH
T166C32D9077ED5095F6F32B3D79BA42601B3EBE908E75DB0F524865180E73A80ACE1736
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12480

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

212B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

4KB

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

4KB

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

668B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

b912bc5fc6cc6984abb9cd18f1f9fe1901c2b8942839d491904cc0a80c1d789c

advapi32

kernel32

ntdll

ucrtbase

generic