2abf69e8f76f303e48a3764616a3ab388ed6769ed99985e70463deb270110b10 | Triage

Sharing

General

Target

2abf69e8f76f303e48a3764616a3ab388ed6769ed99985e70463deb270110b10
Size

7.9MB
MD5

edb25acfde2a776df40f8edd9b17d00d
SHA1

e5431241a0aaa6b3ff2a29a4e490e1a897fd3cb9
SHA256

2abf69e8f76f303e48a3764616a3ab388ed6769ed99985e70463deb270110b10
SHA512

7545a961d579743ee4186cab64c0ecbc310c674eacc67e6a129a8b870d8852319b0ae8a38a076b63f84e03c5e3f2e513710827465510adf7228adb63e0c6f000
SSDEEP

196608:zj1b8aPXCFLOyomFHKnPhVYQ37Sdd9iD+nt3Pq+kcF0SfSd9g:96FQVYwK9QORy+7Nqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2abf69e8f76f303e48a3764616a3ab388ed6769ed99985e70463deb270110b10

Files

2abf69e8f76f303e48a3764616a3ab388ed6769ed99985e70463deb270110b10
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 4.0MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE