2dee070dcfe5c99b14f7c37cf719304bcd872e0d0c75d7e314d83aa36832a91a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dee070dcfe5c99b14f7c37cf719304bcd872e0d0c75d7e314d83aa36832a91a
Size

8.9MB
MD5

7df1b5731c6663de811f4f61eecdc68b
SHA1

4b9562764086f0dc4310d6335f3b3d1f8230d203
SHA256

2dee070dcfe5c99b14f7c37cf719304bcd872e0d0c75d7e314d83aa36832a91a
SHA512

f9966933e9950a34f60df7396dc19098229286dc89b523a75a8d9802edfca44b7a7e753c6183c46bb38a57d222cf2c562f7690a47c7845302e53cc1d4b808994
SSDEEP

196608:hEnEYTJCgZsOjhL+wNPUyJcc1KqWYgedXYgsEPGx:hEN8g1jp+cPUyJcYpVrPa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dee070dcfe5c99b14f7c37cf719304bcd872e0d0c75d7e314d83aa36832a91a

Files

2dee070dcfe5c99b14f7c37cf719304bcd872e0d0c75d7e314d83aa36832a91a
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 8.6MB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE