68480a453a5e6988b2f370a17d37112ccb20f5cd550a94b532126d42b69aa8ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68480a453a5e6988b2f370a17d37112ccb20f5cd550a94b532126d42b69aa8ac
Size

3.1MB
MD5

cc9df85944647d83145b8bd495fc11c2
SHA1

d29fafe51eb893db0f30654983f2e65cfb4317be
SHA256

68480a453a5e6988b2f370a17d37112ccb20f5cd550a94b532126d42b69aa8ac
SHA512

3860518cb1f3fce8d1a78c05e90e229fff4f6b040f99a5ad642439f76d66633723e7fa18ed35250ab72c669e4f35b33a97022851e159e52c1ba6c677cf45db39
SSDEEP

49152:KMKgb9TR6PeMRFr5KdDeB4scfWRRpilPEpNW9Nsazgiw9mAGenGijWg6OfcAbdJ+:XKcQRF9EkcfWRRclPEzPFiwr3GsPJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68480a453a5e6988b2f370a17d37112ccb20f5cd550a94b532126d42b69aa8ac

Files

68480a453a5e6988b2f370a17d37112ccb20f5cd550a94b532126d42b69aa8ac
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 544KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE