0b08910acf94ea0e1e7aeaea6b37cb30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b08910acf94ea0e1e7aeaea6b37cb30
Size

131KB
MD5

0b08910acf94ea0e1e7aeaea6b37cb30
SHA1

3e577a055b10c3cd81bf40d27428d18e5107bb71
SHA256

d700aa54049be9c1a0306ae6d32ac24f7d5542d97a442b4e66737448119ab19b
SHA512

55374571b7ba424f3adba6f2acbe271777edb1331d56a1fa7c103e7c4f020f299cfc28b8e7250327eb464f1653398fbc4ab3dee3e689b0336fde0da8635515c5
SSDEEP

3072:0nHXMpxcGxFyhQ0bOqYW6Qn6RuhCmICnACTIUAf9QnwhmHY:kHmGY/o0W6Q6R8CsnVTI4wh+Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GOLAYA-TOPLESS.exe

Files

0b08910acf94ea0e1e7aeaea6b37cb30
.zip
GOLAYA-TOPLESS.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ