c355040a29f9b9c465b7278f4384def9e4eac704699ab91bee5c525a9c991061 | Triage

Sharing

General

Target

c355040a29f9b9c465b7278f4384def9e4eac704699ab91bee5c525a9c991061
Size

10.8MB
MD5

e96063883284f672112a6fb3ee30c00d
SHA1

e2d475db0a8c89592a5425cff62fa7b58e8e2b27
SHA256

c355040a29f9b9c465b7278f4384def9e4eac704699ab91bee5c525a9c991061
SHA512

8a181b9514cbace9b37469ddd8ceae5d1cdb99664eb302f6da51688ebf7892fb34aa80fd053ae97b7ceeb6c16b3ca05c8f570925ab5936f8bd7d70642b9d722f
SSDEEP

196608:1HYTYSrvto82N0mHoEbJtQG/5xWSYc/c+wS5vZJvP25jKqcC1HPfXT:1H7S+82OmHoYXqnQR6j2C1HP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c355040a29f9b9c465b7278f4384def9e4eac704699ab91bee5c525a9c991061

Files

c355040a29f9b9c465b7278f4384def9e4eac704699ab91bee5c525a9c991061
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

??4Fox_OPUSDeCode@@QAEAAV0@ABV0@@Z
??4Fox_OPUSEnCode@@QAEAAV0@ABV0@@Z

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 9.3MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE