1a87615edd77ba38bd090cfdc7c91da8fa494c0ccb8f1bc016a5a389252c09ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a87615edd77ba38bd090cfdc7c91da8fa494c0ccb8f1bc016a5a389252c09ad
Size

544KB
MD5

c21b16cc99116dfa85d096eaf2afea27
SHA1

cd0052f1e2e97be282a3ff7374be6b62fd709788
SHA256

1a87615edd77ba38bd090cfdc7c91da8fa494c0ccb8f1bc016a5a389252c09ad
SHA512

6002f9975aa865013f7d52a939d9e80c82d3811bb483eb72791cdf22ef7d2f4a094e0845fc4438d5b7aac3e5f19ced0675c83c2e7ce8c8f3667e301712d858f6
SSDEEP

12288:CW4+p6HR3+kWWGhq71eOBDQ9C84jHptOH6hQ4XUs5YFfbVrWLd8fFzHt/B5:n4+YR3+DRhZEQ8/BhQls5YFfbsLCzHtj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Konfirmimi i porosise i bashkangjitur.exe

Files

1a87615edd77ba38bd090cfdc7c91da8fa494c0ccb8f1bc016a5a389252c09ad
.zip
Konfirmimi i porosise i bashkangjitur.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 585KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ