a476f3dae90de19aed0ffe26016645a9d69acdfd11a74b2f9445e757afa71e1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a476f3dae90de19aed0ffe26016645a9d69acdfd11a74b2f9445e757afa71e1e
Size

3.0MB
MD5

a7283db7f3078d4fe501e315fbd365f5
SHA1

021f96942c3ed133b08a91a39d35d5636d480281
SHA256

a476f3dae90de19aed0ffe26016645a9d69acdfd11a74b2f9445e757afa71e1e
SHA512

79e3e8e44e7e673da89366ce66721928377b59519f23ddfc35425510db256f738de5089859bbc7e2fe392dd463156a513da5d8bd223068f12163cf5704b5b418
SSDEEP

98304:zcTKspr/kJQN5TLLeOgUWCvS36bVp7GwPp:UpzkJs5TLuWa36bV4wPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a476f3dae90de19aed0ffe26016645a9d69acdfd11a74b2f9445e757afa71e1e

Files

a476f3dae90de19aed0ffe26016645a9d69acdfd11a74b2f9445e757afa71e1e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

??4Fox_OPUSDeCode@@QAEAAV0@ABV0@@Z
??4Fox_OPUSEnCode@@QAEAAV0@ABV0@@Z

Sections

.text
Size: 522KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 2.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE