2058c18e2add18d6caaef326d1139af45913bcd5f559aa13d192c6e0bd3870fb

Sharing

Copy URL Twitter E-mail

General

Target
2058c18e2add18d6caaef326d1139af45913bcd5f559aa13d192c6e0bd3870fb
Size 168KB
Sample261102-d6hhbast7k
SHA256 2058c18e2add18d6caaef326d1139af45913bcd5f559aa13d192c6e0bd3870fb
MD5 70c7d2a69f50e0063454f1e8c01548b2
SHA1 72db41a6a25ad96027d240502ad6ef1a1ac91696
SHA512 18ec03bc1324326a878c61affd5ecf7eae99b27fdbc279e39bf7d84db8165c4cbe9629cd81c4c82dfd073fb0d31424e32ecac33a39bd42494bb4149c419720b2
SSDEEP 3072:KXdgCckoVbAHAkflj5vQQWluMPGJZmYteBQ7apPDE9syNEHTRtINg1K+l:KQr09flj5vQQFL7C7yItt+go
TLSH
T100F3014AA193D4FDC786C83447B25631FE70BC271BF04E79681ADC355D80288F96EA9A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2058c18e2add18d6caaef326d1139af45913bcd5f559aa13d192c6e0bd3870fb

File Explorer

2058c18e2add18d6caaef326d1139af45913bcd5f559aa13d192c6e0bd3870fb

.exe 168KB

2058c18e2add18d6caaef326d1139af45913bcd5f559aa13d192c6e0bd3870fb

IMPHASH eb71753f95c493526eafc31b41dc8277
SHA256 2058c18e2add18d6caaef326d1139af45913bcd5f559aa13d192c6e0bd3870fb
MD5 70c7d2a69f50e0063454f1e8c01548b2
SHA1 72db41a6a25ad96027d240502ad6ef1a1ac91696
SHA512 18ec03bc1324326a878c61affd5ecf7eae99b27fdbc279e39bf7d84db8165c4cbe9629cd81c4c82dfd073fb0d31424e32ecac33a39bd42494bb4149c419720b2
SSDEEP 3072:KXdgCckoVbAHAkflj5vQQWluMPGJZmYteBQ7apPDE9syNEHTRtINg1K+l:KQr09flj5vQQFL7C7yItt+go
TLSH
T100F3014AA193D4FDC786C83447B25631FE70BC271BF04E79681ADC355D80288F96EA9A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

149KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2058c18e2add18d6caaef326d1139af45913bcd5f559aa13d192c6e0bd3870fb

kernel32

msvcrt

user32

generic