91fd8ea130d9c0645408378386a484d8074fa93bce3fa9f6bc2d137c0af5d058

Sharing

Copy URL Twitter E-mail

General

Target
91fd8ea130d9c0645408378386a484d8074fa93bce3fa9f6bc2d137c0af5d058
Size 120KB
Sample260930-yn5kcatemd
SHA256 91fd8ea130d9c0645408378386a484d8074fa93bce3fa9f6bc2d137c0af5d058
MD5 2cb110a6236af9680a52dbfe456f691c
SHA1 f702bc50101bddc145d408a996cf35115ef3f6bc
SHA512 12e8dc250307ae5aa2c0b0e7bda845f39d65af0971a398dfce338cdcae4486ad8fb73e9ba91720f04ab5206c9e1bb3fec39fe4eafbc052d832ae446fe68cb350
SSDEEP 1536:5VZQ9xESgOTZX3FD0H42aWsgNFBHVPJYjeUxL:ZQ9xGOTZX3FD0H42vNFBHVPJaLL
TLSH
T122C3FC445BE86514F9B25B3CAAB601382B39FD8AEE71C74F0690E4190C33DD4E9B573A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91fd8ea130d9c0645408378386a484d8074fa93bce3fa9f6bc2d137c0af5d058

File Explorer

91fd8ea130d9c0645408378386a484d8074fa93bce3fa9f6bc2d137c0af5d058

.exe 120KB

91fd8ea130d9c0645408378386a484d8074fa93bce3fa9f6bc2d137c0af5d058

IMPHASH 0734a85ac614f8d8f8ee1668c71cb2d7
SHA256 91fd8ea130d9c0645408378386a484d8074fa93bce3fa9f6bc2d137c0af5d058
MD5 2cb110a6236af9680a52dbfe456f691c
SHA1 f702bc50101bddc145d408a996cf35115ef3f6bc
SHA512 12e8dc250307ae5aa2c0b0e7bda845f39d65af0971a398dfce338cdcae4486ad8fb73e9ba91720f04ab5206c9e1bb3fec39fe4eafbc052d832ae446fe68cb350
SSDEEP 1536:5VZQ9xESgOTZX3FD0H42aWsgNFBHVPJYjeUxL:ZQ9xGOTZX3FD0H42vNFBHVPJaLL
TLSH
T122C3FC445BE86514F9B25B3CAAB601382B39FD8AEE71C74F0690E4190C33DD4E9B573A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

332B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

52KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

91fd8ea130d9c0645408378386a484d8074fa93bce3fa9f6bc2d137c0af5d058

kernel32

kernelbase

ntdll

ole32

ucrtbase

user32

generic