4c6ef790a1a5d71c06e325ce0b55dbf856c927e87d0b1c6324fe9ad4aeffe783

Sharing

Copy URL Twitter E-mail

General

Target
4c6ef790a1a5d71c06e325ce0b55dbf856c927e87d0b1c6324fe9ad4aeffe783
Size 58KB
Sample261020-ty64psb17w
SHA256 4c6ef790a1a5d71c06e325ce0b55dbf856c927e87d0b1c6324fe9ad4aeffe783
MD5 b472a1d18d975d34e54c97f5e448292c
SHA1 99cc3efeddf99acec6f8dd704f01ac3d524db58f
SHA512 13f618c6f1b542181808a87248c01e26c727e6340560acf200fc86c493b884537926a827b0d7dcf6c27d3240ae24b3ed9accd1551c5ed4dbc2b856928c3d19af
SSDEEP 768:lGsgADnLUZC0SSJ7qzu3i0lNSNvImz9DEl9WB+tvNt8/HU/mxmY0WdV:AsgAnLUZsOPNSNvIloB+RK0/lW
TLSH
T11F434CD3E9E04CF8D27BC8B49EFA2785C99731C82654BAF607103547A7233146E994BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c6ef790a1a5d71c06e325ce0b55dbf856c927e87d0b1c6324fe9ad4aeffe783

File Explorer

4c6ef790a1a5d71c06e325ce0b55dbf856c927e87d0b1c6324fe9ad4aeffe783

.exe 58KB

4c6ef790a1a5d71c06e325ce0b55dbf856c927e87d0b1c6324fe9ad4aeffe783

IMPHASH 9e9841e663c8c16c52df2b421e971943
SHA256 4c6ef790a1a5d71c06e325ce0b55dbf856c927e87d0b1c6324fe9ad4aeffe783
MD5 b472a1d18d975d34e54c97f5e448292c
SHA1 99cc3efeddf99acec6f8dd704f01ac3d524db58f
SHA512 13f618c6f1b542181808a87248c01e26c727e6340560acf200fc86c493b884537926a827b0d7dcf6c27d3240ae24b3ed9accd1551c5ed4dbc2b856928c3d19af
SSDEEP 768:lGsgADnLUZC0SSJ7qzu3i0lNSNvImz9DEl9WB+tvNt8/HU/mxmY0WdV:AsgAnLUZsOPNSNvIloB+RK0/lW
TLSH
T11F434CD3E9E04CF8D27BC8B49EFA2785C99731C82654BAF607103547A7233146E994BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:0 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

77824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

673B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

960B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

332B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.yvmpack

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

275B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

4c6ef790a1a5d71c06e325ce0b55dbf856c927e87d0b1c6324fe9ad4aeffe783

kernel32

generic