5943caf139ba624041b986085b176bae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5943caf139ba624041b986085b176bae
Size

3.2MB
MD5

5943caf139ba624041b986085b176bae
SHA1

f27c21d394e5a7e8f16287efb483a9f0db301137
SHA256

513a1291cdeccd70948a583b42e44ee4e0179e27aed38bbbb9e7bc3901e3b8df
SHA512

1cbe4a2e4c9e015334ffbbe7c94e2db97ca3ad14c28259fb627b7006d8d828cbc7790f9ffef072dd30450934eee1f1e95c93d16c515cd2f26bd160d11032ef3a
SSDEEP

49152:996Cxni+tCaQGmtZuUtxR503DLAY1pvyfIcLmKvib4ZqNePnryZMyjT5kDAh7Muo:9955V6fuU3W1UBCklvaMyN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5943caf139ba624041b986085b176bae

Files

5943caf139ba624041b986085b176bae
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 240KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE