5a4bc11de471847de8fd03263de88644 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a4bc11de471847de8fd03263de88644
Size

99KB
MD5

5a4bc11de471847de8fd03263de88644
SHA1

6e4a2bbc6d4da03819c18bb3320134fe1e4136d3
SHA256

3576fbc10cad27f9b1217ba6d86dff427a250fa0affccd4553d9c0f69046dc28
SHA512

9fc30ba175913c2250dc2de12994f38a1a670d3f47561c6d2990b8737f04ae19ff59b4e635753404367ccf332563cdfa10671accef26d7963a0f467306425d8b
SSDEEP

3072:a47excGxFLPkH9SnbZDaHjS+zFD8ZIde/2GPc:a+eGYtPk0Z+HZFoZIde/2GU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RUSSKAYA-GOLAYA.exe

Files

5a4bc11de471847de8fd03263de88644
.zip
RUSSKAYA-GOLAYA.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ