WrittenBytes[.]exe

General

Target
WrittenBytes.exe
Size 838KB
Sample261110-j6thgaea63
SHA256 c6651263d45648a96b78be12bbe848a28ed25a3bb0ee4c3d1b4f7810d2fcf163
MD5 b7db5de3c55124f127c3621ed3dcfbfd
SHA1 32eda8d359e3cd5c1fe94713814cf3e344352a71
SHA512 fdf2ac2c58d9bad345c240e3ea74edc1d5a317273ce6fcbf104041d92b3b8d1bde940a59b1f854cd2b7c4e0fc01664a57efad0c8ad5efa805f55dc1609118f0f
SSDEEP 24576:+kpgK0Aw4nmiMSizCneL5iIia5nkDbRoPMQg:p+w9mi1ijgiMQ
TLSH
T1320522120DD66DB4C676C63831EF3E350E60AF65201EA2FB6CC4647A971BF818C5BB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WrittenBytes.exe

File Explorer

WrittenBytes.exe

.exe 838KB

WrittenBytes.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c6651263d45648a96b78be12bbe848a28ed25a3bb0ee4c3d1b4f7810d2fcf163
MD5 b7db5de3c55124f127c3621ed3dcfbfd
SHA1 32eda8d359e3cd5c1fe94713814cf3e344352a71
SHA512 fdf2ac2c58d9bad345c240e3ea74edc1d5a317273ce6fcbf104041d92b3b8d1bde940a59b1f854cd2b7c4e0fc01664a57efad0c8ad5efa805f55dc1609118f0f
SSDEEP 24576:+kpgK0Aw4nmiMSizCneL5iIia5nkDbRoPMQg:p+w9mi1ijgiMQ
TLSH
T1320522120DD66DB4C676C63831EF3E350E60AF65201EA2FB6CC4647A971BF818C5BB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

863406

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

WrittenBytes.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

WrittenBytes.exe

mscoree

dotnet