0badd449d0178dc13e8e615e81616aa9 | Triage

Sharing

General

Target

0badd449d0178dc13e8e615e81616aa9
Size

57KB
MD5

0badd449d0178dc13e8e615e81616aa9
SHA1

7dab9805ed53e41a49230eb15e272d124ea1e974
SHA256

43dc190e62aae74d4c09b08b717b61d7a6573ad46461fef1ddfc9a72b19ed94d
SHA512

92cc741f63a3263177237339c016781ca014a2eb079d5633e209273e050d9e70388b9c8ef489b2cb2aa909a1a98e604701445b71a5f2d410681fe3571980ccd3
SSDEEP

1536:KvwSr8TzstxZUswmNPIBzIpStI3R9fynbt9vfwtx6CY:KvwS8/oZ769IpSi3vynRJwP6CY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FOTO_DSC_JPG.com

Files

0badd449d0178dc13e8e615e81616aa9
.zip
FOTO_DSC_JPG.com
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ