60af1c22f543e679de4d619fa64d9b6644a5d4f3e38c12cabb98ebaebd5011b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

60af1c22f543e679de4d619fa64d9b6644a5d4f3e38c12cabb98ebaebd5011b1
Size

5.2MB
MD5

5219bad54d7567a250761727a5f156b2
SHA1

c27b40868e0b3b84b62caa64b26e0c126aa1558f
SHA256

60af1c22f543e679de4d619fa64d9b6644a5d4f3e38c12cabb98ebaebd5011b1
SHA512

88b03e4b9a1901dcdd70f9847b65cd19e28c8a1da151d358209a98f278a5360a4d5bc4e865f6478d00e59cad11c1086c4a4ad3f6f7d0538c8858f708b66affb4
SSDEEP

98304:JVp9kR/s3AAaja4ds97ISTx5yJJe5bs4dUy7DgDQ4BZIxw2a1h:2kyelTDU0bsupIk4Bmq/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60af1c22f543e679de4d619fa64d9b6644a5d4f3e38c12cabb98ebaebd5011b1

Files

60af1c22f543e679de4d619fa64d9b6644a5d4f3e38c12cabb98ebaebd5011b1
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 7.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE