33b79b5133166375c45468af6a6a47fd142f9db8f68fb29587e9f1c74036659c

Sharing

Copy URL Twitter E-mail

General

Target
33b79b5133166375c45468af6a6a47fd142f9db8f68fb29587e9f1c74036659c
Size 93KB
Sample261107-qsbttsdv4q
SHA256 33b79b5133166375c45468af6a6a47fd142f9db8f68fb29587e9f1c74036659c
MD5 d9313713ed687f9a8bcc891204b4c472
SHA1 fd64e782ae0cefb90c96c014ca6b2c53585db3d1
SHA512 426578e709742c7a172ff4c8cb8d21f61ccae97d145f1ac14944637ca1a197aaf2a8b47e5465bdb84f82af6e4328dbb1e41ff8483eeb55ff989b10a495ca673b
SSDEEP 384:IKCLZc2mWRCATalwFD79nqucvo9T37uY//P4OB0PCeqGrsfRfYdVwL+nQax5Eyi9:I/NcJE5dX9quCox33qA6pz+VcYILfs
TLSH
T11D93A6E077A95989EE31C23C58ABC331273DFED117929B1B9105F43A2D23ED43E89685
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33b79b5133166375c45468af6a6a47fd142f9db8f68fb29587e9f1c74036659c

File Explorer

33b79b5133166375c45468af6a6a47fd142f9db8f68fb29587e9f1c74036659c

.dll 93KB

33b79b5133166375c45468af6a6a47fd142f9db8f68fb29587e9f1c74036659c

IMPHASH 08e279b4c550eef000d65ad3b765edd3
SHA256 33b79b5133166375c45468af6a6a47fd142f9db8f68fb29587e9f1c74036659c
MD5 d9313713ed687f9a8bcc891204b4c472
SHA1 fd64e782ae0cefb90c96c014ca6b2c53585db3d1
SHA512 426578e709742c7a172ff4c8cb8d21f61ccae97d145f1ac14944637ca1a197aaf2a8b47e5465bdb84f82af6e4328dbb1e41ff8483eeb55ff989b10a495ca673b
SSDEEP 384:IKCLZc2mWRCATalwFD79nqucvo9T37uY//P4OB0PCeqGrsfRfYdVwL+nQax5Eyi9:I/NcJE5dX9quCox33qA6pz+VcYILfs
TLSH
T11D93A6E077A95989EE31C23C58ABC331273DFED117929B1B9105F43A2D23ED43E89685
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

540B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

4KB

Virtual Size

84B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

33b79b5133166375c45468af6a6a47fd142f9db8f68fb29587e9f1c74036659c

kernel32

ntdll

ucrtbase

user32

generic