c953945b8c611786f60aa5bca7fb0db1d6bdaccd0236ffcb7ebfdeb784328930 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c953945b8c611786f60aa5bca7fb0db1d6bdaccd0236ffcb7ebfdeb784328930
Size

2.8MB
MD5

23012611ceda0565f583c1dd24fac093
SHA1

b9c21297b88d011e85993603b33d4e211a6e37fb
SHA256

c953945b8c611786f60aa5bca7fb0db1d6bdaccd0236ffcb7ebfdeb784328930
SHA512

cc838ff5267a714933036e9ec2f2c6d1e4d1bae9e375988f764e725bd249ae9838e0229ae887c78817bddac032a89bef8a50ef9f1b5c55edeb25559891a98dc1
SSDEEP

49152:Rrh7p9RvyUSlMc/vU3AAaj5Tjjg4ds9CtCQXccPa338GM98xZfkwOHVHJex/18+:JVp9kR/s3AAaja4ds97ISTx5yJJe5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c953945b8c611786f60aa5bca7fb0db1d6bdaccd0236ffcb7ebfdeb784328930

Files

c953945b8c611786f60aa5bca7fb0db1d6bdaccd0236ffcb7ebfdeb784328930
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 7.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE