b0b9b22d2057800e184d5be514fad83282bfc5afa4b9d57f3fcd1d409a7e1b52

Sharing

Copy URL Twitter E-mail

General

Target
b0b9b22d2057800e184d5be514fad83282bfc5afa4b9d57f3fcd1d409a7e1b52
Size 56KB
Sample261020-t12xrssvb1
SHA256 b0b9b22d2057800e184d5be514fad83282bfc5afa4b9d57f3fcd1d409a7e1b52
MD5 d4fac82a961c1af3e91e41b53fc1f6c1
SHA1 6a9b1c1e1c00ff683a8c0e679d8c1e40d220f0cd
SHA512 f7800eb383b652461917b2b41de72b7f67636719b779e47fd7c7a5b4a92a2fdfdcf199e676b4f9f01fc4f38b29b53d3c1a6009c3203b28fcaf359d8945fe4e81
SSDEEP 384:I3Ll25yGQ6HwSF9y+46Xtgnr6q0Kq7BlO64KA04n9a:I3Ll2oGQSwSF9n2J7q7fh
TLSH
T1A9430191B3342892FB77A27F40DBD275637CFBA14AA34B535A147A652E13ED03CD2212
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0b9b22d2057800e184d5be514fad83282bfc5afa4b9d57f3fcd1d409a7e1b52

File Explorer

b0b9b22d2057800e184d5be514fad83282bfc5afa4b9d57f3fcd1d409a7e1b52

.exe 56KB

b0b9b22d2057800e184d5be514fad83282bfc5afa4b9d57f3fcd1d409a7e1b52

IMPHASH 58098287039c5b92e3d3e099a2089520
SHA256 b0b9b22d2057800e184d5be514fad83282bfc5afa4b9d57f3fcd1d409a7e1b52
MD5 d4fac82a961c1af3e91e41b53fc1f6c1
SHA1 6a9b1c1e1c00ff683a8c0e679d8c1e40d220f0cd
SHA512 f7800eb383b652461917b2b41de72b7f67636719b779e47fd7c7a5b4a92a2fdfdcf199e676b4f9f01fc4f38b29b53d3c1a6009c3203b28fcaf359d8945fe4e81
SSDEEP 384:I3Ll25yGQ6HwSF9y+46Xtgnr6q0Kq7BlO64KA04n9a:I3Ll2oGQSwSF9n2J7q7fh
TLSH
T1A9430191B3342892FB77A27F40DBD275637CFBA14AA34B535A147A652E13ED03CD2212
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

4KB

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

364B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

924B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

b0b9b22d2057800e184d5be514fad83282bfc5afa4b9d57f3fcd1d409a7e1b52

comctl32

kernel32

ntdll

shell32

ucrtbase

user32

generic