5f7382ce22a3fe374fd501c977976ff4 | Triage

Sharing

General

Target

5f7382ce22a3fe374fd501c977976ff4
Size

128KB
MD5

5f7382ce22a3fe374fd501c977976ff4
SHA1

31965dec5a5270f5b0546470b20e0674a8f8cefc
SHA256

70f26be51e92bc24fe8833f62359f4ff1c936f5993ef60437de9a8f6f013e535
SHA512

dd9013d35d861ee7feb89e8cf33d23bf49ccb713fb300101ceb27ee9d6f2a5b6380bf44ffde068e8ef692a117f607a39e016014b6ea60b0bb3697f1cd8368f16
SSDEEP

3072:BnHXMpxcGxFyhQ0bOqYoxIcEWubRNcPe9d8T21:NHmGY/o0o+hBbnF9GC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-DEVOCHKA.exe

Files

5f7382ce22a3fe374fd501c977976ff4
.zip
GOLAYA-DEVOCHKA.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ