DEVIS 23-1-1269 FANGET[.]cab | Triage

Sharing

General

Target

DEVIS 23-1-1269 FANGET.cab
Size

534KB
MD5

edd9db937caa5a68661dc1796968bdc3
SHA1

3699d1e8d42e18cd40c81daf683fe9feb32e7331
SHA256

aec0a12e22dc8e6a2ee6eb88f8ce7d17897a44c7c3f9b122e741dcaf2da3c73d
SHA512

ed84c4f9895a1696fc3a8c30b6685024488e203713250455ef02adf9804307644f20ae4e14e12b6cfe15a08c40b0660cfd0f51610a334571d1042a24c8294e90
SSDEEP

12288:wxh1/mXtYy+Jwaliew4tnxxnRg+t+Qjbd+g:QwYy+5rHFbwg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DEVIS 23-1-1269 FANGET.exe

Files

DEVIS 23-1-1269 FANGET.cab
.cab
DEVIS 23-1-1269 FANGET.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 539KB - Virtual size: 538KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ