6143fb4cedeaa99e18a19743df391b22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6143fb4cedeaa99e18a19743df391b22
Size

314KB
MD5

6143fb4cedeaa99e18a19743df391b22
SHA1

ef3c5fbfacd4d01ff4d1e1649b5d1e8060f17998
SHA256

71dc7873f53f6e155bc2f149eb39a3d3f017279fce8a8035fc239e616e782e46
SHA512

3c891eb842e14f45fe537f7f49f2f696cb6d6410b132c0c1491d99acb2b5eb3b81370ad987fe8e7ceae61c0239dd8d3c49910c32e7bb95f4d4ab6dad0c0c50dc
SSDEEP

6144:CafihEgIEAL4KODz7pXhY1tgXvrJkFlk/+JP13qdN2G70iGL+:CaqfIsHNXhLNqxJP9620oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/monaco.exe

Files

6143fb4cedeaa99e18a19743df391b22
.rar
monaco.exe
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ