2b2d42a30d3db869984cd57bc3b2c70689857c50d30a68725c66788678aaf3ad

Sharing

Copy URL Twitter E-mail

General

Target
2b2d42a30d3db869984cd57bc3b2c70689857c50d30a68725c66788678aaf3ad
Size 522KB
Sample261014-t9bryaha44
SHA256 2b2d42a30d3db869984cd57bc3b2c70689857c50d30a68725c66788678aaf3ad
MD5 c238f6f607483429075dc661e75fda09
SHA1 d0cf341040137114d1bfe0200b6b915595b5ad58
SHA512 330c28967db8ae1eba73b04f0df2c04c20d825a7df13311c23a16c3b4db2ec4778b633eceb5d83bfb87b837b30e31f2a3fcaf8fc99ce5b3c2d0b9879ebdd512c
SSDEEP 6144:5ZxuSPtFVoY7/zfkvPPtFVoY7/zfkv/7B5DdZk6cJb2AiaSP/IZNlJ1AjmtW:DxD3VP7Q33VP7QjpuCjZ
TLSH
T122B43A21A7E98516F1F65F3988FB43502B36FD92AAF1C60F8E107A1D1872AD4CD61723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b2d42a30d3db869984cd57bc3b2c70689857c50d30a68725c66788678aaf3ad

File Explorer

2b2d42a30d3db869984cd57bc3b2c70689857c50d30a68725c66788678aaf3ad

.dll 522KB

2b2d42a30d3db869984cd57bc3b2c70689857c50d30a68725c66788678aaf3ad

IMPHASH ba606d974600ff7f54bbe5a828b3a978
SHA256 2b2d42a30d3db869984cd57bc3b2c70689857c50d30a68725c66788678aaf3ad
MD5 c238f6f607483429075dc661e75fda09
SHA1 d0cf341040137114d1bfe0200b6b915595b5ad58
SHA512 330c28967db8ae1eba73b04f0df2c04c20d825a7df13311c23a16c3b4db2ec4778b633eceb5d83bfb87b837b30e31f2a3fcaf8fc99ce5b3c2d0b9879ebdd512c
SSDEEP 6144:5ZxuSPtFVoY7/zfkvPPtFVoY7/zfkv/7B5DdZk6cJb2AiaSP/IZNlJ1AjmtW:DxD3VP7Q33VP7QjpuCjZ
TLSH
T122B43A21A7E98516F1F65F3988FB43502B36FD92AAF1C60F8E107A1D1872AD4CD61723
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

20KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

424B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

876B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

300KB

Virtual Size

296KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

4KB

Virtual Size

648B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

64KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

16KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

4KB

Virtual Size

678B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

24KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/89

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2b2d42a30d3db869984cd57bc3b2c70689857c50d30a68725c66788678aaf3ad

advapi32

comctl32

kernel32

ntdll

shlwapi

ucrtbase

user32

generic