7204b29aa45d29edf77a1d75cd7b3dbb | Triage

Sharing

General

Target

7204b29aa45d29edf77a1d75cd7b3dbb
Size

125KB
MD5

7204b29aa45d29edf77a1d75cd7b3dbb
SHA1

1c399cc37cd740a13b611fbfbc18f526eb295732
SHA256

6b5a7acff491ceec8d77b26b6d23fffe67066b6b37eae07514dc071d6819dbea
SHA512

1a34d32f891a0922ecaddab455c6d8feac1ff24bab8b98608eee5dcc102bd2e5ab82a27f6ad5ef9985874e2a4c0cca422848893329b8159b19a5ea15311aad86
SSDEEP

3072:ml0img13tG90HdQ3Sqtc8vPfvvaKRUwKu5FngyxqWV8Z+V:mljpD9Q3TtVXva7GuWV8cV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-SEXY.exe

Files

7204b29aa45d29edf77a1d75cd7b3dbb
.zip
GOLAYA-SEXY.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ