f81b82b0fc9516d9517c82e3954f815e0e9727d35edae89f42e1a5dcdbd87521 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f81b82b0fc9516d9517c82e3954f815e0e9727d35edae89f42e1a5dcdbd87521
Size

2.9MB
MD5

533fa0c1a4e1062f79b16637ab019300
SHA1

6b5c0cb9d501e3bfb5a3bbadbacb045d8d56e063
SHA256

f81b82b0fc9516d9517c82e3954f815e0e9727d35edae89f42e1a5dcdbd87521
SHA512

9301c92ed6eebaf5fee75c6a719809f73314f6cba6618eef54c2a2853fa98e83efd4e76ce4357c73fdf94bb0840c2e164f1543e02a9276bde59a5f2618ff63c7
SSDEEP

49152:GW8cKly227p/1ChlQ6cW9//kGvjosLlgV61/V/VqtKGMgYszSVsOAEeiH3YV4Vpd:GW8Bl/2ttChl6Wh/BjosLlgV61/V/Vuk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f81b82b0fc9516d9517c82e3954f815e0e9727d35edae89f42e1a5dcdbd87521

Files

f81b82b0fc9516d9517c82e3954f815e0e9727d35edae89f42e1a5dcdbd87521
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 516KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE