c904007b7422bffd090bed58d3e69554 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c904007b7422bffd090bed58d3e69554
Size

947KB
MD5

c904007b7422bffd090bed58d3e69554
SHA1

f5ac472b8eb1eb1ababad28ca22534082c1773f0
SHA256

945c4252c5caea0cb0c4ac3eeec45d11f4b67c138defe8014ba67b640481ef72
SHA512

f5d87fbe56347a5cc598e6f646ddfc6de41a890ee8d574e1c41595ae33ed21f275ca0ce98d506271d039ddd43e4ff479fbef4fcce1f4b3035f41e19564a3ca8d
SSDEEP

24576:rHwcpFIZKfL5pNK7jqpczV48cIiLKX9e/Ty42aHGxso9G:rQGFm6N6PqpczVmdKXgby42aHGyok

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Attachment.scr

Files

c904007b7422bffd090bed58d3e69554
.zip
Attachment.scr
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ