98db4fbe78ffdd24c6498c717bc7d855ab5137378f57394ab8d002f936157c48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98db4fbe78ffdd24c6498c717bc7d855ab5137378f57394ab8d002f936157c48
Size

2.3MB
MD5

ac3007e3eb355cffa9a8c3ee907c6261
SHA1

faecb5cd49875f7c3713ca0224990a839170595f
SHA256

98db4fbe78ffdd24c6498c717bc7d855ab5137378f57394ab8d002f936157c48
SHA512

16a3c60a9b5d3a242c46e0a049b0978cf877b4c7b2f76ac06b90812dfb92577d34207bb4cf18c0afadf13dd4695ae5ce9dab558c7a7489d041f0277ee9178967
SSDEEP

49152:bAr1hqzj9pujbJYK796peNFfhG828ICm0:XYjbJYKkp6lhG8LIC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98db4fbe78ffdd24c6498c717bc7d855ab5137378f57394ab8d002f936157c48

Files

98db4fbe78ffdd24c6498c717bc7d855ab5137378f57394ab8d002f936157c48
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 664KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 1.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE