0bf331ede2a2cf3d6942182c4b1a6704 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bf331ede2a2cf3d6942182c4b1a6704
Size

1.2MB
MD5

0bf331ede2a2cf3d6942182c4b1a6704
SHA1

4b3eb37b634d38953056c64e005374b1a58549d9
SHA256

c71fd98c42c0bf16e1c20234434dfd1f2015a839c1644cc4d299c87c45b3c609
SHA512

de336f74cc40c2ee82e076913d6476c1ac5724105dbd18fa7218ae5343de28a72211e9685e525d4736bce798645b1730d61163f366f70eda8a2f5d1f73fb715d
SSDEEP

24576:nh3OUG+ykDnKn3/kh0OQqPvTllSu+uGCYjXWmA42gJYOCj:nh3ZG9Qh0OQ2nyuGg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bf331ede2a2cf3d6942182c4b1a6704

Files

0bf331ede2a2cf3d6942182c4b1a6704
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 288KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE