ef00cd4ee9023097483b31847258ab694f11d5d3f7afe0e22e2d0654a596c729

Sharing

Copy URL Twitter E-mail

General

Target
ef00cd4ee9023097483b31847258ab694f11d5d3f7afe0e22e2d0654a596c729
Size 741KB
Sample261011-ldcela115j
SHA256 ef00cd4ee9023097483b31847258ab694f11d5d3f7afe0e22e2d0654a596c729
MD5 b64a2e559b04a74196707b2802c9fc76
SHA1 d24d1049682b40f7883f336c1828007bcc0abf5a
SHA512 37c8f2cba1aab84a407d3748bba97cf31a573f331d36476cdad74895784deab0b04614f1d797066a616bd9e8140f81ffe5b651e8d4463d834c724aa6ffd0a835
SSDEEP 12288:QJ8kRV8U9frYgstcr1R2ydMQE5LJhNbeeE7xoD46mJvC7Q70xarj/rqJ8kRV8U9K:jGvrY3tcr1R2ydMQULhbeeE7xoD46mJn
TLSH
T185F48E26F2D08473D123297DCC5B92A8A8697E912D296C463BFC3D4C5F3D3D1392A297
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef00cd4ee9023097483b31847258ab694f11d5d3f7afe0e22e2d0654a596c729

File Explorer

ef00cd4ee9023097483b31847258ab694f11d5d3f7afe0e22e2d0654a596c729

.exe 741KB

ef00cd4ee9023097483b31847258ab694f11d5d3f7afe0e22e2d0654a596c729

SHA256 ef00cd4ee9023097483b31847258ab694f11d5d3f7afe0e22e2d0654a596c729
MD5 b64a2e559b04a74196707b2802c9fc76
SHA1 d24d1049682b40f7883f336c1828007bcc0abf5a
SHA512 37c8f2cba1aab84a407d3748bba97cf31a573f331d36476cdad74895784deab0b04614f1d797066a616bd9e8140f81ffe5b651e8d4463d834c724aa6ffd0a835
SSDEEP 12288:QJ8kRV8U9frYgstcr1R2ydMQE5LJhNbeeE7xoD46mJvC7Q70xarj/rqJ8kRV8U9K:jGvrY3tcr1R2ydMQULhbeeE7xoD46mJn
TLSH
T185F48E26F2D08473D123297DCC5B92A8A8697E912D296C463BFC3D4C5F3D3D1392A297
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

326052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

314KB

Virtual Size

314KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

98KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

ef00cd4ee9023097483b31847258ab694f11d5d3f7afe0e22e2d0654a596c729

generic