fca0164e05c42f6fa962194b647f602f05618d629ee6e120c0f54136c60f6ddd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fca0164e05c42f6fa962194b647f602f05618d629ee6e120c0f54136c60f6ddd
Size

1.2MB
MD5

3b31f8be5aacbeec414f949c6d09f201
SHA1

5e5ba8f347e578c5d9776b8bfe00b6430c7dbb5d
SHA256

fca0164e05c42f6fa962194b647f602f05618d629ee6e120c0f54136c60f6ddd
SHA512

d09d6f368514822059841c76550af6047ebb54f1ca2aeeeaddba0486807ff2fde1e797de7e808ebe049a4062ad3f8f5960d4201e9d2e78fc0c32bb8db2fa2897
SSDEEP

24576:eH/fcPpJtfjsssTsokofRhHzUYfknlJlpFs4LJt73amBYX:a/EPOj5hHzUYfslrvt731

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fca0164e05c42f6fa962194b647f602f05618d629ee6e120c0f54136c60f6ddd

Files

fca0164e05c42f6fa962194b647f602f05618d629ee6e120c0f54136c60f6ddd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EurekaLog_PasswordRequestEvent
ExceptionManager

Sections

CODE
Size: 987KB - Virtual size: 986KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 125B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 234B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ