2cb2d6853b2614b6020d59c6d40e73a07a3813587ea172fef9f894631e462c64

General

Target
2cb2d6853b2614b6020d59c6d40e73a07a3813587ea172fef9f894631e462c64
Size 616KB
Sample260930-gzfa6azv2n
SHA256 2cb2d6853b2614b6020d59c6d40e73a07a3813587ea172fef9f894631e462c64
MD5 0914712136c8aa85a7daddf9a36789a3
SHA1 61d78f4019f148446f59d1633cb8b5e33294a2de
SHA512 43e3bf6b2463b32204af995c1a0c30585e45c4ebe4384f8c44f4812f6fd959283fa9c3ba938f218aa5fa3fb6c8dc4d209a02e743fe64d0ee5c906c2f59cd477f
SSDEEP 6144:HTGDukHgqehOEUbBgH1onbVhm3gBC1OUdK8N+VQs7PlWlBjPKXPXwboCTms51t1N:jqj81OYKPlWlBjifyPTmfWFfO
TLSH
T103D48D719DF0D418EC3AD6F0AABB55319F015673D6671BB4828630ABCBB146F2C9838D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cb2d6853b2614b6020d59c6d40e73a07a3813587ea172fef9f894631e462c64

File Explorer

2cb2d6853b2614b6020d59c6d40e73a07a3813587ea172fef9f894631e462c64

.exe 616KB

2cb2d6853b2614b6020d59c6d40e73a07a3813587ea172fef9f894631e462c64

SHA256 2cb2d6853b2614b6020d59c6d40e73a07a3813587ea172fef9f894631e462c64
MD5 0914712136c8aa85a7daddf9a36789a3
SHA1 61d78f4019f148446f59d1633cb8b5e33294a2de
SHA512 43e3bf6b2463b32204af995c1a0c30585e45c4ebe4384f8c44f4812f6fd959283fa9c3ba938f218aa5fa3fb6c8dc4d209a02e743fe64d0ee5c906c2f59cd477f
SSDEEP 6144:HTGDukHgqehOEUbBgH1onbVhm3gBC1OUdK8N+VQs7PlWlBjPKXPXwboCTms51t1N:jqj81OYKPlWlBjifyPTmfWFfO
TLSH
T103D48D719DF0D418EC3AD6F0AABB55319F015673D6671BB4828630ABCBB146F2C9838D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:0 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

0

Entry point

647168

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

14KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

565KB

Virtual Size

568KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vr

Size

27KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.adata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

mmym

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2cb2d6853b2614b6020d59c6d40e73a07a3813587ea172fef9f894631e462c64

generic