1dc28b2b24d0a85a41573dfe8b2efeb9f165fcb866afd68d5abc2f23874725f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dc28b2b24d0a85a41573dfe8b2efeb9f165fcb866afd68d5abc2f23874725f3
Size

1.0MB
MD5

9c1cd2a3278846ba1032f4efea85fa5d
SHA1

c513bc960480cd27fa3b5fed1535580eda5d8e54
SHA256

1dc28b2b24d0a85a41573dfe8b2efeb9f165fcb866afd68d5abc2f23874725f3
SHA512

b04cc6fa7a455942d072f285faa425c7ae53ef6e7208cdf5d3923ee56daf2247cf4161d3e183838c6e454ef95528aab805838c161a11d381f8653c8a57a92657
SSDEEP

24576:8I4r9U8I4r3q/ogIV+BVOU+Oy9pypF5hh0U:QzfwOU+O8Q50

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dc28b2b24d0a85a41573dfe8b2efeb9f165fcb866afd68d5abc2f23874725f3

Files

1dc28b2b24d0a85a41573dfe8b2efeb9f165fcb866afd68d5abc2f23874725f3
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 332KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE