d8b674e728f9fedf6d2e851be64937d39fb57f610dcf84a637186a43a49271f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8b674e728f9fedf6d2e851be64937d39fb57f610dcf84a637186a43a49271f5
Size

3.4MB
MD5

a4c4fedc94e1aa914395a0eda8eb1af3
SHA1

f0763ae254ee7113fcd3055966f60f8e38bdff02
SHA256

d8b674e728f9fedf6d2e851be64937d39fb57f610dcf84a637186a43a49271f5
SHA512

d58fd76864acd1c009d82e06ffb7156d8d51562a3da80d0d6d3778b28d8f25b01f82caea3608bbccffe7a6e41798fe85d4ae02585e6848af3ffb67c8c6ae6d73
SSDEEP

49152:VI2d0VL4ZQfgTCONOGHu60f8Y1bGDQTLnjEseORFccPa338GM98xZfkwOHVHJexp:KpFfgT3Hz0f8YFcsoISTx5yJJe5bs4dJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8b674e728f9fedf6d2e851be64937d39fb57f610dcf84a637186a43a49271f5

Files

d8b674e728f9fedf6d2e851be64937d39fb57f610dcf84a637186a43a49271f5
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 7.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE