979748c2a90138dbb709c6133c8797342aac503b0bc1f1f6873186630e66aae5

Sharing

Copy URL Twitter E-mail

General

Target
979748c2a90138dbb709c6133c8797342aac503b0bc1f1f6873186630e66aae5
Size 36KB
Sample260930-p3kn2sxtfw
SHA256 979748c2a90138dbb709c6133c8797342aac503b0bc1f1f6873186630e66aae5
MD5 c43a5a1ac42f314db48dc54f1560d35e
SHA1 0da1a30b4199efc0eca38ebc15d01a5f6859ff3a
SHA512 8a1ca74535cf7afabdf0880ac1ba5b380665179fc966923bee0a9f75ed9007bd5fd7e332b4a3f2d71174797992361b987a1a11c7a2a7a6a05412d12fa3fa3e36
SSDEEP 192:IsElsVFAnFmGlUtD0+dp+Yag8vlcWKZ8:IsElsVFidlMDt+Y8vlcWM8
TLSH
T1E3F21BC6F24A51B2E1336770409ED6F6807D7C364576A0AAFE0D0B59763A6E0AF37312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
979748c2a90138dbb709c6133c8797342aac503b0bc1f1f6873186630e66aae5

File Explorer

979748c2a90138dbb709c6133c8797342aac503b0bc1f1f6873186630e66aae5

.exe 36KB

979748c2a90138dbb709c6133c8797342aac503b0bc1f1f6873186630e66aae5

IMPHASH 7b8ced2b5eb3f70597aef34cfaa2fc91
SHA256 979748c2a90138dbb709c6133c8797342aac503b0bc1f1f6873186630e66aae5
MD5 c43a5a1ac42f314db48dc54f1560d35e
SHA1 0da1a30b4199efc0eca38ebc15d01a5f6859ff3a
SHA512 8a1ca74535cf7afabdf0880ac1ba5b380665179fc966923bee0a9f75ed9007bd5fd7e332b4a3f2d71174797992361b987a1a11c7a2a7a6a05412d12fa3fa3e36
SSDEEP 192:IsElsVFAnFmGlUtD0+dp+Yag8vlcWKZ8:IsElsVFidlMDt+Y8vlcWM8
TLSH
T1E3F21BC6F24A51B2E1336770409ED6F6807D7C364576A0AAFE0D0B59763A6E0AF37312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8176

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

344B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

956B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

979748c2a90138dbb709c6133c8797342aac503b0bc1f1f6873186630e66aae5

comctl32

kernel32

ntdll

shell32

ucrtbase

user32

generic