samsam.exe.zip
- SHA256 0b2bd0d73c3465e22698a3a9d7dba68e94333137c1a187b351aa585262a9a294
Password
infected
Static task
static1
1 signatures
General
- Target samsam.exe.zip
- Size 95KB
- Sample261024-dp6htahv2j
- SHA256 0b2bd0d73c3465e22698a3a9d7dba68e94333137c1a187b351aa585262a9a294
- MD5 5d882c6cb68facc9c2ba1537c2e63224
- SHA1 7f625d7e27197bf907bd05a4de4561152e5d49c3
- SHA512 298a8e9b779142bffc8f4de9cdba91e15e7171388a9c34e0d2ac91d92d9a5fc2b9e7890e72ec76974c2a3805904696c0ff6108d4213807818854f721eba712a3
- SSDEEP 1536:bWByYpO/unmTtRAgB//Yp8LVWC48enRB+bqK9deNEKNT7dDV7tSxBPVHkhbp:aBbjmTtRF3tG8i/GIEkT7dDVhSxBdHkf
- TLSH T12E9302EF60F6E3153A8E05F450205BC4FC076B19CCA156F8BA0C167B74AB90AF1BE548
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/samsam.exe.bin
File Explorer
-
samsam.exe.zip.zip 95KB
-
samsam.exe.bin.exe 191KB
samsam.exe.bin
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2f294d301d8bb9b947f41faf20df104710d5c4b2f469145d4e469ca7d1998b2f
- MD5 ddb102441a810f15bb87b0f6f39d152f
- SHA1 01b22392287258d6f751df9b858f57d5e1c90b9e
- SHA512 c562a9050c987ef85a5b87795e2ba84f7b629ef3873ef2c669c5b8b6421755b468fd225ed5de4f06345dd5badf11849d9272eb3bc1b24a124b34a323b8a02050
- SSDEEP 3072:4dp01i6vcHV1LI5FLV0pZeZKfOJizjrBnNtRg+ur199Jpo9DWro0n:X1i6UHVyLV0poZa1jrD099Do90
- TLSH T1EF146B2433D4C172E0A71D3546B5C3B24F7FB8769A29998FBBC906790F22794DA2131D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
200910
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
f:\SAM\clients\Sam4\enc\SAM\obj\Release\samsam.pdb
mscoree
_CorExeMain
Name
.text
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ