597a386e54c686b3cdec8eb17d4d6fe8dbfd62be44ac15b9da8c895c554afa17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

597a386e54c686b3cdec8eb17d4d6fe8dbfd62be44ac15b9da8c895c554afa17
Size

4.0MB
MD5

59884ead4bfb64c3d66c30a2c157ed96
SHA1

9ed066e82eefdfd73041e7296540191c7f5d42b3
SHA256

597a386e54c686b3cdec8eb17d4d6fe8dbfd62be44ac15b9da8c895c554afa17
SHA512

ee5fb48aaf3b86fa4b6f4c6c064a62c6eea1a37e1c8153d4124e491f42b4e49fa185fd9a393e1be62a45af4a58e7e83786aac8d6fb0278a7bcaceb4887c819b4
SSDEEP

49152:ucCM1/SOTthB7f6F/QPIvk/qqWfynzU3McCM1/SOT2Qwt39su+oMq:ucCM1v9iF/QPIvRozU8cCM1vAl9su

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
597a386e54c686b3cdec8eb17d4d6fe8dbfd62be44ac15b9da8c895c554afa17

Files

597a386e54c686b3cdec8eb17d4d6fe8dbfd62be44ac15b9da8c895c554afa17
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 3.0MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE