bypass ac by v4[.]lol[.]zip[.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.][.]exe

General

Target
bypass ac by v4.lol.zip..............................................................................................exe
Size 1.0MB
Sample261017-bt2pbat1ez
SHA256 72bc88da934a196700c1c36e9470958c1a40664b3151175cba41b772aec8be6b
MD5 3f3d4038bde46c1482fb3709f57b4749
SHA1 59c70e9f34760ed1879daf46bfe18f89bfdd400f
SHA512 ba8211ce78ddd7a7485d0c1626390e746d1bbaf0982bf271c6eb7089191733b3e520feef99da148e0156888123d018fdf1590c62bc13b87a32360aa4635978cd
SSDEEP 24576:FV1Wa1DTCac44BDqZfzz3kAFgJ94CAaLosJAYXeltyvVj3X39:9JC24BDqZfzAAmD7AaLoYAYXeltyv5Ht
TLSH
T16A354A695AE18411FB288F3C46A7B12C77E7B6F02730671B96CADCF6ED0B1C1A01654E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bypass ac by v4.lol.zip..............................................................................................exe

File Explorer

bypass ac by v4.lol.zip..............................................................................................exe

.exe 1.0MB

bypass ac by v4.lol.zip..............................................................................................exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 72bc88da934a196700c1c36e9470958c1a40664b3151175cba41b772aec8be6b
MD5 3f3d4038bde46c1482fb3709f57b4749
SHA1 59c70e9f34760ed1879daf46bfe18f89bfdd400f
SHA512 ba8211ce78ddd7a7485d0c1626390e746d1bbaf0982bf271c6eb7089191733b3e520feef99da148e0156888123d018fdf1590c62bc13b87a32360aa4635978cd
SSDEEP 24576:FV1Wa1DTCac44BDqZfzz3kAFgJ94CAaLosJAYXeltyvVj3X39:9JC24BDqZfzAAmD7AaLoYAYXeltyv5Ht
TLSH
T16A354A695AE18411FB288F3C46A7B12C77E7B6F02730671B96CADCF6ED0B1C1A01654E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

925662

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

bypass ac by v4.lol.zip..............................................................................................exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

bypass ac by v4.lol.zip..............................................................................................exe

mscoree

dotnet