67bc146f00f31109cae9801e30b373d3540c34d9e73599ce84b8200205765152 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67bc146f00f31109cae9801e30b373d3540c34d9e73599ce84b8200205765152
Size

1.0MB
MD5

473d6a5508c89498c0047bff1fbaf68e
SHA1

fdb8cbf2a09547c57efcb39321997ffa39a3f092
SHA256

67bc146f00f31109cae9801e30b373d3540c34d9e73599ce84b8200205765152
SHA512

978b872e1aa731fd183bc32b724765720bac933e6bb595d602bc50751607dae4f5f6e431f2f8f7b581192700f4cb3d4f13e6cd4dea92cc20549c2a1416a382b8
SSDEEP

24576:aLV8dKCbKAyQUSzvQhjvZ+emN0/qhdyPA5MvVH:jYCOhQUSzvQhbmN0S64KvVH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67bc146f00f31109cae9801e30b373d3540c34d9e73599ce84b8200205765152

Files

67bc146f00f31109cae9801e30b373d3540c34d9e73599ce84b8200205765152
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 22.6MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE